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"]}, 0x7da) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r5, 0x0, r4) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:47 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x8) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0942acbafceb7f2a72b48bb88366a3dd4f573baaecc40b2fe94c1a5ce4285ca09afe65a69a942730ed93e2d46af9d301c7ac4e5fb147001000007604f56f231bff548292b03300905dbc054cc0941f7cab9a86010bca4caceafa4c4aa5f248d85c62aa81987027328db6d081e4becd6f073516cdbd267e45dc34ddaa3d087c78e52dd999cb"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={[], 0x8001, 0x8, 0x2, 0x8, 0xee, r5}) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000d0000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:47 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00000f) 23:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000d0030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:48 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_dccp_buf(r2, 0x21, 0x3, &(0x7f0000000040)=""/65, &(0x7f00000000c0)=0x41) socket$phonet_pipe(0x23, 0x5, 0x2) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000010) 23:36:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x240000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000006c0), &(0x7f0000000100)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000640)=0x8, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) syz_mount_image$ceph(&(0x7f0000000280)='ceph\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x5, &(0x7f0000000580)=[{&(0x7f0000000300)="db34bfedd44e637b", 0x8, 0xb1b7}, {&(0x7f0000000340)="10a877b180e79f731c578f641ea17e002459a3", 0x13, 0x6}, {&(0x7f0000000380)="dc1f1df30d10a0a9aa15f83d1ec62eaaac6bea9054eae1d52ee6f25bcb35e882df7206cb55033ce198565c323c8c261bc130bb8d54869529b763033c73f41b16c925eca8c028b761a8d8760ecedd4dee8df0b2f4119ee74f408e7fe628284d8700a1c52c06b2e8a8dc7623487ffaae412bbfb1358807c2e2c544279bd17e9d85944017ef3fad633c8bafe467", 0x8c, 0x8e}, {&(0x7f0000000440)="cd880983fb4ebfe4f9221bd343b13be2970c38d8122b6364a1f39ee061ca0db11b5fc82d1e319aa8fb09531e41a1192e9c9c341d92a2a9edfc018f617a3d645299740d023612fa154fbcc108123524c60a98116807a6a8cfe4b0f1d7af1c71107cc474a06b13adceaddd92afb39fbb35f4274d3a7dcb7a104a634d81d2cea1eb901321afa5aaaecd40ef4603fb9b9f4ece967fb97697cf7b85ae5b49b218eda0f564233e2d6b6b8ef52444f7a1d5f5a407328a12b92a137cce5668d0ee62e74431f745d564b4343cd67d9685ba0d0a23c0ae2cd96ed861eb57f52cb8bedf561910ca5b7a01d4133f05355467f238f5f7a3d358", 0xf3, 0x8001}, {&(0x7f0000000540)="2ef01b2341a7035e9aa45eeda012f683389516d6cfd3b3a1883850b7d52631bf5b", 0x21, 0x10000}], 0xa63428, &(0x7f0000000600)='\'proc\x00') r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x141, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x325280, 0x0) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = fcntl$dupfd(r7, 0x0, r6) syz_kvm_setup_cpu$x86(r11, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000da030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:48 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:48 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:48 executing program 2: msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000180)=""/211) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x20a2}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000080)={@local, @broadcast, r8}, 0xc) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="01ae8a72a63615914fbffae6a5240000", @ANYRES32=0x0], &(0x7f0000000040)=0x8) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000000)={0x10000, 0x1, 0x4, 0x7}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000df010000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000011) 23:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000e4030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) r4 = socket(0x28, 0x800, 0x81) sendmmsg$alg(r4, &(0x7f0000004380)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="87a8e692ae009f3994349b3d54a483ec7675a8bceb7a9d47afbe880ffa156dc61fe5918901fd59ba59344e8cc7a130dae785f67c5db63077f262defbd807d91a0382cc454916033fa3c42454a73b97966e73deec9d7b356bb5fccdfef3529ebea8d10bbb7c2e51578c710dd40ad1c0ad22d1d874be19fb20a9ce6fcb9d073d1eef60f446048f29e078090ff6376337ef31c90f4ab65dfcf94854c7f02be72aa3a609df0cb84529080d8cbef55936d4ffd1852871ca59", 0xb6}, {&(0x7f00000000c0)="b29de02040b3b525e04665313d7489b25c2482c1c6f91366e84285c2f5b4f20671a467613c665b56e01c7e", 0x2b}, {&(0x7f0000000100)="a76994c66e4191246ad9a6a720692c0cee474e8f4430d235436f8c", 0x1b}, {&(0x7f0000000180)="2d1c2843e99c5a27d54300039253f9f2d0b198adaf592e9e7dd250e2e846a96af752a059f2a57ca822dc80c125467cbe6499a5bbf42fe8e337a4d04fd98afa8a44811eb054552301aaeedc3aeaae52848444b3e5ca37bac5f2ffb7a01bb7d4779f94afbfca1fc87dd8ce0099600ab577e31d1ac92b67931320e1a7b86d9352d4a57f9a582d5c2cf67dd8c484047089d4850fb6", 0x93}, {&(0x7f0000000240)="60a0074ddaeb09b74fb013a4cd4cd5677b8a6cd30a229b68631c78958d4c25ad53cb1a741c4840c1686ba7fb8dfd61feac4792e7eacbb630055f17e2983ad9da41519c51fd062d95f12ccfba0f539e6355c0800a5bb67c827472753cc3d78d5ba493ebf5bb7875ec6b99272afde063e36b853c63f5afd393ee76c786528999b8bbc43f783028c743d9b9764e85aaf10dfad06b8febaa9ff643c12042c2dbd088fc4f27f69e41820d1ce11cb5a1a59fe7bb7b96e1172126fea5eba6a18834e400aefb46617585207c5c5323bed9e880088c5f48df752c49d7a24f15e7436e48da1addea9eeee52bea0cb2d19e774f17", 0xef}, {&(0x7f0000000340)="44fbc92cafeaf109041c72fc36283534cf98dc46514abaa0d7c5b27a5173979b379ebb4dc9f654cbe57f5ac91ad45ace292b7cdb", 0x34}], 0x6, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18, 0x4000}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)="8267c8a45c6d2c9bb384b0d64bc0fd359589f85ba24ad011a5888b82c716784c4e28c802641a8f8f3dea24b06595883bba9b7d494f9583b5da68eac740a1e7b7c4a30c56af7d4404ab39f288d6f539c52bea5039aeae1c7a81bd52de186b4d05cf6d6955f74f596e3736c7e5cbc71dcdc3ddc8ac57a13fc98e7391d044e9a3", 0x7f}, {&(0x7f00000004c0)="0bfdf034e3188eb0da51a33bd691d208cee571d03f28843f466408d91a6f2d04bc6b8842aea6093298c15e72f2419aa2b5403614c4823dba6b60142ca7a9714c765a6b7eff9b67d8144ba2b6aa75358b23cdc6525a2adf22acd2c6f4a3ce3ee58baa7cb20c38899aee3fd7049d6df45f953f24e9e252339d29c4dde6e3cfc9af88994e66ed0cd90633800581748924020121d1b89a22198c4835dbbc49d1baa53f257a91aa7119f262768c7e65285ff3f515d7cc961afc10f5474ccdf9a5b34f28ca6ffde94ecf4f8433080209525ebf310ab7ae2a8b969224bd3f07fb98dc0e828b1289f06d16d2bb590cae5c", 0xed}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="5ba419ef41927d624e3b9042ffa0a03ab246d3b5842f0a4631543c9e74ebeb60d39f6955f1a6892537294c58595a587f2a8b0367fc6f6e2c4bb2d3e67c8a675d953c7e11991d436054b6b462dc649111be1114aa3458ace2214888c526ed1cf9533a7a3149f03672a05c951cd71457b1c7015570409831f34251f7f2fcbf732a853e6b8168101b88aea7ec82dba30487ff04bf3dd28c0fefc7f295a06727d7b006952151d4d05f2fef727e8e4174fe57faeecef2b1688f862576eaa98057ba77ed2846a8b7aeb04082d3300edf4dbf2fac276543278cd075a3b38b128372272468b50edb97e67254bc818cb926648d77e449de10", 0xf4}, {&(0x7f0000000700)="7d3c3c9021d56924d6e39b95f6a255826f85faaaa19d8be2d784eae10413f2f713ea8af52bc049f036bd67213b9f4b70ab2de918e0abca9b68a4d74ba3477a7d7f5efd5436a99208069ca40cc1badb87d9795081414fd282b6b70473b5d97fe90a7e2179912b89bb325188a0873c05", 0x6f}, {&(0x7f0000000780)="989276d023dd51dd6bc92b0b9a947148322f9deabd8527f1f08595b6a5a00a0db27efbaf6847b5d92b489e1a2a6e8e7bf0428f371cd9184b82427aa832a03b977163e117c19256b0a2fcfa651f7316da65a80ab10e3b51b224cef19e832e842af4b4cf342bd46d8425b2e197f685b5deefc790a31e72a812fe5a026dec6ab759727c3b9b1cc1", 0x86}, {&(0x7f0000000840)="8f150e17ecf4c946a68eba4736461207626a597c452bc70ef73561fae3b68054b4885919e101d5ae5a9d97b363ae6e9ee6f1f95a3ec50d8f3e45548bb8ed1f0c3670c0d35372b57f47d812b5824993306edec705ba847af7da62b935a592f70abbdf7d13e83635f2250bbe0bc6dd5ad0f4b54756e1", 0x75}], 0x7, &(0x7f00000009c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x25, "3d24b7464bcfeac3370761bb84b1f147c1bbd295c0cc9a948a88f7433db0b3f558820425d1"}, @iv={0xf8, 0x117, 0x2, 0xe1, "98fa8616c6ddf2583de1bb5d8bc3442f531ff3c82e982a5f2c76d25515c28420368acf33bbe5912ad345eb9c9214736f81801e09c0035208940f8acf7771d521e6b18ea85559acf0a71af1b27f345ccb72a333a7a571add23c2c8e7cdb32a9ee12e36272cdc72233c663e56e47db6648d5e802b99f3035e0f913d2e8036aa2b1b7778d1c72d0dfc7fd6c36095963d405bc3aea56e310d5d3e10d7ecad0e27898a2c2b87baf20a32de7cd57332810f341386e3ca02d66927140b6483783f6c10a19afccde0b892d8c005d3400836d30e094c397a1e34ac73bd508a73f6accc23b3b"}, @op={0x18}, @iv={0x78, 0x117, 0x2, 0x61, "dd7027f278b802a3e2d2fc2429893cea09354f141ec9efcb341b004ad955c0b7125d8cfe4b3c3e22e7cc08cc7de2660d1660a5680ae4bec07fa8affb8020cae7687c6feb9b5b179606adad8498515a56dfe07f0dda46a20d6c3ea431b1f3d79d4b"}, @iv={0x1018, 0x117, 0x2, 0x1000, "8423541d9619d65d2f85f48ec1456041fa259f5aaac00cc0f1f3ef4ce45f2eb773a30dd029a5f5c97d691f2d2b83598521410f5286f63e0a515503d29797006d2d5f5681eca36289f6f691a89563bcbf37539c965f595cfff50f30d54efae9812954f5d43dde7908c1953243f6e54327f1579acff3b672e63f6df5db9a328d634b05b8407aaaaf948cdee1155a771501581b8a7d2b76fa5051e8ae2dcf63e605775b00818fb07a0f228c0c0b21b1c499a7f700dbb6975446b75af81bb10eefd48e15a4528469c09341e3109f342645c3343e614ae1f393e5264ed71b556d42ddaf194936f24c6b1c74a55eee9eaec83ed55e921ef8c2325e75df12152874a04ca86fd12a05af7b54e4a74c59a27086169765bb4fa3acdfb45087c3d6491fd023862979be4d73efa4eb501f661e3974f03b93d997a05d61da5aa83d6518c8156df891c2907090b7415c59ea125c670e72434e46081094f8bb35e69dac9a48e2f11c03c540c907feceacc74b5c63cbd61b2b1867d937b0ac412bf45b9628652c1f8e392c82d2ac56a31b206609ae8336f805fdbd30ce971c7f7353db4e4c64d079d65ed7c56882590b2625cabcac9934c87e10fec2390a5f9ab35074d96354d9d58de9306e1756c5bbd8289bae64e992e695992e531e627549c0cee46ed334aab3f314d224e182d6dead6223dfc294d70e9fea546ef8134eebf20f063c5fc5a140f7d80275f0f5e65ce8b2ca1c4b7888bf16983b054605fa54aaa45e5fb72f6fd252d688a21cab785c97b695d937ee87db0844eaf866fc6f6fc5b53888e28e250f4c522ae0454de1f92bb4ff1c4698d6f0b39b9e2ece15c1693534f735c787419395976bdc21e7f228412a745ef2fb89dc16bb5d7001d5c8f0c19b132fbb928249be38e9917e2c7a29aa4a22871a81ea4e609e8cb37911b7a8f91ff2fea0aef063575c7fa9d33020127605fc70b1082308cd73f4371ec5814f1a56fa19b6951b5d1c73e43ca1b3132030e6936abfa67bcb2c27b923258a3c0428ce0435e0f14cdeec4edaa9fecdf70128a2e33ee5e93603cf7e92fe9bdcd328c75c8ff343a89a4e69a06ce41e73237178fe1a27ed235f4838f7b3b80c453b9db6e0ce7b2b3a4d16d5baeac06f06993b38ba439286fdf2a310b3206996b0919fab6ed1ea4679cc36f4527bdc44d219e41424a4d636aacdfa6ede7022a277ac57d93eca2790e6e47e6085c6a3de4a6aa510818e99a54e9dd9f950e70f88019c42af0400be7dc21f0f068f79abe3f07ab341e10132693083bedd97cf8aeedf07d4d2e8b03b4f2fefe3df232efd4330521302e3324e66af2133b29d648f3dccec56f913b297b993f93f0b93b3be3f1d942d1765b35ee48cb04676834c1cec4ef43e158c7dbcd0ebc60a0559aa8cd07b2e58248fd8b2b816ea51dba97fa8401a4d6b5503f02fa3b5620c61a743fb80f4e7f94d92183b8c7771185e6863a6ee7e0ed7c1edd77d7cc7f8ec326965cb0ed10014c6518e3264bd21e3b0040e0923e550590a1c2817c730b0e5b8e3d801ec6c8e3f01ce4e947f1e876b2149c074ef93be0bf31a60039bd8ebc4d27153611788d49409a35a15a019a6fa179b8b0ca9d89f144a6ee045c81520efaf81f303bb015e33f844de37ad059e2853f088e0a752603f697969e4c08e40cf10077714d7cfd93289d104f6d32520a37e7e52fd1204998748f918fad6a843b6cb1e7985772ff52d806d71a492427010fb6903b493080d55c82a956ff067d66e7f5f15ca4967779e893713973dba3a27a8910c249d87232778168e7861a87a41ad5a5253d9612dc3715274a238c6be2f7f56de62c10144015048abcfd1a8d58d8b43a40559029f3ebd54589724f8922514eb8d8a554bd629e2ca866f23b19b0e328aad0cd61ae778fced5b0d00fd337f644be173ddbf94559b90c1923d196cf10c8e2ddfe71304370a0e424e27fb2024bb862960a653268a74d71f8550ed307bb5025cfb134214d7ce8e006642bab931a3d0eb89b34ca009a2ca2f25b1793c937acfcccdb3c13674630d4fa08e8e89aeae812a1a8c8427b37153f995ddb8a48028452130477caaaa09d692be4873813c07b22d02871372a432812cef67b15276a07514e6a50ebb4e37c95dfea07425b3064ee903aa503b4a87397263c72d9e194ad68e5054ef9b250aaa65f42882dc2ddf12ea9020c5b726d623e92d353206cac233141e7f552e5b6603a6905b81ef4b11d75f91534d40b4ca3a102882eb02977ebf775d0683a4fab9ba7c3e860d0277b7b132ee2724853d7ced1dfec3630a9526a8476268c4b9e2e7b3cc4e09ae31cb5970341c5df5eac624e28cbf151fe7538d21513832a667ecdc0309844372d0e07fc30b7fe0639c1ef4f7a6c797f3a071147cd1d7f6418ca2d8f05fae4338e55edc3b43bc6171cd2a8fc411eb787a525c1f01e342a260193056cc6899af83b3bc1cb351cb09e690f518e91b5bd4696331bdfbb6e803e5466ae910b8d9f505daa6662955bc39054e25c7a0ad1d8de04336ba7e63c1d38483c51b8c2f4689e7d01d979cd4a154ee77e41e23a53b9c6b38a74b599861bf15f3389448c77c70a5420133c6e8a8268cabf686fb7397f832f06eab26a2a8f8cbeccaecded24ee2bc12aa288be315e529ab1c114733dee7004fb0d10a050c5054e7f68ff18f55c5829389eb050a0863acc5092a93839ef7de3cbd0efe758e1efd34a81b7c79b0b7a744fc3e1aaca68308d04ab663722d35df80026a2dd0e299c7dc990c5004a6c5cb7205bdf6efaf978b97273399839cc7af29f1ec0a1a2acf66a8d738d21338e6999f0ee249628995c8eb8e087652b887dffe68be78ae640d1dbe5f8319505e168d9a0701a9856a35a4eee935183569523198547533f6097d6f7ab23317403cab168ff1b8e498ef45fa37f41814210cfe2e68f862b9cd1c1eff9880bab1e2eeaf1ea8405a795b1f7532ba25b9c0382f2ec21ce27647ac8eb6e2dbe2c0e3fa130b1de5f6bd942a4df9341573035e42997c81d65d81b7db3804814eb6c7773c5c60c32d2ec2bb9a26d1077bbe1a791fc588cb4c56bdff24895e92082c0dd024de1fe62a4e946e90c9dc5fb1ffe32ca4fc9cba3ec3bbb678b22a2703890533a2f83b385637b49d1bf8061f045986294ec80acf6099ad04585874506d7edbffe88c4bf97a836121267820ba2ccdb9c4912858ceec2c2f33819530fcb5c89112fa962a58bf7e2cc9f78fc8aa3cb25629e1e751b6ffaf83d3817bacc246c6da94c778a2378f758fb8ef587a4b9909764402b9b7fe73aff39b273b505e2b8ec181aed090b1ea85acb484d702aef4b16ad60db6571250663b11615f04bc9ca336729a2d340869820bcc03e6930407a2836e0087f34f54a0752056fdd27cf930ff33a4cc814c9e6efa56582f277c656dda6cb3d9c8996b79885a1d5a3bc4401007e2f5906acacd801ca6a84a1609898e2781681c101055d57437178994c82a9ddeb57b87b9ae65674e9ecc5ddcd64415d1391189f98ae82842baa96b4dee16944a167f144b9d594c9fb70dbb053a5a97115e9edf6b87b68882d7b0457554634849327549d09dca2b47dcda059e00476c2b033f3075ab5b2aabfcab9157a54348025bd0a6b3c4bbbca57383180643e979605d318f28cb297c7faae3bfbe2322d2dc8a7de952560c55f85525bc043cec3305143a36af8f19a8fd5b1992f5c10e77caba352343f21a520fc17b9703f3a5d2bc6bdbec5ecd5ddeb502d581550db63abac4abac9e83400c850d109cf709711245213fa2fae9450127c872772fc0fc1f1fbc5a62f870d9c6f2e37a928cf6eaf9d13f11235387ad43c8c9345e2df1ec49712294733af607126a9e8410bda93c2dfc204ff7088f0ce61f29d6d0df2b8c0b8c0d95724d27b9abe4dce07b73c8ac300d6adb07e098f4164bc3416b4d0d666868353dbec696d64bf712a08ca527534674ee2e11030f6085e2bf8e052da1894ca0cefc7b68cce210c8c7f4b2b05cfec9725124da75135e69c1fdcbf76974c1c57949ea7d88a24f8a9ea522037aebf1dc966eb3d6b73f833c897aeb55b9b9047e45ffaa658e6f0d4572f5eae13c317464a1aba287da42a19d25903c275949ba7f6783e47e24ee42ed97a55b50ccef172d7fbc7d63ab113234a8ac4960fb22983293f3f2d053e56ef1b5ac9f7425237166f62c73b27548d615d754427e4e299a206b6b6c462cbc09b910ccafc86334946fb872a988c38e977c32c09c568cb7da3c60a0edd043a7fe063d7859fd4d4498667840e75d0bb9a0410601371c40b4d9b31202fa46d2ad1810bdf40e5775d79c8ee9d1524ece1b6b4b820f9b3555cfc431fcef75e7c06977ae23ae1d6adb71b65a85b258f60551f425ca723341a0c6f049e0f1666f78ce5ffd21ceb8d131c40cd324172956053f2bd1624eeb9858dd333a0f0bb78373816acb19637f89560026308285302010ea9ab9421e8641867f7a76c07151554b95ff4611a9a9436a43c31bdc98120c494d6bc1977a641974efc1f4b7fda6d0bab8672a8acd684d9de8569d46ce2aa25f6d8d6c4ccf3e9436349b3b212b50b7a48f9ae5d653eb4672f3fb568c4757cb13899abfbce64e05d6196f4e33641f480b039b1c8a435d9360fdc91f5ea043e7b988a926ceafef88bd4a64b823d3a3dfcde58093258094c3132aadaaf324264dcd7ff1e0d9f1523b4961200db07e458c45d62ed5e9071f59de92fdc1524be67e77cc5096d7fa7ffc95687d43681b24a51dbffcd901abeda70a4df7fdb3bbf946076ce5abc1623a06de982c740961d5efecdb8a23e403db90bfac24a7283e1dbb93d4074c8aa769ac2ae04cc6fe7e0098edf3fa628037d0379d8549ecc8e44cc769aafec043dca012b72c083c64c7159bae99d80967ba7edf0565cc58626ad45d0f3df5f0a575222207a2669c9df133b8116cb3006237b07bc6aa983ce7c4b22af9462dc075137a458f2d7362da70c57cba5576316517371af4ed47ef0bb1c7ca593d3743c9d3a458b6f9305d13507097cc287a5fd26e2415ab2fb15ae596851827a4fb57e768ffe2edad4b1915606a530ad73901ad88b9b570ddd0d9805a06081bdc526196865eac11b9ce5d623f1b292575d28d0e30f8cc412ecef5834f78305fbe0003da39c82d5be3010900ae02cbf3207da29fcfbaafdd7a2615465bb0a40b57260c327f38306084de20979e26dd250a822bfba812451ee13bd278577506e9e118c5d4b37971fd8ece2ade2f54c596c9a71f8ffcadd2d7c3002d538e1d1adada6a3a585252d6bc38a0db641aee48df7a090e5424fe79222dd2e822cd1144a3ab25f61ee87937fb402159ae3919fec0f98c3e691e57e589524850fbed7d0fc925170eacc930ab0ab6e2feedb1818282c068c110312141400c97762c3df2cf055a95c62e11035a49466bd286354d2aa8c189d2aad3ae71d6e904d8616d2c7ddca496f5e8fb8d8fcfe02b043e9fa2120cb6f8dda4f319beaadbd82cfea527d5b2ce9ca13cfeb9b616a5e7f1c9262e4616df5126836efddb58088ef42d27fccf4be5015694f20a0311fe88d7938be8f57a392d101451d916c25d45306c7d1c9da975a15a257aa5a8ad9b24a3ed9cfc93c5e6ba1a70c25a84bef48c82e5d7755b327b756982ca038c6a03380a8e297d09f664fd4e3e33e31282e0e0c91981d6811ce6c793b6bdd129596ff3d1672266fe389d0ea52eef2017bd452dea3efb0083a8bfb9d01b0a310e12918fad1711882ca8a22f7ec82aa93611d70f4469c10f90bf77b10d"}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x1210, 0x44011}, {0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000001c00)="4770d582ffe625193d9f494cde4926e9e6d253d6fb0c1f16827d16cf37b5066afc5043f9c1b1484bd0b8da38ec7d6e3df4fd2c2d6e0f601365e5c700cc884f3f56ea1137398e8251ea88a422a355977a06a784e7aedf4ea87be0e2d808319a", 0x5f}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="7c9dc55867985a2228d2e21861f07f49015d8b32d0704b8442ef6524cb808e110f2f1ee6c022dcb36752aec39bd53996d45fede07990915144f6fb08f78e8af04dd7258ef75ca292bbb013011401de32ac8be5da68", 0x55}, {&(0x7f0000002d00)="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", 0x1000}, {&(0x7f0000003d00)="c0434a10199679c3b8ff3a12a14f1105d70db09bab1f41036c9e9f042e9a5f3fe9adb62a1c60e64359985e11c1d6ec8d20b84d61334572b5cab3fd727b6c7a55759ab40d3157e35dde2fd0b8997b397a5e204aa45e9e90a823e88e292713c3538315ff26", 0x64}, {&(0x7f0000003d80)="09e7", 0x2}], 0x6, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], 0x290, 0x40800}, {0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000004100)="0cd25517c2f1d308b64c236eaf0d3b776b19e7cb3b7ef7d5942b726bf2c10f37cd971486f22ef60282ec47c2a6c19fc689a955d360f629b6c72c55168cdce2c399225a25636ff0a02b1ce6e1e3a668a93fb60360834575a6b4eba9f48a88a8ab94a9b58443bf1e34c5f5f545a66d54201783b4ff737e1f7fd7e17a07682d04cb49a9299112c8df0eee4e87d83d081c7a8f4d581b8860eea1998ba76f3af674dc43388fa6023a62a204e02725bc0984955de13cf50807c8a0c6e88f01639866d208de31fb5fef34e0e63ed4ee0fc1c469f854a701723ca6120684ddf5d3be7d072c34a63fa4e78d49b5712a118838", 0xee}, {&(0x7f0000004200)="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", 0xfd}], 0x2, &(0x7f0000004340)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x4000010}], 0x4, 0x800) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:48 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r4, 0x0, r3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r9, 0x401070cd, &(0x7f0000000000)={0x6}) socket$vsock_dgram(0x28, 0x2, 0x0) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000e6030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:48 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:48 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000015) 23:36:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) getsockopt(r4, 0x9, 0x9, &(0x7f0000000000)=""/196, &(0x7f0000000100)=0xc4) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000e8030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000049) 23:36:49 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000ea030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:49 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0x7f, @ipv4={[], [], @broadcast}, 0x54}}, 0x7, 0x0, 0xfff, 0x6, 0x30, 0x9, 0x20}, 0x9c) 23:36:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000054) 23:36:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f00000000c0)={0x34}) r6 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$isdn(0x22, 0x3, 0x23) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r9, 0x5d283b2731de6144, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) r10 = fcntl$dupfd(r7, 0x0, r2) syz_kvm_setup_cpu$x86(r10, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000ec010000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:49 executing program 5: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\v'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f0000000240)=""/63) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) fcntl$dupfd(r4, 0x0, r3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r9) sendto(r9, &(0x7f0000000100)="616f1aee32891e176cef3ac44d0fbce6fb739280fa8672a5e63df6470166cda3ca3d0e99c78cb563930d9ba6e3bfaf8ad9da0ee9d4a577b54e653fd4b8b2e53ad37235130ded8457911ee024a4066da14799c7780d63e03a35fb5016b10258cdac24f56469c23057", 0x68, 0x800, &(0x7f0000000180)=@rc={0x1f, @fixed={[], 0x12}, 0x9}, 0x80) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r10, r10) dup2(r10, r8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) fgetxattr(r5, &(0x7f0000000280)=@known='trusted.overlay.opaque\x00', &(0x7f00000002c0)=""/132, 0x84) syz_kvm_setup_cpu$x86(r13, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd9f, 0x0, 0x0, 0x0) 23:36:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030", @ANYRESHEX, @ANYRES16=0x0], 0x3) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) getsockopt$IP_SET_OP_VERSION(r4, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc0000e0) 23:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000ec030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:49 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000f4030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = fcntl$dupfd(r4, 0x0, r3) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r9 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000100)={0x8, 0x4, 0x4, 0x10, 0x5, {0x77359400}, {0xab136564716766c4, 0x7, 0x9, 0x1f, 0x8, 0x5, "a984fc48"}, 0x8000, 0x2, @fd, 0x4, 0x0, r9}) 23:36:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_CREATE2(r4, &(0x7f0000000180)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0xa8, 0x5815, 0xbf, 0x81, 0x515, 0x7f, "88eb0bd5b659c562166deba2cfd426a9278230128a8ae06d546f4c9cb82e6fafe41b093d33c1964474188c39211dd4c35ed1bea1244ce9c329699304db01072af7a7bb16ae4c49d0ba17b14cc90a467fc1288ace9e3834a78ff03ff3121c10b097850b1a763353e0fc13aeef7de8fbff651bef371474e92626432cb3d323b87f7e3ca9f87ad8caca2927b069d64881f68b39d94c0ed632133fcedc5a6c1b400421e255149e44d442"}}, 0x1c0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:49 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc0001f4) 23:36:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000f5030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:49 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r2, 0xa01}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x2c, 0x49, [0xfac09, 0xb, 0xfac08, 0xfac08, 0xfac0c, 0x7d60c, 0x0, 0xfac09, 0xfac06, 0x1c219230b8067419]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x9}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4a090}, 0xc4) 23:36:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x84041ff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x3}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000240) 23:36:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) r9 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x6) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x1, r8}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mmap$dsp(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x2000007, 0x40010, r9, 0x0) r10 = fcntl$dupfd(r4, 0x0, r3) syz_kvm_setup_cpu$x86(r10, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000f8020000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:50 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="f4e468952e334cae83349371cbfc68dc45cc69c27273a4a307f7c2ad84ba7e45e875fa12f130e2946fa16dd28b1776279eef90989bfb5088a0ff88a64ca315a4dd606a8baa0b896508706563202c8423dffe2578c25a7fd5b2c4c9378a62359e6625692476740645c194fad2"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x414000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$RDS_RECVERR(r4, 0x114, 0x5, &(0x7f0000000200)=0x1, 0x4) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000001c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r5}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 23:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000f9030000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000300) 23:36:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="7261770000000000ed008dd58236a5c8000000000000000000000000000000001eb6219a00000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030", @ANYBLOB="48b6d3532caf27ea6b1edc593766e8a81a31f59baa245a5e18114db7267f69ca1f1bc18e517a9997b759ab7807cd073e696269204cd9134ffc1c897f636a765716e6f3bcf142d19c575dd7be0c0123425e9a833871a87cf33a6ea9237ba2be2a308182c273bb7994e3962a0a4379677be6e7d82621d2dd01bd2ecaddf5b8c4966f5c17868231c2a6d63c378ee65bfb4bd1e70d9b96321e56b4954dead4aa39d9c5af505f3e6de2ca86b408b16f49c1d1ea83b6ce7113a518d62feecc10ebe032b0d9cdc29530d10ea1b6e24de7ee6a4ff2f579b001b99e249404587563731faed9fbfffe7605b66e3d64beb251ddc0ce"], 0x2) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000fa020000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc0003e8) 23:36:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r5, &(0x7f0000000140)="0e", 0x1}]) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) io_pgetevents(r4, 0xc32, 0x2, &(0x7f0000000280)=[{}, {}], &(0x7f0000000240)={r6, r7+10000000}, 0x0) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r12, 0x400454dc, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') r13 = fcntl$dupfd(r8, 0x0, r3) syz_kvm_setup_cpu$x86(r13, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r4) dup(r4) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000ffff0000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:50 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="71ee4b782e95c1f5eb66176fd9ee54652de64e7adf1240b98dc99732fe705e1feb2e014e5ea8a62d4cc32ee7c75be54d3431745581ecf29ee4d7dc40b1a6167e575bf6877230413894878fb06cbd305fd45f2f0f03a2a73106ca4fb4e8cb5b360b1b15e326b6b976e8f85085fdf57026e0cea20c8c55c3f0542945167ed4aad2ca4c8a00890115eb9ac41bde3791088b59bdbbc7fe3edd2225b0bfad"], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000500) 23:36:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x40000ffffff7f, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) open(&(0x7f0000000000)='./file0\x00', 0x2040, 0x4b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, 0x0, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c8020000580100000000000058010000000000000000000030020000300200003002000030020000306a468b47dd42653d23cd3d4c8653472676bc4032b40664dad04cfec6bdd542a0ed241a30df58a550dab3f4503bfd2c684910be2b2c8542f70bfa2f5b59d3278ab071901a3e6f241ea4d7a219f6bca3e941e32bd89729e06bad26ceac3c44ca7e8d"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getpid() setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x28, 0x0, 0x16) 23:36:50 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:50 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000600) 23:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x100000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:51 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000080)={0x1f, 0xff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r6) r7 = fcntl$dupfd(r0, 0x0, r4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000240)={0x20, 0x5, 0x4, 0x40000, 0x9, {}, {0x4, 0xc, 0x3f, 0x60, 0xfa, 0x8c, "5d3d4bdb"}, 0x5, 0x2, @offset=0x2, 0x4, 0x0, r9}) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x21, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000100)={0x3, 0x7, 0x1, 'queue0\x00', 0x5}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r10, r10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r10, 0x8982, &(0x7f0000000000)={0x1, 'virt_wifi0\x00', {}, 0x1f}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8983, &(0x7f00000001c0)={0x7, 'bridge0\x00', {0x71}, 0x7ff}) [ 961.260927] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000700) 23:36:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000000)) [ 961.304806] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x104000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:51 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x2, 0x1ff}, &(0x7f0000000080)=0x8) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r1) lseek(r1, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r5, 0x0, r4) r9 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bd00040000000000000000000042e33089754c8107c3cd3923dd4a712f71aeeeba4c61028ba5b9110cc2ff06007b6b4816122d2550829eaa9435c99926022b8753a188faad9a223be6d06fe96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637e248689cce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacb40d32e4b5", 0xa8, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r11 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r12 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r12, r11, r11}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r10, r9, r12}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f00000000c0)={'wp256-generic\x00'}}) keyctl$setperm(0x5, r12, 0x3120000) syz_kvm_setup_cpu$x86(r8, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) r13 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r13) read(r13, &(0x7f00000000c0)=""/198, 0xc6) 23:36:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc0008ff) [ 961.554643] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=@deltclass={0x60, 0x29, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xf, 0x2}, {0xfff2, 0x9}, {0x1, 0xd}}, [@tclass_kind_options=@c_sfq={0x8, 0x1, 'sfq\x00'}, @TCA_RATE={0x6, 0x5, {0x1b, 0xd6}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x7fff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xe604}]}}, @TCA_RATE={0x6, 0x5, {0x3d, 0xe3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4890}, 0x40000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x23, 0x4, 0x40) [ 961.628503] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:51 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x200000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) r4 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x60) sendmsg$nfc_llcp(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x27, 0x1, 0x0, 0x3, 0x81, 0x2, "5e179957c6f45428cfb729675e9c1968471fbe365e0dacae7a1b48dd759e11c151630e5107ac11349c7614ab818c3d451219254f27bf227bc0943dcb57db28"}, 0x60, &(0x7f0000000340)=[{&(0x7f00000002c0)="8ba70255edf345a848d435f8f3f4e5a2302530349dce98b6b8b115f96e74581eae2943ef4f9a4d713df073c41d8ec89c1cdef696775f662afa92fefef35e162a581e3d85d1cef67338162016e038bd0baa6188dcc5b830104f551b5c33fb22a8f2e1ff202910", 0x66}], 0x1, 0x0, 0x0, 0x804}, 0x4840) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_MODULATOR(r6, 0x40445637, &(0x7f00000000c0)={0x4, "8215c30b77331d7d2304080c766261c2223558e742f921c9b71f3db570809bfe", 0x100, 0x74cb, 0x9, 0x8, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000240)={0x1, "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"}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r4, 0x0, r3) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000900) 23:36:51 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x240000, 0x0) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$netlink(r3, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)=[{&(0x7f00000001c0)={0x64, 0x40, 0x400, 0x70bd26, 0x25dfdbfd, "", [@nested={0x53, 0x1d, 0x0, 0x1, [@typed={0x8, 0x6b, 0x0, 0x0, @fd=r4}, @generic="377c8a7c19d373de32883fc6fef8e3af24ba5e48ea95d22d5bf0a63f17bc0eac095a8bc5e55ce296a46cf37a93f60becd23a6c997f15cf486d9b91868cec67e9ea0c679f1dd25b"]}]}, 0x64}, {&(0x7f0000000240)={0x1c, 0x12, 0x800, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x6}]}, 0x1c}, {&(0x7f00000009c0)={0x3d4, 0x3f, 0x400, 0x70bd28, 0x25dfdbfb, "", [@nested={0x137, 0x20, 0x0, 0x1, [@typed={0x3b, 0x3a, 0x0, 0x0, @str='system)eth1%ppp0[-\\trustedposix_acl_access:$!wlan0ppp1\x00'}, @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x5}, @typed={0x10, 0x30, 0x0, 0x0, @str='+%ppp0user$\x00'}, @generic="21abeb1c2e499a055808b5e4ba34fed114dd2a12a139c0918784336fad349b9710115cebd9f4221cc941dca426ffcae55caf790eb67c25a1190adabc4045ebdc1b0efb7d78102560e478bc0dbf736a6ca73b613183f2b710c5387f27eaf8f92b40046f426cc4ae32c32a8867436a52cfebfaf238841f2fceeb6da79abd8d3f1c558910863e9ea41b0966a1f3ccf4768af9855333b80f50c72b1ae1158ccc0b60f88b77f820a8bd8ef59e35884cbcc2fc67cd0805148482f2e40ce6ea4f1a012d123a9d73445dac7477183dc4761ed0b109ca98", @typed={0x5, 0x89, 0x0, 0x0, @str='\x00'}]}, @nested={0x1a8, 0x7c, 0x0, 0x1, [@generic="71f706741c021b7842ecc51b21943ca963ac9af7044af35651a9055e6fa1d7d2b8130854705f83e6a62c642445657512f016e25f3c8bc7ad0b89f74852f062c045add1af92a59d9f13a1cd79ef3d98a3f28872acdbc39162a0bd3a954b2eaa411e8e469ec6ca73b68a949f1fa40038b3deb8ecad9dc52beef8c0beeee9f1ddda64bfcd8a575a815f1e1a2fa75b27617bf4547dfe697c126590d99a1550844b0928c47d1fbeb473647602327a59e1de74e391bbd2d5e2ab024c8d0fbdabac227b631961e0ceafe86bffd7a9966e31745d", @generic="650ec59db7ea4da4fa80c2f3e4a7a7ec8966429e4f867d8d8ffd9cab772a9952b711b640ca5674245802fe0838b68d9bb87f5af10f77f84b86f3b0bc06043d83bfa3570adb1d0aa34e20a5ea68e1b662fc430574874e13011f6e66606dd8dd4c316ce121560b8c49599a67341b454bba46ad02a7dad9bdcaf9d9d7b602337effb301570f4d12cf51ad16a09afb67b195587791bee9c361ce37b91f50552d3bbc9038cb227c6b6e4fd41d761416ddf15a256e2f", @generic="676ef3898001ee364f98c2ad7423c23cc2412f71418310f4030afa240a961d404d"]}, @typed={0x10, 0x6f, 0x0, 0x0, @str='+%ppp0user$\x00'}, @nested={0x10, 0xb, 0x0, 0x1, [@typed={0xc, 0x59, 0x0, 0x0, @u64=0x7}]}, @generic="b273b5d5a0a4406161fa93b150e6b831dd801060912c240e773b4ab911c2cd3db04fa84241e3f99a5bb685a64041714da43ea1e6c20823f4a363e4fc7ac287302844b3da2ee8bb29ad9d86dd5aad118f7df35e794f67ee96b339bd4e1f4cc26f60cde04d26646602da8043315fccf2dd62024808030b52a387bc9c979ac45844f00cf84217c16cb75065b8d3079dbea92597cb19d74ea106b8e4f583ac657dfa9673c1f8ec5dde260b182cbb2bb40afeec9f18f1362394e82ea439ffc9e6b567fc0e10"]}, 0x3d4}, {&(0x7f0000000280)={0x100, 0x40, 0x100, 0x70bd28, 0x25dfdbfb, "", [@nested={0xe0, 0x8e, 0x0, 0x1, [@generic="aab29c845f009bf9a4dc7cce7a344191d095c1dcba3456592ce731e1c065f7081233ebe2fb81e8a07f7adf52a4d39c536d5380b8bf5bae14cdc761bbe5c5828ffdd99b8755dfabe67eff91c3d78d0747cac9d969ecfed28fd735bb0eec975ba260c3e0838aaec80134371f7d66716eb782037ff1562c9e5e9394043e7feaabac6f993c7898c1268db27d0be44e4df87d55d4a90f53cc63f8", @typed={0x5, 0x75, 0x0, 0x0, @str='\x00'}, @generic, @typed={0x3b, 0x6e, 0x0, 0x0, @str='system)eth1%ppp0[-\\trustedposix_acl_access:$!wlan0ppp1\x00'}]}, @generic="3fc2e8b0b8b772", @typed={0x8, 0x74, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}]}, 0x100}], 0x4, 0x0, 0x0, 0x801}, 0x40000) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000040)={0x0, 0x56b}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 961.874475] x_tables: ip_tables: ah match: only valid for protocol 51 [ 961.911169] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1400000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:51 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000a00) [ 962.087344] x_tables: ip_tables: ah match: only valid for protocol 51 [ 962.111814] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000b00) 23:36:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1f, 0x800, 0x9a) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r5, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c8020000580100000000000058010000200000000000000030020000f62cdf0dc9cd661b3002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'ip6_vti0\x00', 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x200, 0x0) setsockopt$inet_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "cb51a8a611af0ab1", "cf59397d117eed9b84b3299f4cc4a5b2", "de25f1b2", "ffc5487e8481f798"}, 0x28) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400)='trusted.overlay.upper\x00', &(0x7f0000000440)={0x0, 0xfb, 0xc9, 0x1, 0x1, "5249a470968fa52cc91d7a24049e5cf7", "e960e3acb27f871662f1749a26f40d8c8e4379eab9ccf2ac8d5f8592cf88b9c14018508b7c3bd97f832f273362ca099dd3e55cdbb57fce3dbbb6515e4b62d4206aaa8c51a497f9cdab4b6f69e438a0b621d68863b74a97dbe880d81258c9f2dbba7b8eabedb63eef6552326b36eb5d50d545a0201c4bcce571713da1fe87af5be00722b4dbdc72164ebecd0488e4846e0c6138f07dc31af6a6d60acf82b20f64eb9325b08ddfb01b3c9dc87d73459928db1f026c"}, 0xc9, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ptrace$peeksig(0x4209, r5, &(0x7f0000000000)={0x6, 0x1, 0x2}, &(0x7f00000000c0)=[{}, {}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000240)={[0xf000, 0x2000, 0xf000, 0xd000], 0x5d, 0x1d, 0xfffffffeffffffff}) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept(r6, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x80) getsockname$llc(r8, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x10) r9 = fcntl$dupfd(r4, 0x0, r3) syz_kvm_setup_cpu$x86(r9, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1402000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:52 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x12, 0x43, &(0x7f0000000500)="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"}) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 962.342607] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000c00) [ 962.424775] x_tables: ip_tables: ah match: only valid for protocol 51 23:36:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1800000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x40, 0x201) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000d00) 23:36:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000100)={0x20000010}) mkdir(&(0x7f0000000140)='./file0\x00', 0xe0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r5, 0x0, r3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KDFONTOP_GET(r10, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x5, 0x15, 0x30, &(0x7f0000000240)}) syz_kvm_setup_cpu$x86(r8, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff78, 0x0, 0x0, 0x0) 23:36:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1a00000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:52 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @loopback}, 0x120, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='xfrm0\x00', 0x4, 0x10001, 0x5}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="376f1bd3c17a443bc93fc1f9ac5e53ed26ca7b5bdba6cfafd7126600b93502d2baf40d9a2ec9a4b50fa69f261d0bff7d51bea9a3e9a76c0bc76a744d084a9e3c85c4784dafbef16bf6c7849029c826a8e2e2fe6db451a6ac50dd9c90f7a53598b87455d536882a424339c811c1ff72708105000000b112d2678c5c7280ec70"], 0x1) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x800, 0x7ff) close(r1) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x8) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000e00) 23:36:52 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80c1) socket(0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x4) 23:36:52 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x3803000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:52 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000f00) 23:36:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x1402000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4900000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc001100) 23:36:53 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\t', @ANYBLOB="d3d72d4d2aabe08fc5974f2d75c28ef1a58437b23f835b0e3855e7770b65f2da762cb09b2d8cbb9ec71390f37562cc3a803b0f832361b305efd0ed052ce6d50fb7a4eb37c636fc3f375daa28775238f38ceda7ee4c14ba8b77e45f48ee2cd450c55395ef7f25c226b864790a21dd6a98d3824f360c8c722a5ca6cf9eb2eac13e70f2eae33edb1f58713d3d9c2d88dafbd732bf11018d832bac3763e89bf9", @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR64, @ANYRES16=0x0, @ANYRES32=r2, @ANYRES16, @ANYRES64=r3], @ANYRESOCT=r4], 0xbe) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:53 executing program 1 (fault-call:10 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x9001000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 963.410823] FAULT_INJECTION: forcing a failure. [ 963.410823] name failslab, interval 1, probability 0, space 0, times 0 [ 963.412633] input: syz1 as /devices/virtual/input/input534 [ 963.447692] CPU: 0 PID: 8453 Comm: syz-executor.1 Not tainted 4.19.98-syzkaller #0 [ 963.455890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 963.465366] Call Trace: [ 963.468851] dump_stack+0x197/0x210 [ 963.472514] should_fail.cold+0xa/0x1b [ 963.476452] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 963.481648] ? lock_downgrade+0x880/0x880 [ 963.489393] __should_failslab+0x121/0x190 [ 963.494363] should_failslab+0x9/0x14 [ 963.498876] kmem_cache_alloc_trace+0x2cc/0x760 [ 963.504180] ? file_has_perm+0x26d/0x390 [ 963.509321] alloc_pipe_info+0xbc/0x430 [ 963.513951] splice_direct_to_actor+0x76c/0x970 [ 963.519222] ? generic_pipe_buf_nosteal+0x10/0x10 [ 963.524109] ? selinux_file_permission+0x92/0x550 [ 963.529093] ? do_splice_to+0x180/0x180 [ 963.533150] ? security_file_permission+0x89/0x230 [ 963.538206] ? rw_verify_area+0x118/0x360 [ 963.542469] do_splice_direct+0x1da/0x2a0 [ 963.546645] ? splice_direct_to_actor+0x970/0x970 [ 963.551525] ? security_file_permission+0x89/0x230 [ 963.556958] ? rw_verify_area+0x118/0x360 [ 963.562192] do_sendfile+0x597/0xce0 [ 963.566041] ? do_compat_pwritev64+0x1c0/0x1c0 [ 963.571288] ? fput+0x128/0x1a0 [ 963.574604] __x64_sys_sendfile64+0x1dd/0x220 [ 963.580384] ? __ia32_sys_sendfile+0x230/0x230 [ 963.585777] ? do_syscall_64+0x26/0x620 [ 963.589868] ? lockdep_hardirqs_on+0x415/0x5d0 [ 963.595290] ? trace_hardirqs_on+0x67/0x220 [ 963.600080] do_syscall_64+0xfd/0x620 [ 963.605141] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 963.611048] RIP: 0033:0x45b349 [ 963.614277] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 963.634119] RSP: 002b:00007f8123445c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 963.643080] RAX: ffffffffffffffda RBX: 00007f81234466d4 RCX: 000000000045b349 [ 963.650484] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 23:36:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc001500) 23:36:53 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 963.658647] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 963.665951] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 0000000000000005 [ 963.673244] R13: 00000000000008a6 R14: 00000000004ca018 R15: 0000000000000000 23:36:53 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto(r2, &(0x7f0000000040)="64e0935553ff73c34ee96e75237cac08651bb939a7aa9aec567efc168ee4c0b50535d8ce2bd0517fc37ca4663af5f8413fc70d3ab78a23bc8f14e0a285197344c4a25141ada09961187edc89ebd6fc523c459f7ef203e9ee764cbe79ccbe1921fe78196f3541e46d7345ca2a3ef7af8c80f7cbeccace8bb40968e578f2ebdc413fdab83568ae9b3ed86006", 0x8b, 0x0, &(0x7f0000000100)=@in6={0xa, 0x4e21, 0x8, @mcast1, 0x401}, 0x80) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="9f"], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xd000000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc003f00) 23:36:53 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000d461a4803f3d16d404000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200403002000030a72c4d08e0ec8781abc65d68bef0dbe78ec07b5f1a23f5d55b8055be2ede82ab61e26fad1c81cb803e9aa7830c11d7cfa02c1eb84efcc829bf80000bc7cd2d90c46f629bc287eda856a968efdfbee130b2580908946ffbecf62d05e8c60ee17dcf9a195b1fa50f145e970cb2888e27367eff0fc9bdecdb570d3eca36d56b6a64d6704dd3441a497f0e"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:53 executing program 1 (fault-call:10 fault-nth:1): r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:53 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xfc02000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:53 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc004000) 23:36:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:54 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0xff03000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r9) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r10, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r10, 0x5501, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r11, r11) r12 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r12, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r12, 0x5501, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r15, r15) r16 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r16) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES32, @ANYPTR64=&(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="e3950678cc8e9b1b0380c6cfec51d57ac7985939fc6ad532b75b3be4d81dd30dbfbb076830d3036db2ac4749c0e125646f0349065a73e28b19dcfdeb557d430aadb92858a90009f8f81c5ed0e1223493a3c4a85d90c15d4aa294c655ea5137a12585a4db12ed6292a0683e29c29f3aecad0b0653f4c6eb4c6f9bee8b9208b4332064560d8432e76b86019674ad4bf7b76317410ed385e1f13095a3e86610eb7c81be57fcd6434a64e9354f4250b2a6c21def73ca6940bb241b851c4431da54b611bc32e19754333f5579f5a634023382a4a558580d3a249aba86f87deacd3a2f519c0def31cdcf84209424fc7857027876d208", @ANYBLOB="907fa73cef71dc6af0cfb23d73c9ff0d48315e599909c80acbe7493f71f44609709e87868adbec5edf6e73980bc5bd4a917acd5840fac53860e339a398469dbf02d43243780f047f0215611d1ed5b15dfa8fe241dfbb6691b4f53e57c85b0e4be3011a89d64302b85db4dbf47a78abc19931bb49dcb40e86ee3f3d321d335b01b6db60fa62dd68ba396a927d7362ab3a5d386232"], @ANYRES16=r5, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRESOCT=r8, @ANYRESOCT=r9, @ANYRESOCT], @ANYRESDEC=r10, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES16, @ANYRESDEC=r16, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYRES64=r12], @ANYRES16, @ANYRESHEX=r12, @ANYRESDEC=0x0, @ANYRESOCT=r14, @ANYRESHEX=r8], @ANYPTR=&(0x7f0000000540)=ANY=[], @ANYRESOCT=r15], @ANYPTR64, @ANYPTR]], 0x2) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r17 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x101000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r17, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x2, 0x10001, 0x8, 0x9, 0xfe5, 0x7f, 0x9, 0x0, 0x0, {0x2, 0x1b}, 0x81, 0xff}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) accept(r0, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) 23:36:54 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x111002, 0x0) getpeername(r2, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000001c0)={0x9, 0x7dd9, 0x9, 0xa00, 0x19, "057201a22b401aa52a1b06f72f48f95b62cfe0"}) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="097c827d9eec194f7d3963b0"], 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r4) clone(0x2840100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc004002) [ 964.328837] input: syz1 as /devices/virtual/input/input535 23:36:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:54 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x236000, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) 23:36:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc004900) 23:36:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x450082, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x100181, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd840c}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000209050000000000000000000500000208000302000000040800060000000000080005000000001b0800050000000007080003000000001f080005000000001b"], 0x44}}, 0x20000c0) syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = getpid() rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f00000000c0)) ptrace(0x4206, r7) tkill(r7, 0x12) ptrace(0x4208, r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc005400) 23:36:54 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d000010) 23:36:54 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:54 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc007f81) 23:36:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:54 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1a, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000002c0)={r10, @in={{0x2, 0x4e21, @rand_addr=0x3}}, 0x1, 0x7fff, 0x0, 0x9, 0x41, 0x100, 0x2}, 0x9c) fcntl$setsig(r3, 0xa, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x7, 0x1}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r11}, &(0x7f00000001c0)=0x8) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc007ff4) 23:36:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000c00"/107], 0x78) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(0x0, 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:55 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a63e4c81b40e89b748ecc7c8ed020b82a2f192b4b043ae8a08925f252066ec1863937630f8f7c0d1b09673b0c2ed5dfa07ce0805f2d836997e90651d74bfb0f2d4626137112f2ea65b972661428be5cfb516c4e0c9b7c8334a4c6491acb4afa0623cb95e271653f601b329e4ce9e986b8185ca4fc35c2b89af053d23c5a1e90ba9af9270401895bda8124a55559924f537f1c857cef2fec030f7ca6e58e7fcfe69a0d9722b"], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 965.333158] audit: type=1800 audit(1579822615.221:416): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17196 res=0 23:36:55 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) socket$inet6(0xa, 0x6, 0x7) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(0x0, 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00817f) 23:36:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:55 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="29c58403f73e5b28d1b5c29300660af99ad51d244024a808ba9d808d9abfe8c3"], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(0x0, 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:55 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00e000) [ 966.061819] audit: type=1800 audit(1579822615.951:417): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17188 res=0 23:36:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:56 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e1d, @empty}, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}], 0x2c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00e803) 23:36:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x402080, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1) 23:36:56 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0966e0994d9252ef7e741e23510ee08bb2482d6b5bb9db7a1fdd9ccec978bad013cf69e3b8a6e50f6216264eaa2f4cac7b9e2f0b906a26accf9654f8a32fabe7cafcad29fce2718f3fc276289095e28a48e4c7c163c4d9e6605bfa82a5507b164c8a73f91781cea2cb4bcebebb3c599d00335d6b6b2ce1919c710769d4812d1a764e0d9bc71aecf53762724afd934495cafaa88d8fa750da8a878d0faaa2c7c1b9d096330adfe17c63eac1c4c57b1ae8ae3a9530011d3a26356635827536201cd343dd3cd558b706d5e670baffcab3545e31c74a790fd0846b6304158560962b4a538e9300"/241], 0x1) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f00000002c0)="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", 0x1000) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 23:36:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00f401) 23:36:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:56 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 966.704207] audit: type=1800 audit(1579822616.591:418): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17193 res=0 23:36:56 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x401, 0x1) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\t'], 0x1) close(r0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x2, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1000}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x4000000) 23:36:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:56 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00f47f) 23:36:56 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000200)) 23:36:56 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00ff00) 23:36:57 executing program 5 (fault-call:0 fault-nth:0): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:36:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r6, r5, r5}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000080)='\x00', &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000240)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c80200005801000000000000580100000000000000000000300200003002000030020000300200003087f61fc2fafa87063158fbf57241dcae92f5ee49a6d6dba20e4320d3e05abe406ac537cc8bd61ba2846893085b8dc8e0f195d7cc6d4bd749d289b3f4070ba57fe2397123b60028861cc0166c73845aad2c7acee2b4f9c7453d15"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 967.269045] audit: type=1800 audit(1579822617.161:419): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16527 res=0 [ 967.275386] FAULT_INJECTION: forcing a failure. [ 967.275386] name failslab, interval 1, probability 0, space 0, times 0 [ 967.387793] CPU: 1 PID: 10786 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 967.396348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.406005] Call Trace: [ 967.408634] dump_stack+0x197/0x210 [ 967.412736] should_fail.cold+0xa/0x1b [ 967.416926] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 967.422180] ? lock_downgrade+0x880/0x880 [ 967.426466] __should_failslab+0x121/0x190 [ 967.430759] should_failslab+0x9/0x14 [ 967.434773] __kmalloc+0x2e2/0x750 [ 967.438355] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 967.453831] ? fput+0x128/0x1a0 [ 967.457396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 967.462974] ? strnlen_user+0x15f/0x1e0 [ 967.467591] ? __x64_sys_memfd_create+0x13c/0x470 [ 967.472647] __x64_sys_memfd_create+0x13c/0x470 [ 967.477403] ? memfd_fcntl+0x1750/0x1750 [ 967.481585] ? do_syscall_64+0x26/0x620 [ 967.486658] ? lockdep_hardirqs_on+0x415/0x5d0 [ 967.492088] ? trace_hardirqs_on+0x67/0x220 [ 967.496643] do_syscall_64+0xfd/0x620 [ 967.500681] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 967.506381] RIP: 0033:0x45b349 [ 967.510172] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 967.530315] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 967.538852] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b349 [ 967.552441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8 [ 967.560025] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001 [ 967.567754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 967.575054] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000000 23:36:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(0xffffffffffffffff, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x11, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00ff08) 23:36:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000040)={@mcast1, r7}, 0x14) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r8, 0x0, 0x80001d00c0d0) 23:36:57 executing program 5 (fault-call:0 fault-nth:1): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:36:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:57 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x0) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 967.782076] audit: type=1800 audit(1579822617.671:420): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=17183 res=0 23:36:57 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, r1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010400000000005801000000000000000000003002000030020003000000000000000030"], 0x1) socket$packet(0x11, 0x0, 0x300) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpgid(r4) sched_rr_get_interval(r5, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r7, 0x5514) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket(0x0, 0x0, 0x0) 23:36:57 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00ff0f) [ 967.850762] FAULT_INJECTION: forcing a failure. [ 967.850762] name failslab, interval 1, probability 0, space 0, times 0 [ 967.929265] CPU: 1 PID: 11033 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 967.938268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 967.947653] Call Trace: [ 967.950274] dump_stack+0x197/0x210 [ 967.954032] should_fail.cold+0xa/0x1b [ 967.957959] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 967.963096] ? lock_downgrade+0x880/0x880 [ 967.967288] __should_failslab+0x121/0x190 [ 967.971555] should_failslab+0x9/0x14 [ 967.975386] kmem_cache_alloc+0x2ae/0x700 [ 967.979601] ? __alloc_fd+0x44d/0x560 [ 967.984391] ? shmem_destroy_callback+0xc0/0xc0 [ 967.989179] shmem_alloc_inode+0x1c/0x50 [ 967.993790] alloc_inode+0x64/0x190 [ 967.997801] new_inode_pseudo+0x19/0xf0 [ 968.002592] new_inode+0x1f/0x40 [ 968.006192] shmem_get_inode+0x84/0x780 [ 968.010302] __shmem_file_setup.part.0+0x7e/0x2b0 [ 968.015362] shmem_file_setup+0x66/0x90 [ 968.019718] __x64_sys_memfd_create+0x2a2/0x470 [ 968.024512] ? memfd_fcntl+0x1750/0x1750 [ 968.028601] ? do_syscall_64+0x26/0x620 [ 968.032720] ? lockdep_hardirqs_on+0x415/0x5d0 [ 968.037330] ? trace_hardirqs_on+0x67/0x220 [ 968.041688] do_syscall_64+0xfd/0x620 [ 968.045559] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 968.050796] RIP: 0033:0x45b349 [ 968.054080] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 968.072998] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 23:36:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:57 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pselect6(0x2000, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r7, 0x0, 0x80001d00c0d0) 23:36:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000e2ff51b095a28236a5c8000000000000000000000000000000000000000000000200000003000000c80200005801000000000000580100000000000000000000300200003002000030020000300200003022338705fb29f0f26fe3b2c0a067120c1013d5436dbdd5d8f4ded391a51da060053327ab604e51cd3fd0076294703c81a07be9f1abe09ba0f73a7c9ee0b003281c2c6e9ac0db3658202f3e0f138ffe64ea4d17aa0b1f436c5dcec13273b1f8a0b3e12a30bccba27cce10c871f634ef5c6c2d5c0b8304aaee611d49215fa37bd2b86102b511499be82f7df0c13fd2c305e769028714a5400000"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 968.081249] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b349 [ 968.088536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8 [ 968.096525] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001 [ 968.104471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 968.111764] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000001 23:36:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x0) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc00ff7f) 23:36:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x0) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:36:58 executing program 5 (fault-call:0 fault-nth:2): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:36:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x15, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000480)=0x10000, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) write$P9_ROPEN(r2, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x0, 0x0, 0x1}, 0x2}}, 0x18) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) pipe(&(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xcf02, 0x1, [0x0]}, &(0x7f0000000200)=0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000240)={r6, @in6={{0xa, 0x4e23, 0x6, @empty, 0x3f}}, 0x8, 0x9, 0x8, 0x8, 0x1000}, &(0x7f0000000300)=0x98) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4001014) 23:36:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$rose(r3, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@empty, @empty, 0x0, 0xa, [@empty, @broadcast, @multicast1, @loopback, @multicast2, @rand_addr=0xfb4, @remote, @multicast2, @local, @remote]}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000280)={0x2, 0x3, 0x0, {0x8, @sliced={0x400, [0x3, 0x2, 0x81, 0x2, 0x200, 0x2, 0x4, 0x4, 0x101, 0xe8, 0xec, 0x4, 0x5, 0x5, 0x3, 0x7fff, 0x9, 0x3110, 0x4, 0x80, 0x40, 0x7fff, 0x5, 0x3, 0x1, 0x52, 0x8, 0x4, 0x1ab2, 0x7f, 0x3, 0x4, 0x1000, 0x6, 0x3, 0x0, 0x81, 0x6, 0x401, 0x1, 0x1, 0x0, 0x81, 0xded7, 0x8, 0x800, 0x695b, 0xf72], 0x195}}, 0x5}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e2f42925e31a8770b8ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4c5bfa104550e7df56b66a0f978fde08bfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f00000000c0)={0x0, 0x7}) 23:36:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(0xffffffffffffffff, r4, 0x0, 0x88000fc000000) 23:36:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) rmdir(&(0x7f0000000040)='./file0\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000080)=0x3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000000c0)=ANY=[@ANYBLOB="720000000000000000000000000000000000000000000200000003000000c80200005801000000000000580100000000000000000000300200003002000030020000300200003040d994693a56ef44d1fb8ad549f90b4378bf59779b1793c90edf5963550385e5b2"], 0x1) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) statx(r2, &(0x7f00000001c0)='./file0\x00', 0x1000, 0x8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000000300)='./file0\x00', 0x4000, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(r11, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(r12, 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x7}, [{0x2, 0x4, r7}, {0x2, 0x6, r8}, {0x2, 0x4, r10}], {0x4, 0x2}, [{0x8, 0x4, r11}, {0x8, 0x2, r12}, {0x8, 0x4, 0xffffffffffffffff}], {}, {0x20, 0x1}}, 0x54, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0xad4d}, 0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 968.584427] FAULT_INJECTION: forcing a failure. [ 968.584427] name failslab, interval 1, probability 0, space 0, times 0 [ 968.623018] CPU: 1 PID: 11283 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 968.630867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 968.640244] Call Trace: [ 968.642860] dump_stack+0x197/0x210 [ 968.646527] should_fail.cold+0xa/0x1b [ 968.650460] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 968.655600] ? percpu_ref_put_many+0x94/0x190 [ 968.660136] __should_failslab+0x121/0x190 [ 968.664409] should_failslab+0x9/0x14 [ 968.668232] kmem_cache_alloc+0x2ae/0x700 [ 968.672483] ? map_id_range_down+0x1ee/0x370 [ 968.676913] ? __put_user_ns+0x70/0x70 [ 968.680834] selinux_inode_alloc_security+0xb6/0x2a0 [ 968.685965] security_inode_alloc+0x8a/0xd0 [ 968.690316] inode_init_always+0x56e/0xb40 [ 968.694702] alloc_inode+0x81/0x190 [ 968.698355] new_inode_pseudo+0x19/0xf0 [ 968.702446] new_inode+0x1f/0x40 [ 968.705919] shmem_get_inode+0x84/0x780 [ 968.709944] __shmem_file_setup.part.0+0x7e/0x2b0 [ 968.714820] shmem_file_setup+0x66/0x90 [ 968.718830] __x64_sys_memfd_create+0x2a2/0x470 [ 968.723526] ? memfd_fcntl+0x1750/0x1750 [ 968.727613] ? do_syscall_64+0x26/0x620 [ 968.731611] ? lockdep_hardirqs_on+0x415/0x5d0 [ 968.736221] ? trace_hardirqs_on+0x67/0x220 [ 968.740576] do_syscall_64+0xfd/0x620 [ 968.744608] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 968.749880] RIP: 0033:0x45b349 [ 968.753098] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 968.772027] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 23:36:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x67c83b95fc470d}, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xce450b0edd7c40c7) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000140)={0x2, 'veth0_vlan\x00', {0x1}, 0xe9a}) removexattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="739b653eca47be691d139956656d2e29"]) 23:36:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 968.779761] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b349 [ 968.787314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8 [ 968.794860] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001 [ 968.802171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 968.809469] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000002 23:36:58 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x19, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 968.823923] audit: type=1800 audit(1579822618.711:421): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17183 res=0 23:36:58 executing program 5 (fault-call:0 fault-nth:3): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:36:58 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[]}}, 0x4c080) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000000c0)=0x9, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKRAGET(r7, 0x1263, &(0x7f0000000140)) sendfile(r0, r5, 0x0, 0x88000fc000000) 23:36:58 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(0xffffffffffffffff, r4, 0x0, 0x88000fc000000) 23:36:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(0xffffffffffffffff, r4, 0x0, 0x88000fc000000) 23:36:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) sendto$inet(r3, &(0x7f00000000c0)="a23266d4079dfb2ef0c3c0ecbc62a97f95869767d705fe7f78b2bc9a7940c48fef9b384a24af4304e37833a0763b", 0x2e, 0x8084, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d15e40000a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44eff9a62da4b70821c8509cf6b8a26ee0484f0864381ffbacbfc24339fd3e26ae909f99ba2a24b8"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 969.219601] audit: type=1800 audit(1579822619.111:422): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17188 res=0 23:36:59 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) r1 = socket(0x1f, 0x800, 0x9a) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r4, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r4, 0x8}, 0x8) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) ftruncate(r7, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r5, r7, 0x0, 0x80001d00c0d0) 23:36:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x202a00, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 969.299374] FAULT_INJECTION: forcing a failure. [ 969.299374] name failslab, interval 1, probability 0, space 0, times 0 [ 969.367321] CPU: 1 PID: 11740 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 969.375175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.384630] Call Trace: [ 969.387240] dump_stack+0x197/0x210 [ 969.390894] should_fail.cold+0xa/0x1b [ 969.394812] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 969.399950] ? percpu_ref_put_many+0x94/0x190 [ 969.404486] __should_failslab+0x121/0x190 [ 969.408754] should_failslab+0x9/0x14 [ 969.412581] kmem_cache_alloc+0x2ae/0x700 [ 969.416798] ? map_id_range_down+0x1ee/0x370 [ 969.423084] ? __put_user_ns+0x70/0x70 [ 969.427013] selinux_inode_alloc_security+0xb6/0x2a0 [ 969.432147] security_inode_alloc+0x8a/0xd0 [ 969.436530] inode_init_always+0x56e/0xb40 [ 969.440796] alloc_inode+0x81/0x190 [ 969.444556] new_inode_pseudo+0x19/0xf0 [ 969.448562] new_inode+0x1f/0x40 [ 969.451965] shmem_get_inode+0x84/0x780 [ 969.455971] __shmem_file_setup.part.0+0x7e/0x2b0 [ 969.460958] shmem_file_setup+0x66/0x90 [ 969.464960] __x64_sys_memfd_create+0x2a2/0x470 [ 969.469656] ? memfd_fcntl+0x1750/0x1750 [ 969.473747] ? do_syscall_64+0x26/0x620 [ 969.477751] ? lockdep_hardirqs_on+0x415/0x5d0 [ 969.482447] ? trace_hardirqs_on+0x67/0x220 [ 969.486913] do_syscall_64+0xfd/0x620 [ 969.490755] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.496175] RIP: 0033:0x45b349 23:36:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x22, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) 23:36:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) [ 969.499403] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 969.518491] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 969.526694] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b349 [ 969.533987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8 [ 969.541288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001 [ 969.549191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 969.556639] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000003 23:36:59 executing program 5 (fault-call:0 fault-nth:4): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:36:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x23, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:36:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) 23:36:59 executing program 2: sync() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000280)="d82abe15d511afc461a9f642e68ac3d5534a05d4f7030a199d1fda8638f1c0f278c92dee7b51e99ed31c993e072b11dfead0539c39ba328f7ddf1a9fd54e48eca60a154542f9d10edaeb48234b65e56e9e7376") setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) recvfrom$phonet(r2, &(0x7f0000000000)=""/167, 0xa7, 0x40012062, &(0x7f00000000c0)={0x23, 0x5e, 0x3, 0x2}, 0x10) socket(0x0, 0x0, 0x0) 23:36:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr="5fe0841201e4e01fbf355ce0723b3abd"}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) 23:36:59 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x0) 23:36:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000280)={0x0, @motion_det}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 969.789547] FAULT_INJECTION: forcing a failure. [ 969.789547] name failslab, interval 1, probability 0, space 0, times 0 [ 969.825059] CPU: 0 PID: 11991 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 23:36:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xf23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) getpid() lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 969.833009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 969.842835] Call Trace: [ 969.845548] dump_stack+0x197/0x210 [ 969.849212] should_fail.cold+0xa/0x1b [ 969.853131] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 969.858468] ? lock_downgrade+0x880/0x880 [ 969.862656] __should_failslab+0x121/0x190 [ 969.867148] should_failslab+0x9/0x14 [ 969.870982] kmem_cache_alloc+0x2ae/0x700 [ 969.875167] __alloc_file+0x27/0x330 [ 969.878918] alloc_empty_file+0x72/0x170 [ 969.883099] alloc_file+0x5e/0x4d0 [ 969.886675] alloc_file_pseudo+0x189/0x280 [ 969.891039] ? alloc_file+0x4d0/0x4d0 [ 969.895310] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 969.901420] ? kasan_check_write+0x14/0x20 [ 969.907802] __shmem_file_setup.part.0+0x108/0x2b0 [ 969.912771] shmem_file_setup+0x66/0x90 [ 969.917482] __x64_sys_memfd_create+0x2a2/0x470 [ 969.923337] ? memfd_fcntl+0x1750/0x1750 [ 969.927511] ? do_syscall_64+0x26/0x620 [ 969.931514] ? lockdep_hardirqs_on+0x415/0x5d0 [ 969.936133] ? trace_hardirqs_on+0x67/0x220 [ 969.940483] do_syscall_64+0xfd/0x620 [ 969.944307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 969.949770] RIP: 0033:0x45b349 [ 969.953003] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 969.973248] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 969.980978] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b349 23:36:59 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1a00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e00e1a8000000000000eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 969.990369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8 [ 969.998659] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001 [ 970.006392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 970.014922] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000004 23:36:59 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:36:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:36:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 970.024027] audit: type=1800 audit(1579822619.701:423): pid=11875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17182 res=0 23:37:00 executing program 5 (fault-call:0 fault-nth:5): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x25, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:00 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x0) 23:37:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) r3 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000280)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x111000, 0x0) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0xd) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) fcntl$getflags(r6, 0x408) 23:37:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7442004fd623cd6c1a30c5b72600", @ANYRES16=r5, @ANYBLOB="000227bd7000fedbdf250400000098000180110001006574683a6970365f767469300000000008000300ff0700000800030008000000080003009b0e0000100001006574683a697036746e6c30003c00028008000400ff00000008000100140000000800030051320000080003007f0000000800010004000000080003000500000008000200020000001c00028008000100120000000800020000000000080003007fffffff0c00098008000200000000001400038008000100ffffff7f080001000600000004000280680004804c00078008000200000000000800040001000000080003000010000008000200080000000800020006000000080002000400000008000200000000000800010015000000080001000b0000000900010073797a30000000000900010073797a3000000000840002803c000380080001003057ffff080002000900000008000200000800000800020005000000080002008dfbffff0800020003000000080002000200000008000100f5000000080001003f0000003400038008000200c4000000080002000200000008000200fcffffff080002000200000008000100ff010000080001000700000004000280680002800400040004000400080001000500000024000380080001000600000008000100080000000800020001040000080002007c00000008000200f1000000040004000800010001000000040004001400038008000200010000000800020000080000040004001c000180160001006574683a76657468315f746f5f7465616d0000003000058008000100657468000c0002800800030008000000080001006574680008000100756470000800010075647000"], 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x4000800) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)={'raw\x00'}, &(0x7f0000000700)=0x54) umount2(&(0x7f00000005c0)='\x00', 0xc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177fcff00000000008dd58236a5c8000000000000000000000000000000000000e3ffffff0100000003000000c802000018010000000040005801000000000000000000003002000030010000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000000)={'bond0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x18, 0x3, 0x0) r7 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000240)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bd00040000000000000000000042e33089754c8107c3cd3923dd4a712f71aeeeba4c61028ba5b9110cc2ff06007b6b4816122d2550829eaa9435c99926022b8753a188faad9a223be6d06fe96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637e248689cce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacb40d32e4b5", 0xa8, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r10, r9, r9}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}}) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r7, r10}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f00000000c0)={'wp256-generic\x00'}}) keyctl$get_keyring_id(0x0, r8, 0x0) 23:37:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x28, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 970.362962] audit: type=1800 audit(1579822620.251:424): pid=12185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16538 res=0 23:37:00 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x0) 23:37:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e24, 0x46f7, @rand_addr="f7d050534bafb1ec4cc43a46668d1706", 0x2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000280)="db5e29f923e13e14b8be0bf37884b7e87ee28e56d20b81f673ca5b9bea2d52153309a6274bf9e8f601cc0b51d88417b43e24899d719040830bb523b1f6f1f4f2fcae91d605875d15e5ab317e6a013318ea388f12b5d4560b3989d506cf7ab3d9e9b12e44d04d2b97b4a1025049bb3da150866c70f3946c5b0e73477150c88703523f341c5eb0743bb8dee72af5986a75b1628751819419c79454aa282cea4f476b", 0xa1}, {&(0x7f00000000c0)="6116b2321333df7733e39abec5b42b928ba5e2d323809fedde6669f977628143657c1e57d407000713e2064c", 0x2c}, {&(0x7f0000000500)="40510fb48b9746fde86fe77c89f04e41ee68967475fdf1f0bc6e1a3462984aab2af0cc763b590a21badee45d645a9e13677346f5a53334c888663af808b0238616303fb4190243721f8382e402293a3c3071b9a791ce7ef7e8caeae511ffe1c62172f170aa888536e49b0b6252e1cc9db5a2d262bc01d4bebc8b617ad49677605891c355", 0x84}, {&(0x7f0000000100)}, {&(0x7f00000005c0)="a12be55936f2eddeee6c5e1fa34233b4ed6d40e9e08a6047f94c8fefa4584101d7db5b9ddd3da71678fc0481bdc64ec4dbed692a573c2928e940efbab10aa93ebb0927b351c2c92826c940ec62e74186878aca804a5a9d5fd3f7fe17af66268fdc0082ebd09b45b1228a7a4b65eafdbdaebc6ba7b324e51b1b400bc78554d4b0bde49a6ba87896d609fc4754c65d060738dd6172ef3e6848af0f98096a1f6d1f9dc83a819fb8c880b4dba8636a592ef3d80186e56ceb5fe635431cb113228dc251", 0xc1}], 0x5}, 0x4004000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) sendfile(r3, r2, 0x0, 0x1) 23:37:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x1, 0xffff, 0x0, 0x2, 0x6, 0x5, 0x80, 0x800, 0x0, 0x2, 0x8, 0xffff, 0x1, 0x106, 0x18, 0x8, {0x8, 0x9}, 0x9, 0x1}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) select(0x40, &(0x7f0000000140)={0x101, 0x9, 0xfffffffffffffbff, 0x800, 0x17, 0xffffffffffffff7f, 0x1}, &(0x7f00000002c0)={0x3, 0x20, 0x30e, 0xcd08, 0x1, 0x5, 0x8001, 0x9}, &(0x7f0000000300)={0x5, 0x0, 0x5, 0x3, 0x2, 0xfffffffeffffffff, 0x8, 0x5}, &(0x7f0000000340)={0x0, 0x7530}) sendfile(r0, r3, 0x0, 0x80001d00c0d0) open(&(0x7f00000000c0)='./bus\x00', 0x840, 0x68) [ 970.423250] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 970.554143] FAULT_INJECTION: forcing a failure. [ 970.554143] name failslab, interval 1, probability 0, space 0, times 0 [ 970.567782] CPU: 1 PID: 12347 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 970.575890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 970.586078] Call Trace: [ 970.588700] dump_stack+0x197/0x210 [ 970.592545] should_fail.cold+0xa/0x1b [ 970.596491] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 970.601890] ? lock_downgrade+0x880/0x880 [ 970.606349] __should_failslab+0x121/0x190 [ 970.610892] should_failslab+0x9/0x14 [ 970.614894] kmem_cache_alloc+0x2ae/0x700 [ 970.619346] __alloc_file+0x27/0x330 [ 970.623299] alloc_empty_file+0x72/0x170 [ 970.627413] alloc_file+0x5e/0x4d0 [ 970.630985] alloc_file_pseudo+0x189/0x280 [ 970.635423] ? alloc_file+0x4d0/0x4d0 [ 970.639340] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 970.644944] ? kasan_check_write+0x14/0x20 [ 970.649205] __shmem_file_setup.part.0+0x108/0x2b0 [ 970.654170] shmem_file_setup+0x66/0x90 [ 970.658181] __x64_sys_memfd_create+0x2a2/0x470 [ 970.662878] ? memfd_fcntl+0x1750/0x1750 [ 970.666965] ? do_syscall_64+0x26/0x620 [ 970.670970] ? lockdep_hardirqs_on+0x415/0x5d0 [ 970.675584] ? trace_hardirqs_on+0x67/0x220 [ 970.679950] do_syscall_64+0xfd/0x620 [ 970.683924] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 970.689317] RIP: 0033:0x45b349 [ 970.692536] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 970.714982] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 970.723323] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b349 [ 970.730610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004c03f8 [ 970.739394] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000001 [ 970.746682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 23:37:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 23:37:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 970.754151] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000005 [ 970.777630] audit: type=1804 audit(1579822620.661:425): pid=12554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir435837952/syzkaller.UWUy0t/842/bus" dev="sda1" ino=16769 res=1 23:37:00 executing program 5 (fault-call:0 fault-nth:6): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:00 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2b, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:00 executing program 4 (fault-call:12 fault-nth:0): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="72617700003f080000008dd58236a5c80000000000000000000000000200000003000000c8020000580100000000aefd2c359b311362000000000000300200003002000030020000300200003000000000000e000000001ccad65c5e736bb84ac11a1ca2efc5441b99827b3231e51a753de0a0ed684e25c86cea31533b61bae4045b1b6c7a71cff7b46226cd856e6cd2404335927ea128fde5683fd8fb7a4e019bd6dad4c8f89a299969ce2926f46d71d421fbad4dc7fec0393511eeb18abf5cda3c6ee83b2799a091ca818871c54b0e"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:00 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000200)={0x2, @output={0x1000, 0x0, {0x6, 0xff}, 0x0, 0x4}}) [ 970.961306] FAULT_INJECTION: forcing a failure. [ 970.961306] name failslab, interval 1, probability 0, space 0, times 0 [ 970.979005] FAULT_INJECTION: forcing a failure. [ 970.979005] name failslab, interval 1, probability 0, space 0, times 0 [ 971.031963] CPU: 0 PID: 12679 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 971.040261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.049979] Call Trace: [ 971.052602] dump_stack+0x197/0x210 [ 971.056269] should_fail.cold+0xa/0x1b [ 971.060192] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 971.065317] ? lock_downgrade+0x880/0x880 [ 971.069775] __should_failslab+0x121/0x190 [ 971.074051] should_failslab+0x9/0x14 [ 971.077882] kmem_cache_alloc+0x2ae/0x700 [ 971.082130] ? notify_change+0x6d5/0xfb0 [ 971.087076] ? do_sys_ftruncate+0x41e/0x550 [ 971.091919] getname_flags+0xd6/0x5b0 [ 971.096096] getname+0x1a/0x20 [ 971.100282] do_sys_open+0x2c9/0x550 [ 971.104481] ? filp_open+0x80/0x80 [ 971.108924] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 971.113810] ? do_syscall_64+0x26/0x620 [ 971.117918] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.123661] ? do_syscall_64+0x26/0x620 [ 971.127693] __x64_sys_open+0x7e/0xc0 23:37:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 971.131529] do_syscall_64+0xfd/0x620 [ 971.135345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.140558] RIP: 0033:0x4150e1 [ 971.143786] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 971.162961] RSP: 002b:00007f9c56ebea60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 971.170765] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 00000000004150e1 23:37:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)={@empty, @remote, 0x0, 0x4, [@rand_addr=0x8, @loopback, @multicast2, @empty]}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r3, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770fce1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd24e441e7999025e0eaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708abcbc3e98300f8bfbc8a74d86fa1c02fb5c92f868221997e915782011e19dfa4bf24d77cf7cbf984babeefdfdc35a1655f71b5f64fff04444d0ac7f8845a740bde36048d5728e95710566171dd88535800f4a1121bf4c1b19a3f24090c5a9c"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 971.178062] RDX: 00007f9c56ebeb0a RSI: 0000000000000002 RDI: 00007f9c56ebeb00 [ 971.185786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 971.200735] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 971.208401] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000006 [ 971.229033] CPU: 1 PID: 12664 Comm: syz-executor.4 Not tainted 4.19.98-syzkaller #0 [ 971.236970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.246936] Call Trace: [ 971.249552] dump_stack+0x197/0x210 [ 971.253215] should_fail.cold+0xa/0x1b [ 971.257151] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 971.262282] ? lock_downgrade+0x880/0x880 [ 971.266470] __should_failslab+0x121/0x190 [ 971.270733] should_failslab+0x9/0x14 [ 971.274571] kmem_cache_alloc_trace+0x2cc/0x760 [ 971.279282] ? file_has_perm+0x26d/0x390 [ 971.283375] alloc_pipe_info+0xbc/0x430 [ 971.287483] splice_direct_to_actor+0x76c/0x970 [ 971.292362] ? generic_pipe_buf_nosteal+0x10/0x10 [ 971.297233] ? selinux_file_permission+0x92/0x550 [ 971.302120] ? do_splice_to+0x180/0x180 [ 971.306321] ? security_file_permission+0x89/0x230 [ 971.311286] ? rw_verify_area+0x118/0x360 [ 971.315550] do_splice_direct+0x1da/0x2a0 [ 971.319876] ? splice_direct_to_actor+0x970/0x970 [ 971.324757] ? security_file_permission+0x89/0x230 [ 971.329709] ? rw_verify_area+0x118/0x360 [ 971.333884] do_sendfile+0x597/0xce0 [ 971.337634] ? do_compat_pwritev64+0x1c0/0x1c0 [ 971.342258] ? fput+0x128/0x1a0 [ 971.345579] __x64_sys_sendfile64+0x1dd/0x220 [ 971.350113] ? __ia32_sys_sendfile+0x230/0x230 [ 971.354983] ? do_syscall_64+0x26/0x620 [ 971.358983] ? lockdep_hardirqs_on+0x415/0x5d0 [ 971.363660] ? trace_hardirqs_on+0x67/0x220 [ 971.368019] do_syscall_64+0xfd/0x620 [ 971.374228] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.379444] RIP: 0033:0x45b349 [ 971.382667] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 971.401717] RSP: 002b:00007f31ee022c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 971.409450] RAX: ffffffffffffffda RBX: 00007f31ee0236d4 RCX: 000000000045b349 [ 971.417001] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 971.424288] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 23:37:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x2f, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 971.431580] R10: 00088000fc000000 R11: 0000000000000246 R12: 0000000000000007 [ 971.439021] R13: 00000000000008a6 R14: 00000000004ca018 R15: 0000000000000000 23:37:01 executing program 5 (fault-call:0 fault-nth:7): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000080)={0x401, 0xc, 0x4, 0x70000, 0x80000000, {0x77359400}, {0x4, 0x2, 0x6, 0x6, 0x7, 0x80, "ea104fd2"}, 0x2, 0x4, @userptr=0x20, 0x1f, 0x0, r5}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000500)={"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"}) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:01 executing program 4 (fault-call:12 fault-nth:1): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x20000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x12) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 971.608574] FAULT_INJECTION: forcing a failure. [ 971.608574] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 971.620623] CPU: 0 PID: 12915 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 971.628519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.637888] Call Trace: [ 971.640503] dump_stack+0x197/0x210 [ 971.644159] should_fail.cold+0xa/0x1b [ 971.648082] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 971.653565] ? mark_held_locks+0x100/0x100 [ 971.657833] __alloc_pages_nodemask+0x1ee/0x750 [ 971.662569] ? __alloc_pages_slowpath+0x2870/0x2870 [ 971.667637] ? find_held_lock+0x35/0x130 [ 971.671738] cache_grow_begin+0x91/0x8c0 [ 971.675825] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 971.681400] ? check_preemption_disabled+0x48/0x290 [ 971.686451] kmem_cache_alloc+0x63b/0x700 [ 971.690626] ? notify_change+0x6d5/0xfb0 [ 971.694714] ? do_sys_ftruncate+0x41e/0x550 [ 971.699333] getname_flags+0xd6/0x5b0 [ 971.703343] getname+0x1a/0x20 [ 971.706960] do_sys_open+0x2c9/0x550 [ 971.711487] ? filp_open+0x80/0x80 [ 971.715176] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 971.719966] ? do_syscall_64+0x26/0x620 [ 971.723963] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.729353] ? do_syscall_64+0x26/0x620 [ 971.733352] __x64_sys_open+0x7e/0xc0 [ 971.737205] do_syscall_64+0xfd/0x620 [ 971.741051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 971.746254] RIP: 0033:0x4150e1 23:37:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @adiantum, 0x0, "8512d9553b06ea6c"}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000180)={0xfff, {0x9, 0x6, 0x4, 0x495202ef, 0x3, 0x7}}) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 971.749465] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 971.768393] RSP: 002b:00007f9c56ebea60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 971.776144] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 00000000004150e1 [ 971.783626] RDX: 00007f9c56ebeb0a RSI: 0000000000000002 RDI: 00007f9c56ebeb00 [ 971.790377] FAULT_INJECTION: forcing a failure. [ 971.790377] name failslab, interval 1, probability 0, space 0, times 0 [ 971.791602] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 971.791612] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 971.791620] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000007 [ 971.840920] tmpfs: Bad value 'local:' for mount option 'mpol' [ 971.849278] CPU: 0 PID: 12914 Comm: syz-executor.4 Not tainted 4.19.98-syzkaller #0 [ 971.857118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 971.866490] Call Trace: [ 971.869109] dump_stack+0x197/0x210 [ 971.872768] should_fail.cold+0xa/0x1b [ 971.876689] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 971.881840] ? lock_downgrade+0x880/0x880 [ 971.886545] __should_failslab+0x121/0x190 [ 971.890816] should_failslab+0x9/0x14 [ 971.894730] __kmalloc+0x2e2/0x750 [ 971.898300] ? kmem_cache_alloc_trace+0x348/0x760 [ 971.903295] ? file_has_perm+0x26d/0x390 [ 971.907469] ? alloc_pipe_info+0x19c/0x430 [ 971.911756] alloc_pipe_info+0x19c/0x430 [ 971.915849] splice_direct_to_actor+0x76c/0x970 [ 971.920548] ? generic_pipe_buf_nosteal+0x10/0x10 [ 971.925416] ? selinux_file_permission+0x92/0x550 [ 971.930287] ? do_splice_to+0x180/0x180 [ 971.934294] ? security_file_permission+0x89/0x230 [ 971.939256] ? rw_verify_area+0x118/0x360 [ 971.943436] do_splice_direct+0x1da/0x2a0 [ 971.947616] ? splice_direct_to_actor+0x970/0x970 [ 971.952495] ? security_file_permission+0x89/0x230 23:37:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x31, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 971.957449] ? rw_verify_area+0x118/0x360 [ 971.961632] do_sendfile+0x597/0xce0 [ 971.965389] ? do_compat_pwritev64+0x1c0/0x1c0 [ 971.970006] ? fput+0x128/0x1a0 [ 971.973321] __x64_sys_sendfile64+0x1dd/0x220 [ 971.977967] ? __ia32_sys_sendfile+0x230/0x230 [ 971.982931] ? do_syscall_64+0x26/0x620 [ 971.987063] ? lockdep_hardirqs_on+0x415/0x5d0 [ 971.991937] ? trace_hardirqs_on+0x67/0x220 [ 971.996394] do_syscall_64+0xfd/0x620 [ 972.000500] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.005910] RIP: 0033:0x45b349 23:37:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0xfffffffd, 0x8, '9P2000.u'}, 0x15) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:01 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x2b, @local, 0x4e21, 0x0, 'fo\x00', 0x20, 0x952, 0x57}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x10000, 0x5, 0x2, 0x9}}, 0x44) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) write$UHID_CREATE(r1, &(0x7f0000000500)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000280)=""/49, 0x31, 0x3, 0x6, 0x1, 0x3f, 0x7fff}}, 0x120) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000200)) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000640)={'filter\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f00000002c0)=[{}], 0x0, [{}, {}, {}]}, 0xa8) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) [ 972.010475] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 972.032305] RSP: 002b:00007f31ee022c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 972.040034] RAX: ffffffffffffffda RBX: 00007f31ee0236d4 RCX: 000000000045b349 [ 972.048580] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 23:37:01 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x8) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1f, 0x800, 0x9a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={r8, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000200)={r8, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x9) [ 972.055959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 972.064023] R10: 00088000fc000000 R11: 0000000000000246 R12: 0000000000000007 [ 972.071491] R13: 00000000000008a6 R14: 00000000004ca018 R15: 0000000000000001 [ 972.099663] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20001 23:37:02 executing program 5 (fault-call:0 fault-nth:8): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:02 executing program 4 (fault-call:12 fault-nth:2): r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f00000000c0)=0x7fff, 0x4) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r5], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r6 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r6, 0x10001) sendfile(r0, r6, 0x0, 0x88000fc000000) 23:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 972.276974] FAULT_INJECTION: forcing a failure. [ 972.276974] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 972.290453] CPU: 0 PID: 13181 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 972.298892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 972.308650] Call Trace: [ 972.311275] dump_stack+0x197/0x210 [ 972.315152] should_fail.cold+0xa/0x1b [ 972.319658] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 972.325014] ? mark_held_locks+0x100/0x100 [ 972.329467] __alloc_pages_nodemask+0x1ee/0x750 [ 972.334203] ? __alloc_pages_slowpath+0x2870/0x2870 [ 972.339362] ? find_held_lock+0x35/0x130 [ 972.343472] cache_grow_begin+0x91/0x8c0 [ 972.347833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 972.353402] ? check_preemption_disabled+0x48/0x290 [ 972.358459] kmem_cache_alloc+0x63b/0x700 [ 972.362907] ? notify_change+0x6d5/0xfb0 [ 972.367554] ? do_sys_ftruncate+0x41e/0x550 [ 972.371904] getname_flags+0xd6/0x5b0 23:37:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000143042, 0x1) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 972.376213] getname+0x1a/0x20 [ 972.379456] do_sys_open+0x2c9/0x550 [ 972.384902] ? filp_open+0x80/0x80 [ 972.388662] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 972.393724] ? do_syscall_64+0x26/0x620 [ 972.397735] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.406626] ? do_syscall_64+0x26/0x620 [ 972.411624] __x64_sys_open+0x7e/0xc0 [ 972.415629] do_syscall_64+0xfd/0x620 [ 972.419769] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 972.426495] RIP: 0033:0x4150e1 [ 972.430045] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 972.450114] RSP: 002b:00007f9c56ebea60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 972.458201] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 00000000004150e1 [ 972.466501] RDX: 00007f9c56ebeb0a RSI: 0000000000000002 RDI: 00007f9c56ebeb00 23:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 972.473881] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 972.482876] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 972.491255] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000008 23:37:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000080000200000003000000c802002ca822e13000580100000000000058010000000000000000300200003094010030020000300069069f43b3f11d270e1daa61b746d5b33d2474a1dc6b09f996ff2c90b2216287f92f5cd3f8bacdd5ec2a5c3e3d263e10425ae60694730d80ef19bdef2d93596020e878eac1b3f249e0e73308589500000000000000"], 0x1) socket$packet(0x11, 0x0, 0x300) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x7, 0x4, 0x40, 0x40, 0xa1e}) r8 = dup3(r4, r5, 0x80000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$isdn(r8, &(0x7f0000000180)={0x22, 0x1, 0x2, 0x4, 0x8}, 0x6) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0xaa}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x88081, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x315787cf257f8c1f}, 0x20004010) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) 23:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(r6, 0x0, 0x0) setregid(r5, r6) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:02 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) syz_open_dev$ptys(0xc, 0x3, 0x1) [ 972.848667] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:02 executing program 5 (fault-call:0 fault-nth:9): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x49, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:02 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x101, 0xf8, 0x7, 0x5}, {0x0, 0x8, 0x3f, 0x2}, {0x4557, 0x5, 0x5, 0x7f}, {0xb5ac, 0x9, 0x7, 0x2}, {0x3ff, 0x11, 0x81, 0x1}]}) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:02 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000002) 23:37:02 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="7261770000000000000098d58236a5c8000000000000000000000000000000000000000000000200000003000000c8020000584fd0857c9b01000000000000580100000000000000000000300200003002000030020000765bfd1357d7728b2424ed65e275a232f03e6f05250cbf05300ad60a4cb344f0c563ba63bd1c453a1648808695fd89f1cb87768ad6b6db7f5d48adaa85fd638ef24a46a5b0b123b003122df6c5ade92f2df57aed7a4b575544c4df3ac47aee679612e442eedc1ee4e0ec8f88d49dd9422aa92ec4c2f66c5d74c94c27606bdad374c1124456bd8a615fc9653280ba7ec3d28b6cfaadc4745500"/251], 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000000040)=0x8) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x60, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 973.033287] audit: type=1800 audit(1579822622.921:426): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16538 res=0 23:37:03 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) io_setup(0x7, &(0x7f0000000100)=0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r6, &(0x7f0000000140)="0e", 0x1}]) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) io_cancel(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x3, r7, &(0x7f00000001c0)="df836ea8a3780a2258655b1098f94cd25842c0d6e12f0192a8dd9676c2aa2be5d58cb21acd5a38e8d1a5923a09bdaa837effbc06226f686dd11b16ee81c78fbd9ba9ccfbc5492fa2d7d7ff0719e2bcdb2d79d64e7a1a6b2749667746d80e20b2e2a7163801fdd326d48babb703d3dc0400774d", 0x73, 0x8, 0x0, 0x2, r9}, &(0x7f0000000240)) [ 973.137647] FAULT_INJECTION: forcing a failure. [ 973.137647] name failslab, interval 1, probability 0, space 0, times 0 [ 973.163156] audit: type=1800 audit(1579822623.051:427): pid=13598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16722 res=0 [ 973.187951] CPU: 0 PID: 13703 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 973.195883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.210374] Call Trace: [ 973.212991] dump_stack+0x197/0x210 [ 973.216673] should_fail.cold+0xa/0x1b [ 973.220596] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 973.220844] input: syz1 as /devices/virtual/input/input536 [ 973.225722] ? lock_downgrade+0x880/0x880 [ 973.225746] __should_failslab+0x121/0x190 [ 973.225766] should_failslab+0x9/0x14 [ 973.243761] kmem_cache_alloc+0x2ae/0x700 [ 973.248121] ? rcu_read_lock_sched_held+0x110/0x130 [ 973.253206] selinux_file_alloc_security+0xb4/0x190 [ 973.258257] security_file_alloc+0x63/0xa0 [ 973.262571] __alloc_file+0xcf/0x330 [ 973.266343] alloc_empty_file+0x72/0x170 [ 973.270429] path_openat+0xef/0x45e0 [ 973.274177] ? __lock_acquire+0x6ee/0x49c0 [ 973.278437] ? getname+0x1a/0x20 [ 973.282788] ? do_sys_open+0x2c9/0x550 [ 973.286700] ? __x64_sys_open+0x7e/0xc0 [ 973.290721] ? do_syscall_64+0xfd/0x620 [ 973.295338] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.300832] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 973.305527] ? __lock_is_held+0xb6/0x140 [ 973.309683] ? __alloc_fd+0x44d/0x560 [ 973.313523] do_filp_open+0x1a1/0x280 [ 973.317703] ? may_open_dev+0x100/0x100 [ 973.322495] ? lock_downgrade+0x880/0x880 23:37:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = socket(0x1f, 0x800, 0x9a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={r7, 0x2, 0x6fd}, 0x8) ftruncate(r3, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) r8 = signalfd(r2, &(0x7f0000000140)={[0x2]}, 0x8) fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket(0x1f, 0x800, 0x9a) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r14, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r16}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r13, 0x84, 0x75, &(0x7f0000000100)={r16, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r12, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x3ff, 0x9, 0x0, 0x1, 0x7, 0x5, 0x3ff, {r16, @in6={{0xa, 0x4e22, 0xc0d, @loopback, 0x6}}, 0xfffffffd, 0x4, 0x6, 0x5, 0x7}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000380)={r17, 0xfff}, 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006940)={'team0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000082c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000006980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r19, @empty, @loopback}}}], 0xe8}}, {{&(0x7f0000006a80)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000006c40)=[{&(0x7f0000006ac0)="45c364b8141b6fc4fc159cb68c163adc3b9c2ba015b5897f927e975d90c209bf83aa150c4350df79329b70d15f0774bdc02ea3d3f42989f93dfbc0a75fc08b5e41f034829312692e8740d60f0acf8c3977c4ca8136cd7630ac0bbc3ebdf84c174e22391d62221deaa277350d0867449024e40c", 0x73}, {&(0x7f0000006b40)="676c48e467d685056d20e7cfc29bea76b91f63fcd49cc68cf66ac31c2814f48a573b6ca49c303187176e88ba3891349f730f0b19c2e29881939a9ea6da34fdec251a7af488e78c9bcbd3f772ec385190cc6eb4ea69102d6174436438c49a32576db6bf4d1a487940ad5f60a80db065690888d71e927c0226d75cc972bdac095a5501e34d4bcc9867adb1cdd4b6c61d81ad6782dd51d6beec3246cd8b9524665d4f14f1623c067c19a78972e72ca3cede934f142192d85a7753ef944923351bbb4943a159626392e765e47b04a5d64f3317a4", 0xd2}], 0x2, &(0x7f0000006c80)=[@ip_tos_int={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}}, {{&(0x7f0000006cc0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000008200)=[{&(0x7f0000006d00)="f6600d71773792d5c401abee0113db19a996571c4da9d1f74c33e8d7caddb9f9becfbdb637d8a559aa9171185789e216ee4b08b1b2bceb99204d6be22bf7ad1a13d649ebd7c7d4197ec7abf71c9a816bcddbaf38e1ffd0b170057d454bd4100df4cd90198e4ea3ad1d886be6a15e38d0ac6fc430f51bcd9d44cbdabf7745dcfb", 0x80}, {&(0x7f0000006d80)="ee8518ce9642f81a6840339a7fc66802ec629c5795f59e7e2ae55b6bb444466a880487a84fed34952f9f933aa63b5b3c43e5459362b74c71d34c00bb1471c166734f8518c393a11c50cdf3a8d7d8e3681abeb5fb0a1ea0a3ea00249178e896a73c11d6d05464be34fc44737b016682ad86f41ff345c83df34161b7b80e7ab2fe317ef4c1d865e99919c6ee2b960a75f38b08d5c855de848456040d562cf823c9f38d1e09d96c09f3177a9ed2e382b80cb877de3866e408d2624cda1cf4801dd34987c2c7bb2659c52facad2e7a91448255a71584cc669516cd3139fda388b77e266eee0737f500296252ae26e3746116758065d3a91a3d703aa93c49ae89cbd3c10592e15993ae8ff7e88c3a67528904018ab64955adb080d4a0d2673af2d6731baf4535d928903d2504195858da5fc05f10eb14441ac12b081bd8e4ca73a91027adf572f4d7fab0aa98e73313822781b38d97ff5871f302c55e7d5811e060ba87ac3ab721e17a6a16a7ac2deccee979f587de6e3802168c09b30b90fcaecd048bd8cbdddf770f0b7ed7861d165d8fa4616e8570db7fee5b80456abc092a598a151ee1303fa8cd19ce79392811753cc52255f0b1f03f5085f8bd51ee06fa27d5c197cc3102146205d1063fe40af69cff107e49ecd318a3f412458d2d24db9eb5f98c3aea49ce128417e00c53a63ae0d4cbd03fe5536bded7f4400ca8e5b232184e4e26be7d3a8c55c8c48b5338f9927c857ef02c01a7fe91bbee95a74e3d9c75dbc85ed0c81d59a89c6f213e3515a20f541a7ff6a5dea6d688f915274c266b784fadb49932cc85a8cc6654a8903a37da06437a92b7bfb2ba27ef74e281aade1506cc5b2e41508b5b43f8f9fd1e79e24d1d2404d0acbf60a44f711361723338727e7c2f2d5b6c97452c9cedb2cc58eb11e9d06b2e952be9e2587f929a8fd7c302f3e78648047c9c3f2974ee4295ed927348ca19eb4ee04bb71af20bb110a71c78d6f8264516af744dca6c38525588a8adc9e08b11f94007a46788bf4d5fbdf5cd7e04402151bcb1bcbb0070233799cf2abecf558fc9ce5368892537384cca03d361eada19515d5ef5519313f02b9dbfeb8f2d868ca3860deea2a2e17fd355cddb044745ab525b6c2e3e681c103892bff21df04d2b365e3327d9d56cc5c7ed94c87d4222b7eca50809293720f89cae3ce0f9b4805db3703dc05109b002315c0df9df9825d426664fa9a2b42adc350aafe0a0bd16b1dcf2d160fc155f33f0f5edfefc6259ddf93dfd86a969c96c3cd1f497826a9173481d989f610481b825756813bedf435f0590dc937a3fb3a61cb75877908be6dfb9f77e619da7cc0023f6a81a2083813acdc84a615fc720f87ffa2111ffb5665e472c3c7d00d6fd3401228c338594be6a89094b867beda6d5abef61563b03751ba14018320226bd794d9124e4489fff953896e721e2c24d48ae888f2528519ccb58a1e357b2a38219eb527280825b5e88a0068bdff4e187eb767054dd5a4d3419c4f6507f73cb9641ebd747b97e57db96f948e34b08e62913ffa7c15f99bd277623ca7cfd4a35df05abcec68a2f1f73fd983fc60684dc5ce8fcc4d99277d0c5277b25f70a97385b781ad2808aa9ff8ddecf359a6ecf1e549549920441197c59febca013867fbf901692a84944443603c340cdc56506b5ac12f25d506f563871fb1fb74a0383ef223451fbcd5f44ebb927304552c15a96a4eb7a0543c53e25532efa2d6d99d37329922bb76c9f8e2fe2c2cbdf716819ee88c98ced347504f1c2539672eba4060e8736ad6ff1553dc24c79973e7f41a7f0695367e0046cae628a4e75844e0113ed745ef0cb01661e4e97b27accefadc3eaf6d7a193003c610e6d58c8a8abf367b32fe7a86b3dd2e29b6f86d676b20c7fe3efcedbba020689d4e7a4644cb16c703f1f75dd037a224a73d679d381c0ce905d260aa36bb956b8b5ac1784a52e68a9655b303dc9a0dedabc7c1782e8533572b448940bdac49d7bf62ac43c025d73433ce31b82dd5b81833b3445a4c4aa3dbda0b82cc4cf8843f8c494b6337d8e166eb7b7de6fff5630077b0d98616e60edb8adcc583f00db6d1d5a9d951901a54ed7bac994e16703402797024c6bf8b417039cdf6564204eef091fa22adf637fd26c9ba6ae3ff500f2554750c8e4720666e3b9b4a3ed06e782e124a10670169f1ce973f18c490ffb25f02f9c5716c0e6adc933e5f45911dd011b84addedeb749ef84c01ff8fa2dc685d12078f661142f26e00e89dad60ac179d657b710c6eea9b5333d5d3d5fff9f4aa58869203a4c6d942fbd88cdfe6c28a274e63f2e1bb7d872721376115c16ec3cb1163e4d1e0f85224a3051d1a092a7fb2b0ed5400ed367c70108f5346b539443f4568d240d204d655a6d50e3c2433cf43fabb1571021c2f4729da663fb8b5ab8626cc22cf6f98412f2ca9fb4a24892ce00cda288bd5978f8261326e62abf8a856caa386ccbb46f756c2b4f1226e5a81cbd8196bfed7f7e34d693b3710dae6493260ce2e2f8a4c8858719ae990b8f64572bc7436f802f768a5506ed059eba652b6d9a4bd14bc3d7fab28d5f6b918dd4394a435e9785845ab920f2c611abc5b16b30fe4678be4f1f63de0c8aabe52ea3cb7693740f694db835356744364ac860ff3b22d14e4f453050a69c90c41d646c4dac2fd7dea4894e8182a31c7899ffd246f10b98bafb0a659c5d68eb17a45d524d4a1f6e06f6c903ecd67a18fa3dde6589969a94acb7c0e0e7aaf1d6d0ef6e591d17dcfbf271be8cbda579e22de63c668768152485d9d0ef535199a849ceb4e1126d0f8446d224622d784efbdd7e43266d8a7ce52571118febad6ea731c1ee5c057c976e756f2828b3b25046d1f081672b58f1c63a8497bc3cd48fc0784196f15d57bac3156086bb373d3ff71d9862bf6cd3385fa4dee01c2e38225e2d067a2782850b3065d3f112afb47c2241d295cdfcd14d90c98f399b5d5600572b31fab5ba8ad32826dc3d228cff84bbc9a0e621f813c75c588270b39ceeea0b313c314a4123dd284265ee6219c49728dad419895c7d4987ed9e8a3617b56897758a7601eecb9fea777145fae95d7c60e5456be2236ec315d01b25f0e3fb6054ee05fe573be14dab5b9a60761325082e36d08eb8fea680fc363ede53bb7b2d47e09a0fdfdb6ea744403db2436166c7aa0560baf19329ac5ca2565747ac5eca209c70253e527c60bdf3f9d9d891f4a2a213845531515c09bb7b95bd8d8220023409152d76a6d70a49d65b468b2fd97af3bb039b4e54c919e7b90fe599ad02dcf49a662b30c03976c11cfe56d942425e0889ed9000942dbd78fb1943667fda038f48267ab28b7d680c7d490e6d72f0097265d9958ddcc76db621cba4c3aaa5ad1dc659053d4cbf5636dc87f9fa09a3dcefaaeba25cb8dc6faf74053de914a72402ba67a953d49fdbe10c71f84457097b79433b3be131ec1217a8c790a8d8f5e7284514e93659b7e2d27f1dd35b254a3f969fb665fe935eb39cfaa0cbb01db0b5cd4c9a3cdb652e7d5fa1bf8c60d55f98a6e0e06d56d1e707613f4aa24ea1ca51df4e62b3083bb298b3526c59441d2676c45d7ad5afd5ed110c74b4d9c08382cb739181de73482e57fb2c3a227b32fb032f1b457bb4debcfb9022a64b99dcc881c4c26fe5aebc634e60b9dd711212fcfdba72de8d98bb3d1e9c322e8d4286b1e990ca7749967c2b9c33e72442f719cf21d57fca8ea60b7d44a39115064a4201b081b3fbcbf3e5978a8317a786dc00e99dcab629197111841ffb14bda428322b010af6251325e1c30dd4836517ec9d91c965d55035a5242230a571460d559a5761a7ab3ef0f66c051438f3e6e91ca85cb0b0c92c35e24921133a55efd1704a0f5671d3d000a7217087f501e902e575b4d990a165249859afb56bfd2bf6a3153df60d3156e15b2270d17ed384448bab1d2a3724ba45d776fec868ce785c3c3f7d7b64c95cd1119123986ca7d52aece58cb001431f39dc19c92a8d3a0b8ddef66043e4ca2a25572286003bcdd4eaad00a47287257d6078d768c0f0b610241e71dc1c992a981cdf141bfa11950c061e362953fc151fa99bf386e717c9a4b1c4181b032aeaac41347d16c61affd7a03624bdf46b854f4a1fbdff7e4492fc4134dedddd3831e25ad9ab87463cf96b96e66a91348af78625a7539f3b09eec6cc96c7a020128c4f03c0238d2eaeee7fb47f46a4c9c78041cbccbdd9bb360398a993c2557a7709ce6981a29f58f0c14ee9da1326ff005d752db9849020fbfa3fd2178c99b793f74bb8f8383491c2dcf6704dad90b63a486c37134734877a46632d1c819246704b0ef09e8e59d14886a2d382877f141b1b2f5a656f44c0930c7286479c9b59fc9b7ffb9f0b9628cb4dc66b623d8e0623c53781f63e29e83f866f238b775184c1e9d8859c2b6f1b125c0f554245e7a07a130047f2cc25286fc56fcc8aa0019ce57df392f2c94b821452eb1fe4c01b4b1e7066601ff179a6e8c14a707dffa682b6db6afd07830b5f3822030f5330db985016be7b1516c923786a87ad1d985322fe02411da2d3efd3232d30bee566e9759fdc1af60e3d6830bfc3f5caf680f6257cc34b34b064485cd2de8a74aa7d5f2031a123407b06c19a6cad65761c051531f525709b0f7c9164a360122b6fa855fe8ce42cf0dd1a69d90208e94c0ba40f3862783963a3185c6c7b612f80d57932430f9c80f03ac0a293273757121d91ddf1e7eb1cd67bd6f639c27c0f57fbfc762bfb61bf18544fc10126f7436a80a0349c3779a792a3660fa8bbc4cafbcfa9a288a87b2eaffc9bf4d8ea8bb94c94c0c04c6ad6e511d8156592cf45f05bb2165102e005b7d0acbbf4d9bd1fe0ca16450300154995bd83a6f1b574bdacf87022722da7333ce2d57043fb15494722802f4d74c2e8339d903111dbb98571a5e346eb50371dabdd1129bb069cc7dff5d6016a14604b1d4f742503832f97632beeb37562aacc0d6bf1b0e28defce1fbe52875b975113fbfceb024cfe94d8434ce1ae3aa0287c4b18eeaeb89a53692da9f310c9678bdce8ed146a4917c882bc6992af6ed6b8a34406217dd49270140ac3422bf4a94dde060192da189255762131264491de4e5d18d55a0cf6f234014f27e494b30a23461ab85189e083de1c68901811566ee4a4b1badad8ee8aee1ef2e77c61ef13d3b66ccd3e556d3c5e8c5e3bd414d4dc6799304a811cd5f89f42cb37f84e704d9e600157db42e4c026838b4207a54b27c54dcb8cfbad8e313ce4e03770c2a633167fb9d80e458c5658259e8a6767d0c788c32f256ab55a81a02851fb46e4e3d1ce2bb09da75caccf5988e7c4b5f24c8884c6ac3d40eecbec457a08e12a95362c3e15ca15eefc0f1aaff3dd73ee2e1fabae108e1113b426c5681b8661e435d038a26a9aedecdd82dbc78428120fdc866944a5d3f72b7c9b09dabe4cb3e989d5eb9904d8f46a69d9a670fa88b541a14c254b701e82085475853fbbec3e373b758704bff92751ec719952472dbfd0399340ee5037f7d3ba63e38cc86973352749b9e61d0755d337456aeb1e9fc860aea5ffb054a7a68de1e99474b59f7bcdb105bcc7836fac2077569775ae9ac7346f7a6baf5d7855a69c440ab869ee0ce23b4183a06cdf6ef20b5549f506dfafe1124b4eaf442fb674021d76e11172334a28b33a9d6ed4083acf482ac69184041297e7c4d685fb5c599b3569ef3952fd09b9f262d21a832fe332a43faaf17278039cc2dd607af89f8531", 0x1000}, {&(0x7f0000007d80)="f6155ea23ca3e293e1ad1f432590df4adac169a8d08507564e47ab17a7e41fa2a779fe1479f1e7b462f5471c2fffcaa03ee93b675fec80b7a770c9a54cf7c97590b9db3c9c399e39476d0a845452095d8308ceec71db9e034fd8e7d60986c40380f020d0", 0x64}, {&(0x7f0000007e00)="1dd73d4c621dd12b654931fc23a3fe025c2a2428d2a7c9b57ef6e1e1f354", 0x1e}, {&(0x7f0000007e40)="b7553980a5733e0a96e7c5bf5e905319e058cab817698b98c5d67e5be8799db2c916cadf8720232720fa061d39a926285227ba47e1964367e8ee5c11d0261e051b126d0be13f7b033f4d46471f041bd4ceb9552510c8e76c92c97d5382e58524d7ddd79f3d5c5ced7b7c5aa354e0b8af9da67fdc7163e0238a28e23ba9d0d85d195306e41188514a02817cc573032ba5c30617d49da631089cd6084e8ca2533307ebee07c3773ea88a6b2ff0610275ad61a03636e71c4444a81f14d09d8b2a9581bc5ec6b467a6bc5203a8095c48e7aec85981bfab19ba24e3e5ec03bdaa", 0xde}, {&(0x7f0000007f40)="3dc4c559e54e482b93fffd5702e6c4f0ce69c9fd26ace9b2fc1b85f88f9707351f8e92ac4e3ab007ab2383407aa462fd395e8df52ab3faf7d41e0135e594121308aab62ab0bcd2c584a6b8ef2867ede9c1ea84426aacec90942f2e67f2904430a8fbf18c4b826107b04f0ab6d0d672adc29f4ef476b330a2ba1af84cdbcb9f447bdacd7ba83d960759fdeccdee94e39d2d8473e44715c5db875e95e5d8", 0x9d}, {&(0x7f0000008000)="0c998a32ba59e7033a09f586f87f1d8ccfc70901886962bd35cba479aea19a7acc41e71dc86cc28ca1e8a0365078d92e63458a3d2c6777fa8874e8e3c3d49031918368da27c636b72122b1937aeba58d214190bfd9cb9dd1b1a6e4ad3edcc95ce79ca64f8b6495e64d8dbd89c400cc5049546caa7888f5c129a779ee3eb748b938ea98c9c8c7ead3ed637a7279463e", 0x8f}, {&(0x7f00000080c0)="db8975c3cb6ae3e8bfbddeb4ebd007beb2dfff883702c6c190ddd3e9e4ebfbdeb43deeb33cc2e655405a0e453e2b362307566dd0f51d8cb7d32c6a4fbb68597aa3bb42c97843e8a3a363a9af8ec8e64344c233814a17687a79889ff5acf70e34f1370740026c86b5e5656aa05ef9670c0b93086e36c0e2a5983f0b00d44c49537a20752241d55f4cda1ba5fe9b2ff9dba9497d8ba8b0037ceba895827053cff152af0434fe8b0af46a85bb7450b6050382e79919e2f3552bc9c99b737236b06ef5cbba4b", 0xc4}, {&(0x7f00000081c0)}], 0x9}}], 0x3, 0x4000) [ 973.323056] audit: type=1800 audit(1579822623.211:428): pid=13720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16977 res=0 [ 973.326682] ? do_raw_spin_unlock+0x181/0x270 [ 973.326702] ? _raw_spin_unlock+0x2d/0x50 [ 973.357228] ? __alloc_fd+0x44d/0x560 [ 973.361065] do_sys_open+0x3fe/0x550 [ 973.364826] ? filp_open+0x80/0x80 [ 973.368518] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 973.373301] ? do_syscall_64+0x26/0x620 [ 973.377388] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.382781] ? do_syscall_64+0x26/0x620 [ 973.387040] __x64_sys_open+0x7e/0xc0 [ 973.390871] do_syscall_64+0xfd/0x620 [ 973.394747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 973.400062] RIP: 0033:0x4150e1 [ 973.403363] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 973.422823] RSP: 002b:00007f9c56ebea60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 973.430554] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 00000000004150e1 23:37:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="0a617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:03 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000003) [ 973.437843] RDX: 00007f9c56ebeb0a RSI: 0000000000000002 RDI: 00007f9c56ebeb00 [ 973.445127] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 973.452418] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000003 [ 973.459707] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000009 [ 973.462367] xt_check_match: 15 callbacks suppressed [ 973.462377] x_tables: ip_tables: ah match: only valid for protocol 51 [ 973.518089] input: syz1 as /devices/virtual/input/input537 23:37:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ac3000006400000827bd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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"], 0x30ac}, 0x1, 0x0, 0x0, 0x200048c0}, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:03 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d96583ac4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 973.634782] audit: type=1800 audit(1579822623.521:429): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16722 res=0 23:37:03 executing program 5 (fault-call:0 fault-nth:10): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="25617700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup3(r7, 0xffffffffffffffff, 0x0) write$nbd(r5, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1010) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_GET_FPU(r9, 0x81a0ae8c, &(0x7f0000000180)) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10200, 0x0) 23:37:03 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x200000, 0x0) ioctl$SIOCAX25ADDFWD(r4, 0x89ea, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x0, 0x100000001}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) [ 973.754761] audit: type=1800 audit(1579822623.641:430): pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17105 res=0 [ 973.777409] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:03 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000004) [ 973.816281] FAULT_INJECTION: forcing a failure. [ 973.816281] name failslab, interval 1, probability 0, space 0, times 0 [ 973.849943] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="720a7700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 973.877743] CPU: 0 PID: 13951 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 973.885680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 973.895660] Call Trace: [ 973.898303] dump_stack+0x197/0x210 [ 973.902098] should_fail.cold+0xa/0x1b [ 973.906017] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 973.911272] ? lock_downgrade+0x880/0x880 [ 973.915442] __should_failslab+0x121/0x190 [ 973.919882] should_failslab+0x9/0x14 [ 973.923880] kmem_cache_alloc_trace+0x2cc/0x760 [ 973.928838] ? __lockdep_init_map+0x10c/0x5b0 [ 973.933420] ? loop_info64_to_compat+0x6d0/0x6d0 [ 973.938187] __kthread_create_on_node+0xf2/0x460 [ 973.943144] ? lock_acquire+0x16f/0x3f0 [ 973.947134] ? __kthread_parkme+0x1b0/0x1b0 [ 973.951485] ? lo_ioctl+0x1c4/0x20d0 [ 973.955206] ? lock_downgrade+0x880/0x880 [ 973.959362] ? mutex_trylock+0x1e0/0x1e0 [ 973.964014] ? loop_info64_to_compat+0x6d0/0x6d0 [ 973.968789] kthread_create_on_node+0xbb/0xf0 [ 973.973292] ? __kthread_create_on_node+0x460/0x460 [ 973.978317] ? __lockdep_init_map+0x10c/0x5b0 [ 973.982833] ? __lockdep_init_map+0x10c/0x5b0 [ 973.987396] lo_ioctl+0xaf2/0x20d0 [ 973.990954] ? lo_rw_aio+0x1470/0x1470 [ 973.995093] blkdev_ioctl+0xc2c/0x1ab3 [ 973.999006] ? blkpg_ioctl+0xa90/0xa90 [ 974.003061] ? find_held_lock+0x35/0x130 [ 974.007250] ? debug_check_no_obj_freed+0x200/0x464 [ 974.012290] ? __fget+0x340/0x540 [ 974.015854] block_ioctl+0xee/0x130 [ 974.019624] ? blkdev_fallocate+0x400/0x400 [ 974.024260] do_vfs_ioctl+0xd5f/0x1380 [ 974.028311] ? selinux_file_ioctl+0x46c/0x5d0 [ 974.032821] ? selinux_file_ioctl+0x125/0x5d0 [ 974.037334] ? ioctl_preallocate+0x210/0x210 [ 974.041827] ? selinux_file_mprotect+0x620/0x620 [ 974.046589] ? iterate_fd+0x360/0x360 [ 974.050401] ? do_sys_open+0x31d/0x550 [ 974.054294] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.059833] ? security_file_ioctl+0x8d/0xc0 [ 974.064241] ksys_ioctl+0xab/0xd0 [ 974.067707] __x64_sys_ioctl+0x73/0xb0 [ 974.071612] do_syscall_64+0xfd/0x620 [ 974.075435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.080631] RIP: 0033:0x45b1b7 [ 974.083835] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.103431] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:37:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0xffffffff, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 974.123672] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 974.130944] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 974.138230] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 974.145627] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 974.152897] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000000a 23:37:04 executing program 5 (fault-call:0 fault-nth:11): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 974.242673] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a5ae313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b7085db8ac4468ace22d4bc4c993cdc1432545190f6d26b1e674ffbf51c5"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) recvmsg(r6, &(0x7f0000000780)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000600)=""/86, 0x56}], 0x8, &(0x7f0000000700)=""/84, 0x54}, 0x2100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_mreqsrc(r8, 0x0, 0x26, &(0x7f00000008c0)={@loopback, @remote, @empty}, 0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vcsa\x00', 0x400, 0x0) ioctl$FBIO_WAITFORVSYNC(r13, 0x40044620, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r12, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}}, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r15, &(0x7f00000009c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x1c, r12, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) [ 974.325135] x_tables: ip_tables: ah match: only valid for protocol 51 [ 974.360049] FAULT_INJECTION: forcing a failure. [ 974.360049] name failslab, interval 1, probability 0, space 0, times 0 [ 974.409783] CPU: 0 PID: 13975 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 974.417719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 974.427700] Call Trace: [ 974.430409] dump_stack+0x197/0x210 [ 974.434087] should_fail.cold+0xa/0x1b [ 974.438012] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 974.443149] ? lock_downgrade+0x880/0x880 [ 974.447345] __should_failslab+0x121/0x190 [ 974.451614] should_failslab+0x9/0x14 [ 974.455576] kmem_cache_alloc+0x2ae/0x700 [ 974.459743] ? __schedule+0x1495/0x1dc0 [ 974.463749] __kernfs_new_node+0xef/0x6f0 [ 974.467924] ? __schedule+0x1495/0x1dc0 [ 974.471905] ? _raw_spin_unlock_irq+0x28/0x90 [ 974.476469] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 974.481327] ? __lock_acquire+0x6ee/0x49c0 [ 974.486378] ? _raw_spin_unlock_irq+0x5e/0x90 [ 974.490929] ? __schedule+0x1495/0x1dc0 [ 974.494940] ? __lock_is_held+0xb6/0x140 [ 974.499024] ? devlink_nl_cmd_resource_dump+0x570/0x940 [ 974.504427] kernfs_new_node+0x99/0x130 23:37:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1f, 0x800, 0x9a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={r8, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000000)={r8, 0x9, 0x23, "8125c6a51884062a684536a2aed233d3eeb285129b423f6e4aca37da59dfccaad9bf87"}, 0x2b) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 974.508433] kernfs_create_dir_ns+0x52/0x160 [ 974.512865] internal_create_group+0x1cb/0xc30 [ 974.517485] ? bd_set_size+0x89/0xb0 [ 974.521228] ? remove_files.isra.0+0x190/0x190 [ 974.525848] sysfs_create_group+0x20/0x30 [ 974.530055] lo_ioctl+0xf8f/0x20d0 [ 974.533630] ? lo_rw_aio+0x1470/0x1470 [ 974.537549] blkdev_ioctl+0xc2c/0x1ab3 [ 974.541463] ? blkpg_ioctl+0xa90/0xa90 [ 974.545396] ? find_held_lock+0x35/0x130 [ 974.549518] ? debug_check_no_obj_freed+0x200/0x464 [ 974.554561] ? __fget+0x340/0x540 23:37:04 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 974.558042] block_ioctl+0xee/0x130 [ 974.561678] ? blkdev_fallocate+0x400/0x400 [ 974.566030] do_vfs_ioctl+0xd5f/0x1380 [ 974.569941] ? selinux_file_ioctl+0x46c/0x5d0 [ 974.574458] ? selinux_file_ioctl+0x125/0x5d0 [ 974.578976] ? ioctl_preallocate+0x210/0x210 [ 974.583500] ? selinux_file_mprotect+0x620/0x620 [ 974.588288] ? iterate_fd+0x360/0x360 [ 974.592125] ? do_sys_open+0x31d/0x550 [ 974.596050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 974.601617] ? security_file_ioctl+0x8d/0xc0 [ 974.606056] ksys_ioctl+0xab/0xd0 [ 974.609536] __x64_sys_ioctl+0x73/0xb0 [ 974.613449] do_syscall_64+0xfd/0x620 [ 974.617320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 974.622526] RIP: 0033:0x45b1b7 [ 974.625734] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 974.644826] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.652645] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 23:37:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72257700000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 974.659931] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 974.661812] audit: type=1800 audit(1579822624.541:431): pid=14074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16539 res=0 [ 974.667226] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 974.667240] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 974.703660] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000000b 23:37:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x1100000c48c2, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 974.721317] tmpfs: Bad value 'local:' for mount option 'mpol' [ 974.758012] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:04 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000005) 23:37:04 executing program 5 (fault-call:0 fault-nth:12): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 974.817143] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617702000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 974.906008] audit: type=1800 audit(1579822624.791:432): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16538 res=0 23:37:04 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r2}) socket$l2tp6(0xa, 0x2, 0x73) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1b}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040c0}, 0x6) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 974.997044] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r10, 0x0, 0x80, &(0x7f0000000180)={'nat\x00'}, &(0x7f0000000200)=0x78) r11 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r11, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xfffa, 0xf801}, 0x8) close(r8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000080)=ANY=[@ANYRES16=r6, @ANYRESHEX=r7, @ANYRESOCT=r8], 0x3) socket$packet(0x11, 0x0, 0x300) r12 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x40000, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r12, 0xae78, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup2(r13, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup2(r15, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r16, 0x4c08, 0x3) ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x4) [ 975.055322] FAULT_INJECTION: forcing a failure. [ 975.055322] name failslab, interval 1, probability 0, space 0, times 0 [ 975.067051] CPU: 0 PID: 14313 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 975.074871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.085553] Call Trace: [ 975.088172] dump_stack+0x197/0x210 [ 975.091838] should_fail.cold+0xa/0x1b [ 975.095772] ? is_bpf_text_address+0xd3/0x170 [ 975.100419] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 975.105775] ? __kernel_text_address+0xd/0x40 [ 975.111782] ? unwind_get_return_address+0x61/0xa0 [ 975.116831] __should_failslab+0x121/0x190 [ 975.121092] should_failslab+0x9/0x14 [ 975.124917] kmem_cache_alloc+0x47/0x700 [ 975.129117] ? save_stack+0xa9/0xd0 [ 975.132774] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 975.138436] idr_get_free+0x527/0xa28 [ 975.142267] idr_alloc_u32+0x1d6/0x390 [ 975.146187] ? __fprop_inc_percpu_max+0x230/0x230 [ 975.151060] ? __lock_is_held+0xb6/0x140 [ 975.155428] ? should_fail+0x14d/0x85c [ 975.159349] ? __lock_is_held+0xb6/0x140 [ 975.163443] idr_alloc_cyclic+0x132/0x270 [ 975.167619] ? idr_alloc+0x150/0x150 [ 975.171355] ? kasan_check_write+0x14/0x20 [ 975.175610] ? do_raw_spin_lock+0xd7/0x250 [ 975.179879] __kernfs_new_node+0x139/0x6f0 [ 975.184152] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 975.189326] ? __lock_acquire+0x6ee/0x49c0 [ 975.193967] ? __schedule+0x86e/0x1dc0 [ 975.197891] ? __lock_is_held+0xb6/0x140 [ 975.201994] kernfs_new_node+0x99/0x130 23:37:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000080)={0x61, 0x3, 0x5, "7f47d3e89f3756fd37873c393f786ddd0914c22ece9cc2399271960fcfa3cc16ef1b2d745538b396110093cebe4bd088367b91ed8ebbbc6fb7cff0be716b279ba4a333d6aba5fa06bfa1627ec0bd5974e56665674d3abca3f465cb8b4c7a940897"}) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:05 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000006) [ 975.206090] kernfs_create_dir_ns+0x52/0x160 [ 975.210544] internal_create_group+0x1cb/0xc30 [ 975.215157] ? bd_set_size+0x89/0xb0 [ 975.220068] ? remove_files.isra.0+0x190/0x190 [ 975.224688] sysfs_create_group+0x20/0x30 [ 975.234069] lo_ioctl+0xf8f/0x20d0 [ 975.237642] ? lo_rw_aio+0x1470/0x1470 [ 975.241550] blkdev_ioctl+0xc2c/0x1ab3 [ 975.245461] ? blkpg_ioctl+0xa90/0xa90 [ 975.249370] ? find_held_lock+0x35/0x130 23:37:05 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) ftruncate(0xffffffffffffffff, 0x200103) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617703000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 975.253454] ? debug_check_no_obj_freed+0x200/0x464 [ 975.258500] ? __fget+0x340/0x540 [ 975.261976] block_ioctl+0xee/0x130 [ 975.265615] ? blkdev_fallocate+0x400/0x400 [ 975.269950] do_vfs_ioctl+0xd5f/0x1380 [ 975.273854] ? selinux_file_ioctl+0x46c/0x5d0 [ 975.278373] ? selinux_file_ioctl+0x125/0x5d0 [ 975.283611] ? ioctl_preallocate+0x210/0x210 [ 975.288321] ? selinux_file_mprotect+0x620/0x620 [ 975.293196] ? iterate_fd+0x360/0x360 [ 975.297112] ? do_sys_open+0x31d/0x550 [ 975.301038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.307230] ? security_file_ioctl+0x8d/0xc0 [ 975.311859] ksys_ioctl+0xab/0xd0 [ 975.315689] __x64_sys_ioctl+0x73/0xb0 [ 975.319605] do_syscall_64+0xfd/0x620 [ 975.323438] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.327925] audit: type=1800 audit(1579822625.101:433): pid=14319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17220 res=0 [ 975.328761] RIP: 0033:0x45b1b7 23:37:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) flock(r2, 0xfdd313cd75c0f713) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 975.355667] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 975.376124] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.385820] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 975.393204] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 975.400610] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 975.408432] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 975.416183] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000000c [ 975.432409] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003040000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:05 executing program 5 (fault-call:0 fault-nth:13): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 975.559234] x_tables: ip_tables: ah match: only valid for protocol 51 [ 975.609047] input: syz1 as /devices/virtual/input/input538 [ 975.626865] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="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", @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRESOCT=0x0, @ANYPTR64, @ANYRES16=r6], @ANYRES32=0x0, @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR, @ANYRES32, @ANYRES32]]], 0x8) ftruncate(r2, 0x10001) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setresgid(r9, 0x0, 0x0) fchown(r3, r8, r9) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 975.667922] FAULT_INJECTION: forcing a failure. [ 975.667922] name failslab, interval 1, probability 0, space 0, times 0 23:37:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617704000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 975.709734] CPU: 0 PID: 14345 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 975.718239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 975.727612] Call Trace: [ 975.730234] dump_stack+0x197/0x210 [ 975.734595] should_fail.cold+0xa/0x1b [ 975.738532] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 975.743865] ? lock_downgrade+0x880/0x880 [ 975.748228] __should_failslab+0x121/0x190 [ 975.752785] should_failslab+0x9/0x14 23:37:05 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r2) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES16=r1, @ANYRES64, @ANYRES64=r2]], 0x2}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) ftruncate(r4, 0x4) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000080), 0x16743774) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 975.756663] kmem_cache_alloc+0x2ae/0x700 [ 975.760848] ? find_held_lock+0x35/0x130 [ 975.765082] ? kernfs_activate+0x192/0x1f0 [ 975.769353] __kernfs_new_node+0xef/0x6f0 [ 975.774016] ? lock_downgrade+0x880/0x880 [ 975.778511] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 975.784012] ? lock_downgrade+0x880/0x880 [ 975.788630] ? kasan_check_write+0x14/0x20 [ 975.793286] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 975.798353] ? wait_for_completion+0x440/0x440 [ 975.803171] kernfs_new_node+0x99/0x130 [ 975.807355] __kernfs_create_file+0x51/0x33b [ 975.811808] sysfs_add_file_mode_ns+0x222/0x560 [ 975.816603] internal_create_group+0x383/0xc30 [ 975.821210] ? bd_set_size+0x89/0xb0 [ 975.834686] ? remove_files.isra.0+0x190/0x190 [ 975.839886] sysfs_create_group+0x20/0x30 [ 975.844580] lo_ioctl+0xf8f/0x20d0 [ 975.848146] ? lo_rw_aio+0x1470/0x1470 [ 975.852056] blkdev_ioctl+0xc2c/0x1ab3 [ 975.857100] ? blkpg_ioctl+0xa90/0xa90 [ 975.861022] ? find_held_lock+0x35/0x130 [ 975.865281] ? debug_check_no_obj_freed+0x200/0x464 [ 975.870351] ? __fget+0x340/0x540 [ 975.874003] block_ioctl+0xee/0x130 [ 975.877907] ? blkdev_fallocate+0x400/0x400 [ 975.882256] do_vfs_ioctl+0xd5f/0x1380 [ 975.886203] ? selinux_file_ioctl+0x46c/0x5d0 [ 975.890984] ? selinux_file_ioctl+0x125/0x5d0 [ 975.895850] ? ioctl_preallocate+0x210/0x210 [ 975.900279] ? selinux_file_mprotect+0x620/0x620 [ 975.905164] ? iterate_fd+0x360/0x360 [ 975.909018] ? do_sys_open+0x31d/0x550 [ 975.913845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 975.919415] ? security_file_ioctl+0x8d/0xc0 [ 975.924020] ksys_ioctl+0xab/0xd0 [ 975.928407] __x64_sys_ioctl+0x73/0xb0 [ 975.933604] do_syscall_64+0xfd/0x620 [ 975.937699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 975.942903] RIP: 0033:0x45b1b7 [ 975.946372] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 975.967446] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 975.978257] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 975.985979] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 975.993840] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 976.001245] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 976.016843] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000000d [ 976.065130] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617705000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 976.167487] audit: type=1800 audit(1579822626.051:434): pid=14518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16539 res=0 23:37:06 executing program 5 (fault-call:0 fault-nth:14): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x20, @loopback, 0x800}, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e23, 0x5, @empty, 0xfff}], 0x64) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000280)={0x653, 0x4, 0x4, 0x10, 0x2, {}, {0x1, 0x0, 0x80, 0x62, 0x81, 0x81, "4cf7e842"}, 0x6, 0x4, @fd, 0x6d792bf0, 0x0, 0xffffffffffffffff}) ioctl$RTC_PIE_ON(r4, 0x7005) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 23:37:06 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000007) 23:37:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) sendfile(r0, r3, 0x0, 0x88000fc000000) 23:37:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000180)={r5, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010007000000005801000000000000000000003002000030020000300200003002000030bf940d1cbd4d877059f3c287b4ab710d8692493d0f097a0ab3ac197da3df5863fc6a84e64da487b8cbc4052d63cc7f90f52b51d28930868c2d"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={{r9, r10/1000+10000}, {0x77359400}}) ioctl$NBD_SET_SOCK(r8, 0xab00, r2) socket(0x0, 0x0, 0x0) [ 976.370370] FAULT_INJECTION: forcing a failure. [ 976.370370] name failslab, interval 1, probability 0, space 0, times 0 [ 976.406512] CPU: 0 PID: 14573 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 976.414447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 976.423819] Call Trace: [ 976.426433] dump_stack+0x197/0x210 [ 976.430092] should_fail.cold+0xa/0x1b [ 976.434016] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 976.439147] ? lock_downgrade+0x880/0x880 [ 976.443331] __should_failslab+0x121/0x190 [ 976.447591] should_failslab+0x9/0x14 [ 976.451411] kmem_cache_alloc+0x2ae/0x700 [ 976.455578] ? find_held_lock+0x35/0x130 [ 976.459669] ? kernfs_activate+0x192/0x1f0 [ 976.463936] __kernfs_new_node+0xef/0x6f0 [ 976.468121] ? lock_downgrade+0x880/0x880 [ 976.472291] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 976.477070] ? lock_downgrade+0x880/0x880 [ 976.481243] ? kasan_check_write+0x14/0x20 [ 976.485511] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 976.490381] ? wait_for_completion+0x440/0x440 [ 976.495090] kernfs_new_node+0x99/0x130 [ 976.499183] __kernfs_create_file+0x51/0x33b [ 976.504147] sysfs_add_file_mode_ns+0x222/0x560 [ 976.508868] internal_create_group+0x383/0xc30 [ 976.513475] ? bd_set_size+0x89/0xb0 23:37:06 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x0) [ 976.517241] ? remove_files.isra.0+0x190/0x190 [ 976.521861] sysfs_create_group+0x20/0x30 [ 976.526052] lo_ioctl+0xf8f/0x20d0 [ 976.529621] ? lo_rw_aio+0x1470/0x1470 [ 976.533709] blkdev_ioctl+0xc2c/0x1ab3 [ 976.537633] ? blkpg_ioctl+0xa90/0xa90 [ 976.541538] ? find_held_lock+0x35/0x130 [ 976.545622] ? debug_check_no_obj_freed+0x200/0x464 [ 976.550664] ? __fget+0x340/0x540 [ 976.554151] block_ioctl+0xee/0x130 [ 976.557805] ? blkdev_fallocate+0x400/0x400 [ 976.562144] do_vfs_ioctl+0xd5f/0x1380 [ 976.566047] ? selinux_file_ioctl+0x46c/0x5d0 [ 976.570681] ? selinux_file_ioctl+0x125/0x5d0 [ 976.575192] ? ioctl_preallocate+0x210/0x210 [ 976.579609] ? selinux_file_mprotect+0x620/0x620 [ 976.584437] ? iterate_fd+0x360/0x360 [ 976.588345] ? do_sys_open+0x31d/0x550 [ 976.592265] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 976.597837] ? security_file_ioctl+0x8d/0xc0 [ 976.602269] ksys_ioctl+0xab/0xd0 [ 976.605748] __x64_sys_ioctl+0x73/0xb0 [ 976.609659] do_syscall_64+0xfd/0x620 [ 976.613495] entry_SYSCALL_64_after_hwframe+0x49/0xbe 23:37:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) uname(&(0x7f0000000000)=""/242) r5 = fcntl$dupfd(r4, 0x0, r1) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x10001, 0x400000) getsockopt$IP_VS_SO_GET_SERVICES(r6, 0x0, 0x482, &(0x7f0000000180)=""/248, &(0x7f0000000280)=0xf8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c81c0000005b5bffffffffffff000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020800020000003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 976.618699] RIP: 0033:0x45b1b7 [ 976.621913] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 976.640852] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 976.648587] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 976.655902] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 976.663190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a 23:37:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f00000001c0)=r4) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000200)=0x3000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e000000005662c5b4670d875af0d1ab90e107b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) 23:37:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617706000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 976.670481] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 976.677766] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000000e [ 976.733189] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:06 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000008) [ 976.801658] audit: type=1800 audit(1579822626.691:435): pid=14794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17225 res=0 23:37:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd500000000000000000000000000000000000000000000000000000200000003000000cc02000047deae33000000005801000000000000000000003002000030020000300200000030000000"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0xb, 0x4, 0x4) 23:37:06 executing program 5 (fault-call:0 fault-nth:15): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617707000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:06 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xd0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0xb, 0x1, 0x0) [ 977.085886] FAULT_INJECTION: forcing a failure. [ 977.085886] name failslab, interval 1, probability 0, space 0, times 0 [ 977.098085] CPU: 1 PID: 15021 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 977.105913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.115646] Call Trace: [ 977.119102] dump_stack+0x197/0x210 [ 977.122859] should_fail.cold+0xa/0x1b [ 977.126850] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 977.132003] ? lock_downgrade+0x880/0x880 23:37:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000001c0)=0x8001) sendfile(r0, r2, 0x0, 0x88000fc000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/159}) [ 977.136208] __should_failslab+0x121/0x190 [ 977.140474] should_failslab+0x9/0x14 [ 977.144656] kmem_cache_alloc+0x2ae/0x700 [ 977.149356] ? lock_downgrade+0x880/0x880 [ 977.153531] __kernfs_new_node+0xef/0x6f0 [ 977.157707] ? kasan_check_write+0x14/0x20 [ 977.161979] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 977.166774] ? wait_for_completion+0x440/0x440 [ 977.171395] ? mutex_unlock+0xd/0x10 [ 977.175139] ? kernfs_activate+0x192/0x1f0 [ 977.179398] kernfs_new_node+0x99/0x130 23:37:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x85) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r1 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r1, 0x10001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x2, [0xfff, 0x4]}, 0x8) sendfile(r0, r1, 0x0, 0x88000fc000000) [ 977.183572] __kernfs_create_file+0x51/0x33b [ 977.188059] sysfs_add_file_mode_ns+0x222/0x560 [ 977.192786] internal_create_group+0x383/0xc30 [ 977.197402] ? bd_set_size+0x89/0xb0 [ 977.201151] ? remove_files.isra.0+0x190/0x190 [ 977.205773] sysfs_create_group+0x20/0x30 [ 977.210605] lo_ioctl+0xf8f/0x20d0 [ 977.214143] ? lo_rw_aio+0x1470/0x1470 [ 977.218060] blkdev_ioctl+0xc2c/0x1ab3 [ 977.221948] ? blkpg_ioctl+0xa90/0xa90 [ 977.225866] ? find_held_lock+0x35/0x130 [ 977.229971] ? debug_check_no_obj_freed+0x200/0x464 [ 977.235381] ? __fget+0x340/0x540 [ 977.238999] block_ioctl+0xee/0x130 [ 977.243540] ? blkdev_fallocate+0x400/0x400 [ 977.248044] do_vfs_ioctl+0xd5f/0x1380 [ 977.251949] ? selinux_file_ioctl+0x46c/0x5d0 [ 977.256475] ? selinux_file_ioctl+0x125/0x5d0 [ 977.261009] ? ioctl_preallocate+0x210/0x210 [ 977.265492] ? selinux_file_mprotect+0x620/0x620 [ 977.271043] ? iterate_fd+0x360/0x360 [ 977.275053] ? do_sys_open+0x31d/0x550 [ 977.278969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.284510] ? security_file_ioctl+0x8d/0xc0 [ 977.288919] ksys_ioctl+0xab/0xd0 [ 977.292467] __x64_sys_ioctl+0x73/0xb0 [ 977.296346] do_syscall_64+0xfd/0x620 [ 977.300153] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.305455] RIP: 0033:0x45b1b7 [ 977.308658] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 977.328163] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:37:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617711000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 977.336070] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 977.343359] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 977.350721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 977.358397] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 977.366117] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000000f [ 977.400400] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:07 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2a000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup3(r3, r5, 0x0) r7 = socket(0x1f, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) r11 = socket(0x1f, 0x800, 0x9a) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r12, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r14}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000100)={r14, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r14, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000040)={r10, 0x1e, 0x20}, 0xc) ftruncate(r0, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 977.469631] audit: type=1800 audit(1579822627.361:436): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16627 res=0 23:37:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d2515af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836b965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865435585d4d6a87f85d9d8dd639a9f44ef79a62da4b708f9c691f640040aab54cdd54464d2f0d1b8cb726fd85e046ab7aa30371a02f63aa7e267cbb4"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000280)={0xffffffff, {{0x2, 0x4e23, @rand_addr=0x1}}}, 0x88) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:07 executing program 5 (fault-call:0 fault-nth:16): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:07 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000009) [ 977.594024] input: syz1 as /devices/virtual/input/input540 [ 977.616999] FAULT_INJECTION: forcing a failure. [ 977.616999] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 977.628860] CPU: 0 PID: 15075 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 977.637712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 977.647103] Call Trace: [ 977.649832] dump_stack+0x197/0x210 [ 977.653480] should_fail.cold+0xa/0x1b [ 977.657409] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 977.662549] ? mark_held_locks+0x100/0x100 [ 977.666829] __alloc_pages_nodemask+0x1ee/0x750 [ 977.671610] ? __alloc_pages_slowpath+0x2870/0x2870 [ 977.676691] cache_grow_begin+0x91/0x8c0 [ 977.680767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 977.686411] ? check_preemption_disabled+0x48/0x290 [ 977.691454] kmem_cache_alloc+0x63b/0x700 [ 977.695635] ? lock_downgrade+0x880/0x880 [ 977.699820] __kernfs_new_node+0xef/0x6f0 [ 977.703993] ? kasan_check_write+0x14/0x20 [ 977.708256] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 977.713070] ? wait_for_completion+0x440/0x440 [ 977.717686] ? mutex_unlock+0xd/0x10 [ 977.721555] ? kernfs_activate+0x192/0x1f0 [ 977.725819] kernfs_new_node+0x99/0x130 [ 977.729821] __kernfs_create_file+0x51/0x33b [ 977.734260] sysfs_add_file_mode_ns+0x222/0x560 [ 977.738963] internal_create_group+0x383/0xc30 23:37:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617715000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000000c0)=0x2c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f97a265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b70800000000"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 977.743670] ? bd_set_size+0x89/0xb0 [ 977.747453] ? remove_files.isra.0+0x190/0x190 [ 977.752074] sysfs_create_group+0x20/0x30 [ 977.756239] lo_ioctl+0xf8f/0x20d0 [ 977.759807] ? lo_rw_aio+0x1470/0x1470 [ 977.763749] blkdev_ioctl+0xc2c/0x1ab3 [ 977.767680] ? blkpg_ioctl+0xa90/0xa90 [ 977.771593] ? find_held_lock+0x35/0x130 [ 977.775678] ? debug_check_no_obj_freed+0x200/0x464 [ 977.780723] ? __fget+0x340/0x540 [ 977.784210] block_ioctl+0xee/0x130 [ 977.787864] ? blkdev_fallocate+0x400/0x400 [ 977.792213] do_vfs_ioctl+0xd5f/0x1380 [ 977.796121] ? selinux_file_ioctl+0x46c/0x5d0 [ 977.800642] ? selinux_file_ioctl+0x125/0x5d0 [ 977.805277] ? ioctl_preallocate+0x210/0x210 [ 977.809748] ? selinux_file_mprotect+0x620/0x620 [ 977.814639] ? iterate_fd+0x360/0x360 [ 977.818473] ? do_sys_open+0x31d/0x550 [ 977.822397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 977.827956] ? security_file_ioctl+0x8d/0xc0 [ 977.832386] ksys_ioctl+0xab/0xd0 [ 977.835863] __x64_sys_ioctl+0x73/0xb0 [ 977.839768] do_syscall_64+0xfd/0x620 23:37:07 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r2) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40104, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000003c0)={0x9, 0xa, 0x4, 0x10, 0x4, {r6, r7/1000+10000}, {0x2, 0xc, 0x5, 0x20, 0x4, 0x61, "e9626c78"}, 0x80000000, 0x26cf2fc91e0a25de, @fd, 0x800, 0x0, r8}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x0) r13 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r13, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r13, 0x5501, 0x0) r14 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r14) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) personality(0x6) dup2(r15, r15) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r16, r16) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="59c3d69d4e346678e3ad720ae661898feb5da7c7a7329c71f25b40fa9493d00064c784d1a432fa72accf1ea5eff82c1b3f158b03bdd4cc8e79dfa7b61bfb1efbfd38e399b2b734e6d0e00957081b96fb8fc116acedf0806af9c576b01089667d4a3d5f8db63841f2c1d8d7e97490ffff748a335f2a5cf0c872127aba5c49d0d031e20fc937f146ecb8a9ccf12d1ae1954983716cb71168731f9ddefec20eb60c0a50f5a12ae8e581353b249be7dde01bda915af4ecebd2ef6b593627e50d3a7b", @ANYRESHEX=0x0, @ANYRES32, @ANYRESOCT, @ANYRESOCT=r3, @ANYBLOB="14b2a03b1d3bce642cf1974c637c3c97829c231541321632597bcfab680ffdb4262498fd4d", @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES64=r5, @ANYRES32=r16, @ANYRESDEC=r13, @ANYBLOB, @ANYRES64=r14, @ANYBLOB="ac5c60fd3ef35803ecf7a812ba6f87f757"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR, @ANYRES32=r15], @ANYRESHEX=r0]], 0x2}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r17 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="1634a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd659a9f44ef79a62da4b7080000000000000000793071"], 0x80) ftruncate(r17, 0x10001) sendfile(r0, r17, 0x0, 0x88000fc000000) [ 977.843594] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 977.848793] RIP: 0033:0x45b1b7 [ 977.852002] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 977.870947] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 977.878672] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 977.885960] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 977.893249] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 977.900549] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 977.907837] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000010 [ 977.952209] tmpfs: Bad value 'local:' for mount option 'mpol' [ 978.000408] input: syz1 as /devices/virtual/input/input541 23:37:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261772c000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000180)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x61, 0x1000, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x80000, 0x0) dup2(r4, r7) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) 23:37:08 executing program 5 (fault-call:0 fault-nth:17): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 978.088489] input: syz1 as /devices/virtual/input/input542 [ 978.150040] input: syz1 as /devices/virtual/input/input543 23:37:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x1f, 0x800, 0x9a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r7, 0x80, 0x20}, 0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x4, &(0x7f0000000500)=[{&(0x7f00000002c0)="32acdf4a222da7d536532cd9791ff25406d9cff3287f90645c4beeda3218862b0b7bb0cad469c5bc4b2de91dbadac45fe60341206760f44ed07355e5021de9e95c894274bea43a956036cca7885ff8196ffb8714949a7d30bd5b16304912bfed3c1031158d5e0b75889941d4ebe4ca0d384cb6e1195f8dd9fae0c2c39de80e868286757ebbb2d3b158c8be473c40c674", 0x90, 0x8}, {&(0x7f0000000380)="d7459af1cfe8afebb2d5ed33b76e8fad21eb7079df9df508c96f43ca2b878e651be951d730ab73a4e502213e78e8e667f514b6ccd835ae89fd185fd7f4c881b4713cc3263f3b185b20602b079fe17065b76060906bdac03d08a5b6124c5245e6fa05ecc8a047993b084b76369a1ade7be5d675c11d0441599c135168bd7019b556ee563d37f2bfdb81cb38a201a006847fbdcf0e3c0cbad4afd0331cf7a5acd2bedfaa7ca2f6c17ad665be", 0xab, 0x4}, {&(0x7f0000000440)="facf70bcd0a7b8b63c809c93b5459df127f5fab4d6d164eb4089a3c629d5a5ec18121d0a1d0056d2c182e8afd1985819ce276fbece1bb1c067d42b72f8f1df1cb3465734d5334a8ac618aa110656182f315e3b6388247c641c6913c0552588dbcc2b801b22a858c5738b3441e41f90f58a497b3e28e1ccf819326d2db49604431fc9f951", 0x84, 0x2}, {&(0x7f0000000200)="9f5b3a784c26c835feeed01ea18d8734fb5fdbab72c3a463e26dd94d281ac4eeca3d90ae09cfa650c4f77cf1fca8c191971f3b11ee400fb4986758267cbf0f22871be4659d900d0a57a8650a12327743090ae0583ae104fa78ffba8a5f9dd28272856af907cd523708e670af505f9f175037e677dda4", 0x76, 0x7fff}], 0xc0820, &(0x7f0000000700)={[], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfsdef={'smackfsdef', 0x3d, '.}-selfem0:!'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '.}-sel\xbf\x90\xd3\xcd;fem0:!'}}]}) ftruncate(r8, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r8, 0x0, 0x80001d00c0d0) 23:37:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617746000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 978.277154] FAULT_INJECTION: forcing a failure. [ 978.277154] name failslab, interval 1, probability 0, space 0, times 0 [ 978.298421] audit: type=1800 audit(1579822628.181:437): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17220 res=0 23:37:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00000a) [ 978.332809] CPU: 0 PID: 15323 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 978.340679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.350059] Call Trace: [ 978.352673] dump_stack+0x197/0x210 [ 978.356329] should_fail.cold+0xa/0x1b [ 978.360251] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 978.365384] ? lock_downgrade+0x880/0x880 [ 978.369557] __should_failslab+0x121/0x190 [ 978.373797] should_failslab+0x9/0x14 [ 978.377602] kmem_cache_alloc+0x2ae/0x700 [ 978.381771] ? lock_downgrade+0x880/0x880 [ 978.385928] __kernfs_new_node+0xef/0x6f0 [ 978.390081] ? kasan_check_write+0x14/0x20 [ 978.394349] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 978.399261] ? wait_for_completion+0x440/0x440 [ 978.403849] ? mutex_unlock+0xd/0x10 [ 978.407561] ? kernfs_activate+0x192/0x1f0 [ 978.411807] kernfs_new_node+0x99/0x130 [ 978.415783] __kernfs_create_file+0x51/0x33b [ 978.420196] sysfs_add_file_mode_ns+0x222/0x560 [ 978.424865] internal_create_group+0x383/0xc30 [ 978.429475] ? bd_set_size+0x89/0xb0 [ 978.433204] ? remove_files.isra.0+0x190/0x190 [ 978.437798] sysfs_create_group+0x20/0x30 [ 978.441968] lo_ioctl+0xf8f/0x20d0 [ 978.445510] ? lo_rw_aio+0x1470/0x1470 [ 978.449440] blkdev_ioctl+0xc2c/0x1ab3 [ 978.453317] ? blkpg_ioctl+0xa90/0xa90 [ 978.457215] ? find_held_lock+0x35/0x130 [ 978.461283] ? debug_check_no_obj_freed+0x200/0x464 [ 978.466324] ? __fget+0x340/0x540 [ 978.469792] block_ioctl+0xee/0x130 [ 978.473411] ? blkdev_fallocate+0x400/0x400 [ 978.477767] do_vfs_ioctl+0xd5f/0x1380 [ 978.481651] ? selinux_file_ioctl+0x46c/0x5d0 [ 978.486133] ? selinux_file_ioctl+0x125/0x5d0 [ 978.490677] ? ioctl_preallocate+0x210/0x210 [ 978.495099] ? selinux_file_mprotect+0x620/0x620 [ 978.499890] ? iterate_fd+0x360/0x360 [ 978.503683] ? do_sys_open+0x31d/0x550 [ 978.507577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 978.513140] ? security_file_ioctl+0x8d/0xc0 [ 978.517562] ksys_ioctl+0xab/0xd0 [ 978.521141] __x64_sys_ioctl+0x73/0xb0 [ 978.525048] do_syscall_64+0xfd/0x620 [ 978.528860] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 978.534039] RIP: 0033:0x45b1b7 [ 978.537232] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 978.556122] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 978.563820] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 978.571084] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 23:37:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xe1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000040)="28da85b0f437256ca251d3aed0ade757a14cd2e37843e85b9b50d438ee115c61830415234fe9dec8359cbac2bf000a054e70b715e2229f22b31c477f6ab192a3b84da728", 0x44}, {&(0x7f00000000c0)="11e040bc2387a04fc77172eceb164c0b43a9ac3cc4e0bb9d", 0x18}, {&(0x7f0000000180)="12ad28235b3b09ec8f185e27d5c3664c41527812eef86418a42b2f6b5720e1f7557aa08369e7da3e28347783bae5ff06a449ed60c7ec657b8f8ad8617cfbe37d06b1b1b7c5d4e9692dbfa43076df1dca1337d646ba606a3aff49b8383ac38b2d46bf20fb1fd180ca16943d99b75da9b38cd215a2da34abfa06556e82c0c6db6de1db8092b2135aec4387452e11c8668a3bc18dfa29467975bda9df16e39ce81f65f846200818afc054fe6b739e93c75a3232fd50d88d1c463cdc8cdece1991cdb402b828fc396e1b24a78c6a93b1736dd2f25383abb7ba65b2a3d7f3137b306892a881ae", 0xe4}, {&(0x7f0000000100)="24c4062ed6e72165c11421464de33694db6820cfdb67be1158a0c9305b", 0x1d}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="b76aeaf6400e4baa3741285ad916a25030d11a6c5e11623bba42c186419f6f05d2edc2c5aa9e0a99b44f7ef580144fe78c53d8504e9d75fa24256c8afe7d135277eb409126ee43e0", 0x48}, {&(0x7f0000000340)="8c1d3e3601055e2deb33c0242d27e28a75ab82", 0x13}], 0x7, 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:08 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x3ff, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) dup3(r3, r4, 0x80000) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 978.578360] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 978.585710] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 978.593256] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000011 [ 978.606352] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:08 executing program 5 (fault-call:0 fault-nth:18): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 978.694766] xt_check_match: 12 callbacks suppressed [ 978.694777] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:08 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x28200, 0x0) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) fcntl$lock(r3, 0x22, &(0x7f00000001c0)={0x0, 0x2, 0x81, 0x80000000, r4}) setsockopt$inet_tcp_int(r2, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r1, r5, 0x0, 0x88000fc000000) [ 978.772856] x_tables: ip_tables: ah match: only valid for protocol 51 [ 978.843513] FAULT_INJECTION: forcing a failure. [ 978.843513] name failslab, interval 1, probability 0, space 0, times 0 [ 978.890454] CPU: 0 PID: 15481 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 978.898297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 978.899162] input: syz1 as /devices/virtual/input/input544 [ 978.907665] Call Trace: [ 978.907693] dump_stack+0x197/0x210 [ 978.907723] should_fail.cold+0xa/0x1b [ 978.907745] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 978.907762] ? lock_downgrade+0x880/0x880 [ 978.907786] __should_failslab+0x121/0x190 23:37:08 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000200)={0xc0000000, 0x0, "4346ccc0eb35c7d44820fd3b2463c670bb283d4c5a47bb37f809ef10f81c6a68", 0x3, 0x4d45ebe7, 0x0, 0xfff, 0x1, 0x8, 0xb, 0x9, [0x8, 0x3, 0xc8, 0x1]}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000040)={0x0, 0x7}) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvfrom$netrom(0xffffffffffffffff, &(0x7f00000003c0)=""/189, 0xbd, 0x100, &(0x7f0000000480)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom$llc(r1, &(0x7f0000000300)=""/144, 0x90, 0x2000, &(0x7f0000000140)={0x1a, 0x23e, 0x8, 0x81, 0xcb, 0xff, @link_local}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 978.907801] should_failslab+0x9/0x14 [ 978.907815] kmem_cache_alloc+0x2ae/0x700 [ 978.907830] ? lock_downgrade+0x880/0x880 [ 978.907849] __kernfs_new_node+0xef/0x6f0 [ 978.907866] ? kasan_check_write+0x14/0x20 [ 978.918517] audit: type=1800 audit(1579822628.811:438): pid=15387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17170 res=0 [ 978.919830] ? kernfs_dop_revalidate+0x3c0/0x3c0 23:37:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617748000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 978.919852] ? wait_for_completion+0x440/0x440 [ 978.919875] ? mutex_unlock+0xd/0x10 [ 978.995584] ? kernfs_activate+0x192/0x1f0 [ 978.997157] audit: type=1800 audit(1579822628.881:439): pid=15410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16627 res=0 [ 978.999943] kernfs_new_node+0x99/0x130 [ 978.999966] __kernfs_create_file+0x51/0x33b [ 978.999988] sysfs_add_file_mode_ns+0x222/0x560 23:37:08 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00000b) 23:37:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000040000000008dd500000000000000080000000000000000000000020018da03000000c8020096580100000000000058010084daefa600000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0xd6c}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000080)={r7, 0x6}, 0x8) socket(0x0, 0x0, 0x0) [ 979.000012] internal_create_group+0x383/0xc30 [ 979.000025] ? bd_set_size+0x89/0xb0 [ 979.000048] ? remove_files.isra.0+0x190/0x190 [ 979.000074] sysfs_create_group+0x20/0x30 [ 979.056722] lo_ioctl+0xf8f/0x20d0 [ 979.060300] ? lo_rw_aio+0x1470/0x1470 [ 979.064325] blkdev_ioctl+0xc2c/0x1ab3 [ 979.072043] ? blkpg_ioctl+0xa90/0xa90 [ 979.076476] ? find_held_lock+0x35/0x130 [ 979.081424] ? debug_check_no_obj_freed+0x200/0x464 [ 979.086532] ? __fget+0x340/0x540 [ 979.090012] block_ioctl+0xee/0x130 [ 979.093775] ? blkdev_fallocate+0x400/0x400 [ 979.098145] do_vfs_ioctl+0xd5f/0x1380 [ 979.102056] ? selinux_file_ioctl+0x46c/0x5d0 [ 979.106581] ? selinux_file_ioctl+0x125/0x5d0 [ 979.111108] ? ioctl_preallocate+0x210/0x210 [ 979.115631] ? selinux_file_mprotect+0x620/0x620 [ 979.120435] ? iterate_fd+0x360/0x360 [ 979.124267] ? do_sys_open+0x31d/0x550 [ 979.128210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.133743] ? security_file_ioctl+0x8d/0xc0 [ 979.138145] ksys_ioctl+0xab/0xd0 [ 979.141659] __x64_sys_ioctl+0x73/0xb0 [ 979.146020] do_syscall_64+0xfd/0x620 [ 979.149940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.155133] RIP: 0033:0x45b1b7 [ 979.158367] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.181079] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.189078] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 979.196374] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 979.203649] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 979.210981] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 979.219682] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000012 [ 979.237629] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) open(&(0x7f0000000080)='./file0\x00', 0x34d000, 0x10) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:09 executing program 5 (fault-call:0 fault-nth:19): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 979.314709] x_tables: ip_tables: ah match: only valid for protocol 51 [ 979.394361] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000280)={0x10000, 0x7, 0x4, 0x4, 0xebc, {r4, r5/1000+30000}, {0x5, 0x8, 0x0, 0x0, 0x6, 0xeb, "ad246078"}, 0x1, 0x1, @userptr=0x10001, 0x74, 0x0, r6}) sendto$inet6(r7, 0x0, 0x0, 0x40000889, &(0x7f00000000c0)={0xa, 0x4e20, 0x1fe, @empty, 0x4}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r8 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x80000) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7, @mcast1, 0x6}, {0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, 0x3, [0x3, 0x3ff, 0x2, 0x6, 0xfffffffe, 0x9, 0x3ec1, 0xfff]}, 0x5c) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r9 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r9, 0x10001) sendfile(r0, r9, 0x0, 0x88000fc000000) [ 979.462944] FAULT_INJECTION: forcing a failure. [ 979.462944] name failslab, interval 1, probability 0, space 0, times 0 [ 979.474721] audit: type=1800 audit(1579822629.351:440): pid=15685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=16722 res=0 [ 979.498729] CPU: 0 PID: 15660 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 979.506563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 979.516023] Call Trace: [ 979.518641] dump_stack+0x197/0x210 [ 979.522297] should_fail.cold+0xa/0x1b [ 979.526220] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 979.531345] ? lock_downgrade+0x880/0x880 [ 979.535522] __should_failslab+0x121/0x190 [ 979.539789] should_failslab+0x9/0x14 [ 979.543609] kmem_cache_alloc+0x2ae/0x700 [ 979.547788] ? lock_downgrade+0x880/0x880 [ 979.551960] __kernfs_new_node+0xef/0x6f0 [ 979.555643] input: syz1 as /devices/virtual/input/input545 23:37:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x5, 0x7f, 0x1, 0x2}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc080) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote, 0x8}, 0xfffffffffffffecf) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(0xffffffffffffffff, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) [ 979.556136] ? kasan_check_write+0x14/0x20 [ 979.566062] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 979.570951] ? wait_for_completion+0x440/0x440 [ 979.575562] ? mutex_unlock+0xd/0x10 [ 979.579298] ? kernfs_activate+0x192/0x1f0 [ 979.583563] kernfs_new_node+0x99/0x130 [ 979.587569] __kernfs_create_file+0x51/0x33b [ 979.592016] sysfs_add_file_mode_ns+0x222/0x560 [ 979.597717] internal_create_group+0x383/0xc30 [ 979.602341] ? bd_set_size+0x89/0xb0 [ 979.606096] ? remove_files.isra.0+0x190/0x190 23:37:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261774c000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 979.610717] sysfs_create_group+0x20/0x30 [ 979.614890] lo_ioctl+0xf8f/0x20d0 [ 979.618460] ? lo_rw_aio+0x1470/0x1470 [ 979.622396] blkdev_ioctl+0xc2c/0x1ab3 [ 979.626306] ? blkpg_ioctl+0xa90/0xa90 [ 979.630229] ? find_held_lock+0x35/0x130 [ 979.634290] ? debug_check_no_obj_freed+0x200/0x464 [ 979.639317] ? __fget+0x340/0x540 [ 979.642798] block_ioctl+0xee/0x130 [ 979.646446] ? blkdev_fallocate+0x400/0x400 [ 979.650799] do_vfs_ioctl+0xd5f/0x1380 [ 979.654711] ? selinux_file_ioctl+0x46c/0x5d0 [ 979.659228] ? selinux_file_ioctl+0x125/0x5d0 [ 979.663734] ? ioctl_preallocate+0x210/0x210 [ 979.668148] ? selinux_file_mprotect+0x620/0x620 [ 979.672925] ? iterate_fd+0x360/0x360 [ 979.676731] ? do_sys_open+0x31d/0x550 [ 979.680630] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 979.686180] ? security_file_ioctl+0x8d/0xc0 [ 979.690597] ksys_ioctl+0xab/0xd0 [ 979.694095] __x64_sys_ioctl+0x73/0xb0 [ 979.697986] do_syscall_64+0xfd/0x620 [ 979.701789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 979.706970] RIP: 0033:0x45b1b7 [ 979.710174] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 979.729107] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 979.736830] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 979.744153] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 979.751425] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a 23:37:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="726177800000000000008dd58236a5c800000000000000000000000000000000000000000000020000d38fcccc2700030000003e1b85de0684d0bdc802000058010000000000005a0100000000000000000000300200003002000030c1adef01509f0200a8f37fca9d91e5a67627aeda3eecc66d46f37429c7473d4c5c6fab79e80816ebbd8f6e2ed67be5e3bb4d332b3301b0068038355f7f1f0d6ec9d6f7d7ecc137185c4783f81a400223816725291fadfc06b160b78c17cd86dca5d2fb3cc6d9e34a5948b878f07a546770f879b6b673728a7c135972e9666259be33651d58e4a69b9bb9896b6b00bff430e858ea99270d8f2f38185ebec72cf0554b07a30e205444a3294b8e003d2f0ca05c505a15583a7224187a646af050d5ff6a735c48f5273ebaf910641535c66cff11fc02b4f8ad5d2ec862880f287e6825189aad3d1ddf44c2c654"], 0x1) socket$packet(0x11, 0x0, 0x300) unlink(&(0x7f0000000040)='./file0/file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd6f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b7080dc8973f3abef18b8f991dba3f233bd127425f82df245c535953243439e3ae60fb9490d7ddee877f348be4a40ea1e82502000e45dedcb8acf10a212b5cc1b4bf22642734fc9de9891196bd54a3bcbdc939ff57e714ee50ee6a7915ce467e207b7a950d8750f89e14608b1c4b7ff4833d7a0e457f3282029c178409c8f48c89907313ec0c7d35a28a4d19b9f86ff05bbcc211743b3b09670a758249ff451041a0db7c0c49357038b359cc09f30d1b3853ea346b84c566c29e96eaae493b69b77cbf0623b1ca9f9226982dc8e6caf25ef19d25b80b014f40db7947e8ae4915af508f0f15089b5f20e3a1b0eab6ec38a6c6c40430773ab51c42590755f36c645266ece01c74b358ab0a81cbf2a71c44e68f7684edd36a72f0d50fa5d6a9f51ce07bdc634799625ef3358491a798"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 979.758693] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 979.766036] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000013 [ 979.797853] tmpfs: Bad value 'local:' for mount option 'mpol' [ 979.840492] audit: type=1800 audit(1579822629.731:441): pid=15868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17258 res=0 23:37:09 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00000c) 23:37:09 executing program 5 (fault-call:0 fault-nth:20): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 979.915237] x_tables: ip_tables: ah match: only valid for protocol 51 [ 979.952447] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:09 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}, 0x10000000}, 0xfffffeae) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617754000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:09 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e24, 0x5, @ipv4={[], [], @empty}, 0x2c97}, {0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10001}, 0x7, [0x0, 0x3, 0x1ff, 0x200, 0x6, 0xff, 0x72, 0x80000000]}, 0x5c) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 980.008948] FAULT_INJECTION: forcing a failure. [ 980.008948] name failslab, interval 1, probability 0, space 0, times 0 [ 980.029411] CPU: 1 PID: 15907 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 980.037264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.046823] Call Trace: [ 980.049434] dump_stack+0x197/0x210 [ 980.053184] should_fail.cold+0xa/0x1b 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 980.057106] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.062239] ? lock_downgrade+0x880/0x880 [ 980.066422] __should_failslab+0x121/0x190 [ 980.070678] should_failslab+0x9/0x14 [ 980.074498] kmem_cache_alloc_trace+0x2cc/0x760 [ 980.079257] ? dev_uevent_filter+0xe0/0xe0 [ 980.083532] kobject_uevent_env+0x22c/0x1170 [ 980.087978] kobject_uevent+0x20/0x30 [ 980.091801] lo_ioctl+0x100b/0x20d0 [ 980.095450] ? lo_rw_aio+0x1470/0x1470 [ 980.099364] blkdev_ioctl+0xc2c/0x1ab3 [ 980.103459] ? blkpg_ioctl+0xa90/0xa90 [ 980.125862] ? find_held_lock+0x35/0x130 [ 980.128168] audit: type=1400 audit(1579822629.921:442): avc: denied { name_bind } for pid=15928 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 980.129949] ? debug_check_no_obj_freed+0x200/0x464 [ 980.129979] ? __fget+0x340/0x540 [ 980.130002] block_ioctl+0xee/0x130 [ 980.130019] ? blkdev_fallocate+0x400/0x400 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80) ftruncate(r2, 0x10001) getpeername(r1, &(0x7f0000000080)=@l2={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0x80) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 980.160539] audit: type=1400 audit(1579822629.921:443): avc: denied { node_bind } for pid=15928 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 980.161288] do_vfs_ioctl+0xd5f/0x1380 [ 980.161307] ? selinux_file_ioctl+0x46c/0x5d0 [ 980.161322] ? selinux_file_ioctl+0x125/0x5d0 [ 980.161341] ? ioctl_preallocate+0x210/0x210 [ 980.218137] ? selinux_file_mprotect+0x620/0x620 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) bind$x25(r1, &(0x7f00000000c0)={0x9, @remote={[], 0x3}}, 0x12) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x12) r3 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x2, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000200)={0x5, 0x20}) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799ef9d85838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d99ca1c1090a0416253e005e00000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b70800"/129], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 980.222917] ? iterate_fd+0x360/0x360 [ 980.226738] ? do_sys_open+0x31d/0x550 [ 980.230654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.236219] ? security_file_ioctl+0x8d/0xc0 [ 980.240660] ksys_ioctl+0xab/0xd0 [ 980.244151] __x64_sys_ioctl+0x73/0xb0 [ 980.248065] do_syscall_64+0xfd/0x620 [ 980.251907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.257376] RIP: 0033:0x45b1b7 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = dup(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r2, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x80) ftruncate(0xffffffffffffffff, 0x10001) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x3040, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88000fc000000) [ 980.260582] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.281060] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.288790] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 980.296080] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 980.303385] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 980.310669] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 980.317954] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000014 [ 980.361963] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f00000000c0)={0x7, 0x5}) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'osx.', '&-vboxnet0em0em0vmnet1:em1\x00'}, &(0x7f0000000080)='\x00', 0x1, 0x3) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0x4) [ 980.420725] x_tables: ip_tables: ah match: only valid for protocol 51 [ 980.431374] input: syz1 as /devices/virtual/input/input546 23:37:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r2) splice(r2, &(0x7f0000000040)=0xff, r0, &(0x7f00000000c0)=0x232, 0x20, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, 0x8}) sendfile(r0, r3, 0x0, 0x80001d00c0d0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$GETPID(0x0, 0x2, 0xb, &(0x7f00000003c0)=""/4096) r7 = dup2(r6, r6) recvfrom$inet6(r6, &(0x7f0000000200)=""/216, 0xd8, 0x40000000, 0x0, 0x0) getsockopt$llc_int(r7, 0x10c, 0x1, &(0x7f0000000140), &(0x7f0000000300)=0x4) 23:37:10 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00000d) 23:37:10 executing program 5 (fault-call:0 fault-nth:21): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617760000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x8, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[]}}, 0x40000) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000500)={r2, 0x10001, 0x8000, "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"}) [ 980.658187] FAULT_INJECTION: forcing a failure. [ 980.658187] name failslab, interval 1, probability 0, space 0, times 0 [ 980.686141] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) get_thread_area(&(0x7f0000000040)={0x3, 0x20001000, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x80000001]}, 0x0, 0x8) [ 980.708137] x_tables: ip_tables: ah match: only valid for protocol 51 [ 980.762296] CPU: 1 PID: 16035 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 980.770141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 980.779536] Call Trace: [ 980.782152] dump_stack+0x197/0x210 [ 980.785812] should_fail.cold+0xa/0x1b [ 980.789745] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 980.794870] ? lock_downgrade+0x880/0x880 [ 980.799050] __should_failslab+0x121/0x190 [ 980.803308] should_failslab+0x9/0x14 [ 980.807122] kmem_cache_alloc_trace+0x2cc/0x760 23:37:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617768000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xcc000, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000180)=0x3fffe, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 980.811816] ? dev_uevent_filter+0xe0/0xe0 [ 980.816068] kobject_uevent_env+0x22c/0x1170 [ 980.820516] kobject_uevent+0x20/0x30 [ 980.825641] lo_ioctl+0x100b/0x20d0 [ 980.829298] ? lo_rw_aio+0x1470/0x1470 [ 980.833205] blkdev_ioctl+0xc2c/0x1ab3 [ 980.837115] ? blkpg_ioctl+0xa90/0xa90 [ 980.841015] ? find_held_lock+0x35/0x130 [ 980.845087] ? debug_check_no_obj_freed+0x200/0x464 [ 980.850124] ? __fget+0x340/0x540 [ 980.853607] block_ioctl+0xee/0x130 [ 980.857255] ? blkdev_fallocate+0x400/0x400 [ 980.861599] do_vfs_ioctl+0xd5f/0x1380 [ 980.865509] ? selinux_file_ioctl+0x46c/0x5d0 [ 980.870467] ? selinux_file_ioctl+0x125/0x5d0 [ 980.874997] ? ioctl_preallocate+0x210/0x210 [ 980.879441] ? selinux_file_mprotect+0x620/0x620 [ 980.884230] ? iterate_fd+0x360/0x360 [ 980.888073] ? do_sys_open+0x31d/0x550 [ 980.891990] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 980.897551] ? security_file_ioctl+0x8d/0xc0 [ 980.901989] ksys_ioctl+0xab/0xd0 [ 980.905472] __x64_sys_ioctl+0x73/0xb0 [ 980.909390] do_syscall_64+0xfd/0x620 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x9, @empty, 0x9f7b}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$snddsp(r3, &(0x7f0000000700)="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", 0x1000) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xfffffffd}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x1100005c9540, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRESDEC, @ANYRESHEX=r7, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESOCT=r6, @ANYBLOB, @ANYRES32=r8, @ANYPTR, @ANYRES64=r10, @ANYRES32=0x0, @ANYPTR, @ANYRES64]], @ANYRESDEC], 0x44) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, &(0x7f0000000080)=0xcced) 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc805}, 0x8041) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 980.913221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 980.918431] RIP: 0033:0x45b1b7 [ 980.921638] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 980.940739] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.948559] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 980.955855] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 980.963143] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 980.970429] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 980.977980] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000015 23:37:10 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4040, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f00000000c0)={0x3f, 0x3, 0x2}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) 23:37:10 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x1f, 0x800, 0x9a) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r7, 0x1, 0x20}, 0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r8, 0x0, 0x80001d00c0d0) [ 981.025800] tmpfs: Bad value 'local:' for mount option 'mpol' [ 981.059363] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00000e) 23:37:11 executing program 5 (fault-call:0 fault-nth:22): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261776c000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x200000009) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000001c0)={0x1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000080)=0xffff, 0x4) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000280)=""/243) r9 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r9, 0x10001) sendfile(r0, r9, 0x0, 0x88000fc000000) 23:37:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)="9e5c4ab547c8a7bef750eca98c5546055d5f623b779d302b96f7c1e101d7da1ef9a8ee860ea12506fb179af08136fad354214b43474a96f4b790ab509183bc4f0d7957a486d4749b86a84826f8803fe3", 0x50}, {&(0x7f0000000180)="8688db3994150a35dac981aaa02d6d7c8fdd744d82d464acd74831c18db5c2cd74a267b9dac9252f8818de1a5dbc9757a1b7fe25a05fa1436123dceff4e2de2d93c3f783", 0x44}, {&(0x7f0000000100)="bbe5cbf547e9579d206306dea378aad0f171c50e02470b23170abed98475a370975177bf", 0x24}, {&(0x7f0000000200)="6ffc2cceed07b61f730bd43616fa689f37f49ac676d51f40c03b246fa74bf8ace291217b9153638af4deae2f707aad9d00e688627bb6739d83c3b7ae262e030335f97157386d4d77f5d97826f563a9ec618aeb48cf9b89b3e264436e80863f3acb0e04201d502bdb0cc1d98655f9ed6dcf90736c11e431b6ddfe49a6b2494416edd87b12d94583c30ed648341a3c8ee54fc3bfe39a34b9b4a20c9a1e54afbcde39a938eba027439a6261be3d4b9630f1db94d2aa09d6afb03cdd95fcbc9b45afa4cab3df993a0a29830f8b5079acd69fa59edd030e5b0178fe61260ca375a73d976a3fe7a7", 0xe5}, {&(0x7f0000000300)="5b9e1e17b51ba9c1a0b5f1d1d2a6f358286aafddd9", 0x15}, {&(0x7f0000000340)="68f610f8ff2b99d28572357354382d9ba1b95b6b34e7b0fedeb1b62a7f95c6e9515b9a2f9e06690503db8a04c4e889edd50abc087c2c9c8872f33450962395b17b3f1b41ac4c1f8073f63b01dcea8efd351471cedaf44f6dbfe3311e6326c7e921938a97db04a0b33e5046fbda2145ddbdb8cc87c94bdbdba2e5c415cca8b290acc0ed44076149e0e838c156bb46dfa3324259aeea7313fddbd7e1d6cf6bdbea2f040a888b582c09a14b98f0655a0d1b407520d61bccbe3b5b446295186a90d9df61a273d00fd2c64b2c5ecbf78ff067fae812fe768ef29bd4d3a10e0dc9ba50f64a25b278a9e2aac12459a64c86e239", 0xf0}, {&(0x7f00000009c0)="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", 0x1000}], 0x7, &(0x7f00000019c0)=[{0xa0, 0x88, 0x101, "c8bec7354330282410e57cca600dac3c58f6903327b9d955eb45e2256ebb924ddc6516e494aca66a68488b6d0413fa7060c95116cc457d806962ded52aa880f8eb6b2b5be0df35505e08176ad6f7c0770b5f48746cc9e1fc4adcd25d3b09fe229f2d573cdb2047dae7f7a9c76dab261c6d90a1d958f697c90ae177e41102a8a6160da030c6eb30af79bd0d92"}, {0x1010, 0x112, 0x401, "b129289b465bc45801849218be897ea02e681148b85136f50868941fa7fce7aed794b6adf82912edbca04e60f99696a5254130c8c8b387b1c7350a17fea41d7fb6d5ab10d42ecf8532f19754fa356759e04604f06bc84d52be4c05b9da666c0123e09dd04b78aedffc4eddf6fb5773d4c56b243a761046519b42fbee91925580f5a7ec37cd4c8b6cbcb9bb0b9ab56b16317c58f2163a1138dcd48e854abf7169ee41f7150196d1c5d384d6053b4ccdcf4cac4c524b64bbb3aba9e3f46cdafa0fd9efac351a52230d079bf5c9ab941962ccbc72a62c72cf695fec5b385337545c113151bae1983c0306e26382ac840584998336eb24fdee41f7c7a97484a3e6a1fa81d2764d98963e6ffccc6ab75cafcf7d9c1c344eda4f4edbe2afb30e09d250bdf88ac64e4ce57c308048eabcb7c51db0800fb4add12dc24ca8eb24f1fc84d45aa6c6cbd3679c3259272858668e4c4c1467ac215bac1d99f0d8b7ac4963bf1a5041025aa55280f45749f397279508dbb9bbecc623edbf586b8feb10f91361c820b33fb17910a8efcb7f74afcfc81c5dc13e05433411d91dfb26dd38c2c27dd6653a6bb64e13d8289b5cdcd542dd54ce90fb8dc6486467dd1809d3e84165ebec25f1e6c9451ff0837172df272594fe0bf455b90c43c68f7b0497ce1c8384ea04a8aee2e062bfc0accf75d1efe5faa2bca49c9f56cedc099ccd57f92fc82a056fe677586193a4f6d9ad23238a54baf344a911eba86d0e0fa29eb77138349859f9ab4ff9583d4dfcef7c321e8bd356e3ba4866bff7727469520dd25aa1e15381d0ff286421b6567744cfecd8b20f21abfe9268397492c6dc0d2651599d362cf0fd763c02f27c1f051e1e82f17536c704ed83618abaabdc47885ceb689b930e44e0706f69e5ef36db7bf8baf0e4a78fb98709517b086501c16f24d6977254ec47d3336d4ed97203970c0f927bd76d291b5d1c6a2bd67e9c669674a116b73baede78ae2ecbd93ef744632bf6ffcf40b53ab158492c5dda8b718cc56d6170ba7a15f4b3e18d8659cf324b35bfa368d2ee9a1c8100a1f81b74f79d805dfa1bae566491fe9bb2a1eca0a1dc20a35c357c95fa511b32caa3c54f57a18390188f644ec9cc33554706fa901c173d93811ccd4dfa25b61df626cb0db65bdbd76a71c228b2f5ec9920a18fae786f3570550626e7d71a533513891ea5986f0c79605d55f5c2a67f65de870d29054b09f2bc10fae5fb6d99937050cdcb6ee000cd36007f0818c1e50d28d80790587709a5d52452592cf560802416b71df82724e4dee1e12c64132ed01c4f6f01341a964d2efd01a0395c3ae08eaa868f9d88e4c63fc43a2c436b9f1ec4d028ff90bde067383d4c438a97339bf4efc7fd4fb0f21707f8e2a27d5b6497fba66d827a3d0b3a1c3038d7d8d633b824c19732ed2d7113f8652a4fc50057ecb6ef0cf39c93f95d333df90325f48c8c61fb06537dbae5f48c9e9a68821f4302fb0fc3b5d2c91463b83e246359be22ed628bcd890c20af0cb005a0b752a3d398fe58e58bb985d1adc7506c65e456928bf0ef7d994b46c72ea01d302b56bd92ac96a72d147f45932f03b517483a6bb76b0d4b951dcca4037b2bf0a853dfa7bd93ebae9dc9baea121f58095762c36028a5059a4d70e3654a6346b778d32a2b1ec5a1db6d2e61c813fd96ee028d2af67b6745af164b0e5b6cefeb642af19eb0983cd30aca8badbb0ad63c758b3f1ac7cd29d970ac7087eda84802cc4c9124fa079c80e425a279486ae3fcaf879b2987ace0a060a72ff29f13a3ad701d80aa0b44829197c42f3ffcc0ecea668e45ade16a82c3358c728a103410146eecd87cd3225765a0f24ab6a9b1e4c3cc54d519db696f5fd69b3541983775d372b839570c9faf73bb5bffd542e0527482f43bd3d3a4749119ccdd2839e3cbc976a7d0f6e3f2442ddc8f1f756ce923631db32b7d71ef5d505bf685b602d6acbf6704e1156ec1ff7108dcb1340a388598f83ea37895c4b3b9b6bb532596c17d911b310958affa49469549c5e019d69f6a6d9e4fee7d61324ebf80059e6d41745aece4c533aa5c59ef52d91c97184e2900e54a265f3743098da0d6386cae8841d7bb7ea30000d5f601e10105e791927e6d55267887847a2bb337011ec99d2d49c4dddbebae5758c9300f61dc4a88ed41a0ae1156dde4ecd22c172661b724c200b12593d2b14c002f52ec341c2f6a776d4d60b27670af6e17462d9d42faa9c0b8dca56ed2307e736415cd5815724dd353a60c4990108ac5c4710bee482d4755d9b79fd2b93c2ac05b649d0c687022961609c27accc5826f544033300cda5b6076c2fe85354ac174eb6c1411c94fca658eeae3cb5da0375b238b3f92e8d2e316e88a38af90464c2ec30c9f4274d9f64389cefd811660ea3aea38c42e940ba74877bc9b98f50c812af8d97bd4004b329d442972341e30eb1569a4846fa5c09b94791aa83829cd1dcb2eb72b6990227ecde14a2e1e410329a5da904e51e46b31f5d935e52950a4a5491b06206663e7dd9ac437c76b05e229bf9d78465b7038b678d8a6cba0af067621bfddf6a3d41cc2faff753c65ad997f76d99ffe5cbc0ad8b37a3a9af2d670774beffc6ccf168a658cbc6764419859dd5e13c4bdfc4ab585f080c4c38df49c540c565b353a2d45ee33403f45e57f9aa7ac8490f00f9778a532aa85f59af6a0e7dad5f4337de7b58b3f244216d49f10b330d3c20849536186403901a21d226a3fe7cfdee63e672ab3358b6b7e748363eac1bfdcd87c6baebcc20cff75ce77fa532f68c7c7e4a401f5cbab956fc61667fcde7a54d0018a0221de5cac2d544a8df2eb87728036a4aff8202c71584cb1bf92d084e5727f8e27e4fc5efd7c3876f0fe72ec70da1432fe42d05f46d43418ce05d797db872604d12851f5b01c8c9faf3f83aff05262f28986e078bdf0f2ffe7497fae60b32e0f83a503d2baf3e065ad6f7578baa004444e9c5721d06013795beba3fe27fe8b99b4b7ae519a4250eff0b1a68e22269a46d3a2c7912ed5196ad88827386e8297f25108eee566d31896cc9ad6ff70c50d3f01f012800b386b0ba50fff21029275789075441ccab1e8051d841746a11b1ebba034dae6454b332dad2f0458dacd2f6cae7f8ced2a3d38b1ae2446255ce841ed8d45d2cbcf794193fa69a86f9bf7d4beff626c8daa1ba511d7dbe84b8f6599505568b0c840778bf482e81576c604690887c6e1ab6521e892fded55dd2427e758856a6dca5c7e9399612be8abb19f6e20d946b98dfadfc94199f8fdb013b08771376e6d7b67e53abc8ac5a8283360f7238d1dfffa21f519c01db27837d9ca43518e50874e01d835e48f534906c70c856f7643768d06f9b0b71ea407aa1f8d6172764f7be51805483319af4f1fd57d97d2fd4c7a6e5dcf8420e0fa48042f1257b4b44c076421cb80b116427476fecd821717b56b4d1afe0fdc82f1fefc8ed1a9ffdd1d32ac810b4942e27b97dc049e66d34191b59ea9d33fcf82ba86608e15fa745be2bfcc330fbdd2585ba8d6166c7fba92c0f057c06a6fe27ad53f9ca219de894a3f86aea47ebab6c408afaa53d8b8fbd795a2b26b5d9af63369b7f45d056c93bcbd514d2ad9a44c7dbead32b5a192951447776d402af68dec9093af7295437016a4f24ffcc0f6303e77735181153b8a9315cb19a9bb2fc8ae764c1ba96a04a71cae4971526da7d953ed375daa58596a368baf84ca394f25e20140bae0db3e83b147a2bd613b117ebdf53ce3314592339bc8442c01a4a4f7729d5e3f7238702058dec5385e4fce6b6a60a9a8b75d21da5ab71ec15801302e208cba2f170212d0b46ed63bad2e776ac826f025fa196b5db78b6eccefd1fb39f4890ab9029ee439760923e474c33d1858a9f3f5e226074c7c49c7259f4ba6896d2f5a199c23ab81aba541fb902c7515f17af6412f18926fff8f5b50608d83d73adc4f50c671945930b17ce8fe9f8b482637c292c18c721a1348ab7b8a628b5270c3e40a1af78e20dae71347e682bdf0f795002fa7475442d282329c6aa2d1ce0c27c202b71a6590f344de0b9134afb1b0c4ec131f12738c6efd59af923b00a5c6a9ca5b8591b0ded5a3560b035ed2b051cbacf1594ffc18c96bd49d9d2b7dab77bba65094b9b7c9a20843ac113c612fbc1bc5929f6a5bfe3d58d8e62e7810eb1ee2978273fbafaf2be1051f9a8de5bf816a92813c9c7288132afbdd355de6950fcfd00fb35c8ce1ac337187d1370515e943a9e0379971e285f17781b3f9e41d13a1ae220739dabc9883aee9f020fdbccce1a659e71e3bc33716f25cfa9f08f806ef768413d8176f8d313bdd5caacf6653d1b953ee2c44d6ebe55026bb3d6f0e02ad9750a7bc01cdfdd315de8b4835e3ae199afa769ab121e1ca3fd3b1556438c53632a34886d09f825831d61b245896d7bbd216db6f163d2695f649692c2be31b68b949198ca62f49c04a848937877d6374db80fc1826c5264d109636f9ecbf41e57b1f879cbf12bcbbbad15e935cbc22eb0d2765cf444adf6d22ec67400410a509366ffda41277ac87c92b54d55263d9554041dbcc66e53bda66d059eab3c8c1c224735d7a2024d0b6e85d1847dca38b4bb30255458f27a9f15f732b762f78b248831b18a8bacac04b29d6d182654e7dbc4a658029133473b74506ea214e1e498711bd5cf9efef320d52a08a7109d01ef715719e7e36cffbfcfd2aaf57e4c3ef5e8bbcf2d365bbdf0ec9c4e9f856c7b8f5a27a76af087e17c5f9b42931d2a2130933361e221c5cc723c6cf00276a55b2bc7761bbdaf5d02edda991649efc9273260c988770c946eea27df5e8f474511bddfb7ad68ba6ba77f43cd5e61489f841487ef6778a3801ac3995f718f3eae35442142266dcdf9195ee582573306168e3e5edc441ca60378fbd78b32117f2b5d4921d56827030807506365b66547a180ca4b0c5d28caa3c8991e66a2f2c9b04936eb47ec25a92ea8fa453858896f2545f319b47bb0c0f312fed9d70b08ca6eb9378db238574a6f8229931574fe16e8330143ebd602fd83e1679d6e094d0e1d088dc084d5ace82021a2deb88fe700718a0ee06c8cd2a60e3026c83cf61b46cce07993fc35563b6ebac578f7cbdce1669696617aab4516ba002c5aeead426ee9e84b9621a5559e55373b97fc06e0920714529408b3ad34a82026abb053c330550642c79fac4cc46b42c3ec83832570276ffb32ea236d858a48d8cd3c71e1cf83812db43f59129ac1acceb0d474c7c2bb01a86e55da8377b61eac6c5734acbc63823b5fbc934570786cd8606e1df4cfb0d1e8ddc36e2299f7a40c08abf92eed2de8de725adddf951d1899a271c631bebdce90e8d3b1a826d4fa64a76b118e452153f6d590016ff57ee9f51d905b1b59c4bf5cae8d8c798eb5380ebc4862da14447d870561a8ac71514197c4a30ca4799a392ad4f66c77bf252b9028b03cfda14926453f15c0e5c5109d461e0ae45902c1f168ab5576b102d7637d52e60ff231c9325b3cb97d3c786df5747cb990b234437259577be1444491761c55a0a3278d93e685b9ade0a70a2467e00946a5c20f7f5aeefe86cce2a8726c3f503b231891fba6ba12ea5523f566f698641fcf8f0bf0b4145126218ad85733d93bb0d6eb7d2de6c92e8a1389e08aa3f93582912465e3a5f2f4d8339fe9ef6294b7befd6539e16eb1908b2c189e3176e7c9671d41ce614270cde9c3816fbfe0a1f913f0f4eff401efe31f318fa14023efe6fe9e17a4c35fa2d"}, {0x10, 0x10d}, {0x48, 0x44, 0x7, "28a635039ea500e6795c654c2c11462b12c05a6582f60c87139ac22e74c4009bac681d8e80f771d1903beb7cc098f2ae3bcb120850"}, {0x88, 0x103, 0xfffffff8, "2cc7ac069c582e285f6aedf3cd142ee3d18d964763454c4d587a39907a2d6f2368096a53a4b301cff61ec9eefe8eedb33ed08416337e5372c18047f38820824ce2f6bddf583417701622e78f43c5a36068bcfd01f82dbd5329168f291808ad1d227482200a14fa99945d1796c266d92a11"}, {0xe0, 0x108, 0xffffff54, "19bc3f8a1a2d70a44243b48dcc54f8ef6a016fc6e430c7ea1766debc3bff19c7045bd92b945bfec90372b9b5a8b370ebf6f666f3d3fd046db2f9e44818b189ffba490393e8715921e576d919ad86473911361322f8068d38cc1c4a954842353b9e8246952daa0ccd6dbd9ff8ecd76ee11e00b1acc00c2dd2d1768345d837728a80ca75d3b765883bd4ef5a1f87b57ebdff7ffbf3dcc02019a35ef3a70390867b6494aa4c80e80065d0501d328fccf5ce1ecb32c45a74270693b015874be8058943451e4efdfb4d09acb4"}, {0xc0, 0x1, 0x3, "7d9c37a000b07c39671fb4d93c6274ad051562be87c786a1f0cd9173a38c279217c89f0aa964f6b5550c45b24e45f93cd7a776c038a4b5376693353ff8be0e7ee18996f7e53e3ca54cd8963e02cc191c4b576e5aa525d5958f196bacb0a59377333e9b92212d840014e212a03879306591c9264fe8a2d038e62f9da3076c0a8c76ffe0d5b8574af6ffc1ad5317ae6e291df710acc90c2c99948961336c929b41a92fe80b3c579e1a45"}], 0x1330}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000500)=0x3, 0x4) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x4, 0x20010, r8, 0x82000000) [ 981.334674] kauditd_printk_skb: 2 callbacks suppressed [ 981.334691] audit: type=1800 audit(1579822631.221:446): pid=16164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17254 res=0 [ 981.337145] FAULT_INJECTION: forcing a failure. [ 981.337145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 981.373427] CPU: 1 PID: 16383 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 981.381233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.390598] Call Trace: [ 981.393217] dump_stack+0x197/0x210 [ 981.396877] should_fail.cold+0xa/0x1b [ 981.400812] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 981.406379] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.411521] ? mark_held_locks+0x100/0x100 [ 981.415813] __alloc_pages_nodemask+0x1ee/0x750 [ 981.420615] ? mutex_unlock+0xd/0x10 [ 981.424369] ? __alloc_pages_slowpath+0x2870/0x2870 [ 981.429427] cache_grow_begin+0x91/0x8c0 [ 981.433515] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 981.439097] ? check_preemption_disabled+0x48/0x290 [ 981.444139] kmem_cache_alloc_trace+0x685/0x760 [ 981.448838] ? dev_uevent_filter+0xe0/0xe0 [ 981.453094] kobject_uevent_env+0x22c/0x1170 [ 981.457575] kobject_uevent+0x20/0x30 [ 981.461402] lo_ioctl+0x100b/0x20d0 [ 981.465059] ? lo_rw_aio+0x1470/0x1470 [ 981.468972] blkdev_ioctl+0xc2c/0x1ab3 [ 981.472882] ? blkpg_ioctl+0xa90/0xa90 [ 981.476789] ? find_held_lock+0x35/0x130 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=0x0], 0x26) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0xc) process_vm_readv(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/254, 0xfe}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000480)=""/214, 0xd6}], 0x3, &(0x7f0000000400)=[{&(0x7f0000000580)=""/188, 0xbc}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x2, 0x0) 23:37:11 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000380)=0x4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) fstat(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='fuseblk\x00', 0x500008, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffffd}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0/file0\x00', 0xe, 0x0) 23:37:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617774000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) ioperm(0x4, 0x9, 0xe72) [ 981.480875] ? debug_check_no_obj_freed+0x200/0x464 [ 981.485911] ? __fget+0x340/0x540 [ 981.489401] block_ioctl+0xee/0x130 [ 981.493035] ? blkdev_fallocate+0x400/0x400 [ 981.497368] do_vfs_ioctl+0xd5f/0x1380 [ 981.501288] ? selinux_file_ioctl+0x46c/0x5d0 [ 981.505807] ? selinux_file_ioctl+0x125/0x5d0 [ 981.510330] ? ioctl_preallocate+0x210/0x210 [ 981.514760] ? selinux_file_mprotect+0x620/0x620 [ 981.519549] ? iterate_fd+0x360/0x360 [ 981.523373] ? do_sys_open+0x31d/0x550 [ 981.527303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97ecceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0xfc, 0x2, 0x2, 0x401, 0x0, 0x0, {0x7}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x1b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000040}, 0x2004) getsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ftruncate(r2, 0x10001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) sendfile(r0, r6, 0x0, 0xa8000fc000000) [ 981.532864] ? security_file_ioctl+0x8d/0xc0 [ 981.537288] ksys_ioctl+0xab/0xd0 [ 981.540764] __x64_sys_ioctl+0x73/0xb0 [ 981.544682] do_syscall_64+0xfd/0x620 [ 981.548508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 981.553750] RIP: 0033:0x45b1b7 [ 981.556962] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 981.575883] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 981.583620] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 981.590905] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 981.598193] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 981.605482] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 981.612772] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000016 [ 981.641900] tmpfs: Bad value 'local:' for mount option 'mpol' [ 981.733719] audit: type=1800 audit(1579822631.621:447): pid=16294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17251 res=0 23:37:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00000f) 23:37:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617778000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:11 executing program 5 (fault-call:0 fault-nth:23): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 981.870369] FAULT_INJECTION: forcing a failure. [ 981.870369] name failslab, interval 1, probability 0, space 0, times 0 [ 981.897738] CPU: 0 PID: 16514 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 981.905682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 981.915048] Call Trace: [ 981.917665] dump_stack+0x197/0x210 [ 981.921315] should_fail.cold+0xa/0x1b [ 981.925205] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 981.930317] ? lock_downgrade+0x880/0x880 [ 981.934494] __should_failslab+0x121/0x190 [ 981.938753] should_failslab+0x9/0x14 [ 981.942581] kmem_cache_alloc+0x2ae/0x700 [ 981.946745] ? lock_downgrade+0x880/0x880 [ 981.950909] skb_clone+0x156/0x3e0 [ 981.954524] netlink_broadcast_filtered+0x875/0xb30 [ 981.959594] netlink_broadcast+0x3a/0x50 [ 981.963758] kobject_uevent_env+0x8c4/0x1170 [ 981.968185] kobject_uevent+0x20/0x30 [ 981.971999] lo_ioctl+0x100b/0x20d0 [ 981.975655] ? lo_rw_aio+0x1470/0x1470 [ 981.979566] blkdev_ioctl+0xc2c/0x1ab3 [ 981.983494] ? blkpg_ioctl+0xa90/0xa90 [ 981.987408] ? find_held_lock+0x35/0x130 [ 981.991489] ? debug_check_no_obj_freed+0x200/0x464 [ 981.996536] ? __fget+0x340/0x540 [ 982.000019] block_ioctl+0xee/0x130 [ 982.003660] ? blkdev_fallocate+0x400/0x400 [ 982.008003] do_vfs_ioctl+0xd5f/0x1380 [ 982.011902] ? selinux_file_ioctl+0x46c/0x5d0 [ 982.016419] ? selinux_file_ioctl+0x125/0x5d0 [ 982.020951] ? ioctl_preallocate+0x210/0x210 [ 982.025387] ? selinux_file_mprotect+0x620/0x620 [ 982.030288] ? iterate_fd+0x360/0x360 [ 982.034105] ? do_sys_open+0x31d/0x550 [ 982.038019] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 982.043583] ? security_file_ioctl+0x8d/0xc0 [ 982.048016] ksys_ioctl+0xab/0xd0 [ 982.051485] __x64_sys_ioctl+0x73/0xb0 [ 982.055400] do_syscall_64+0xfd/0x620 [ 982.059231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.064443] RIP: 0033:0x45b1b7 23:37:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="726177000000100000008dd58236a5c800000000020000000000000000000000000000000050ce00000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002009330228a6ec78f5c013b363b191a5ad42ff98cf0df961e9f8598091a9a906108c822ff684525efa5f4eedc62f40c5cd4fc2dd77adb3d4627a2059ec70d016b74f83c152ffb2e583ca789b0eda4"], 0x1) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000180)=@nl=@unspec, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="0c17560f22210f35204de3c6c9dce761acf5a5630a73e9a59f334d0ad9705e05a6250f4a6335deefb2aebb84d1f832c718619bc0a8f1935f75ff1667597d12afbcb4b8b38512927e6701311d6ff0eec9c65f27f7b5854594d9ce69d4ffdaa867f736f0e1", 0x64}, {&(0x7f0000000280)="de48fbd4", 0x4}, {&(0x7f00000002c0)="3d7e78b0e1c3b74613c210ecc4a989c143", 0x11}], 0x3}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r10, 0x800443d3, &(0x7f0000000440)={@fixed={[], 0x10}, 0x66693a6e, 0x32a, 0x3}) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f00000003c0)={0x9, 0x8, 0x4, 0x4000000, 0xfffff800, {r7, r8/1000+30000}, {0x4, 0x2, 0x5, 0x1, 0x1, 0x1, "bb389c93"}, 0x7fffffff, 0x2, @offset=0xff, 0x3, 0x0, r4}) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r11, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24004004}, 0x8801) socket(0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000480)={0x7fffffff, 0x2, 0x48ef, 0x100, 0x7, 0x1d4}) 23:37:11 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x1a8) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f00000003c0)) r2 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000200)=0x2) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r2, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x7, @local, 0x1}}, 0x8, 0x3}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x8, 0xb2000000, 0x7f, 0x401}, &(0x7f00000001c0)=0x98) r6 = socket(0x1f, 0x800, 0x9a) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r9}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={r9, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000500)={r9, 0xd9, "17adfacde55c6a1bbb36fb40437b82ba675d92d3ffd244279eda4e46ad95b92dcaa3d55d47a2f1c3aa217d02bf6a8eb73cb786d5b0f6fdb8987be566d15c4f837efb36b0297fd83abd8eef5598afa812c3e80e3e0395b2a730f5a9b93ee513720657b72849f47b6b0044f49c26d8ae6e5c6cb8b94b74011759b999ab3dc4cd0fd46294dc8de05884840c9cd8313e71dac958e63e1597c85747b912c6098d96ee7dbfc478688eb2"}, &(0x7f00000000c0)=0xaf) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 982.067655] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.086566] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 982.094285] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045b1b7 [ 982.101571] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 982.108866] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 982.116226] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 982.123502] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000017 [ 982.164633] tmpfs: Bad value 'local:' for mount option 'mpol' [ 982.176062] audit: type=1800 audit(1579822632.061:448): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17247 res=0 23:37:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000140), &(0x7f0000000240)=0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x1, 'veth1_virt_wifi\x00', {}, 0x4}) write$P9_RREADDIR(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x80) ftruncate(r5, 0x10001) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000000)) sendfile(r0, r5, 0x0, 0x88000fc000000) sendmsg(r5, &(0x7f0000002c00)={&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000480)="8e16a8cce37c45ddb5a3c2b758c5becc12732aa19b8e9abf7fddffd7434b31681104dd8e7d931822c34d011f94fb44319baa7fab484adf47c2851b1082e21d7326325844e8434907b4d94ac163ce2bf03eadc39438ed19df3a518e4789fdf5e46183305e15928a4fb65d49fd5d993be8a687cf0175d43e6a59494df00ea7f7a4a8a7d890e4d95e8fe9c38046c133c014569f9e26324ed206ead1d66fd5e8cc794d6d4e4014685d61e35ab75441ca8c155030c237099a03affff59072b5263bcf856c5ee7ead0ab195a96bfe3b140c73dfb10e348683c5474b0f95ee0f5b6a48209b21216ed2d8ab0c904129e0f794e", 0xef}, {&(0x7f0000000700)="d2ed95349bcd77aee3dbf158884333ea6b166ca405f23ec4a0941d8e430a4308b8904bceec76acbd416010689847a58b798681d924f9e8c585942b37f08a051deb1216aed2cc38e6f4b957e0a1cd9c5ef0f09f9a3f530686cba9844b3365741274fe76c84eff739ee4292f9163b59f45592e094030d94eb7beb225027484d684c45f014d0d3dee204b088f42eb925414eca23d999683aac32b5a7d97c67d8e320cb08ae8214043c6dd416f5046982a21d968eb68992d47c47223199436f0bc2dfa866d83b6fca52599b8bd920ec813e88c", 0xd1}, {&(0x7f00000003c0)="9c8cd4794f0cee7e9b84a2cef1355ed64820787808fd99d0c1c352ccf8dc59fc4eb1ef101bd276fd806eabd5c4d843685e4a26707aaacef5a3c6de4cdd3916f71b8bcf0ef7c47b5765bbcb00fb63b392acca170afb8017c793d76eeabfa44a361599", 0x62}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000580)="d26e9048ea601d547cad091abe42161e9ea4c7552103ee92181eab271cac7a2e3e54c686c07d974a2a07b25e90fd88ef075f118c25068c34c4d229479b0af4", 0x3f}, {&(0x7f0000001800)="866788672113c39657675d06e2eac19ba6ce848205ff9f869cf0f21dea0f53e915fb071461202dba05691091e93295ccc5e9f97967639b00a791202c17", 0x3d}, {&(0x7f0000001840)="bdf0463139b4811d1e33d05ea7df353c2b3bd233d0b12349a8a54299b5d0941a56237b38bd9a01311d90abf6aab845bdee92835863a52e7d1ee7b663e7d13e30e73cd3077114a039e3c908ba6dd45f05071f241e4536a5d69eca1eb719dfafa78ba43bb79c9498e396b5683d01b4d587935ae2cb29e4113d3aed899efe1308f95b037cd512f3030f780ac91d377a7b2ff44e935453b0196311a1c85fb550bc8b31c13e90ef42d4dadfa589f62c3cda8f", 0xb0}, {&(0x7f0000001900)="0d324e4d96f69298332bba1921c145b98c0cdf76999562bea4d3cc50c582a5d83a2eae3e0890619006d3d12166baa35e52fa72be48c810c90c41cd4e9bc62d1f962e4632c6086c1985e89d02dadb82e43cf2e9f1212176c87ac9fd873d0a774ce76e08ff2ec7b00c487cf8d9f6f36745d3", 0x71}, {&(0x7f0000001980)="7398a701ac7fee2e2e3688d26e793010bd810762550b25ed7a865750b651be00d7305725b343e021a2335e4934e910e79852f69a02237fc565666a780cdd10b441b91f5f7aab", 0x46}], 0x9, &(0x7f0000001ac0)=[{0xa8, 0x1, 0x1, "1cafa1c4e5951ce37bbe86313682e2baf7ae0cfb775c1affd5415894ec8b43766ec3aa7193b8579dc5dbe28e1e3ca53789fe644a3a91752eaa3374d93cd60fe72360a4d0f0eefebe6b7299ddc5dc1166764148d163676b3289043a83deef41f712b1e4a63be00e6d05f58faa5c47234ea4a6257176e8bcdba64ce413906a6fe5bc443a7f21152286aab6e0594de4249969"}, {0x80, 0x100, 0x2, "b6bb1b69bd81bc27393b0ea492de6efa329e569524b6ef323e947fc577e94bd3774be3648ac5ebbcd2d7442a3d9d338fa7eb162791984c87a0f1b36480d1b81aecbfa86951843d6b2790df937a9083e96b2e06cb225541e158bbf0a1399d48be005a5de6fbb8154a40bba6197feba34a"}, {0x1010, 0x0, 0xc3, "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"}], 0x1138}, 0x20000000) 23:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261777a000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000200)=""/194) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x6, @rand_addr="ad2c836628aa0b44715d3b5478152f08", 0x3}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 23:37:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000010) 23:37:12 executing program 5 (fault-call:0 fault-nth:24): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617788000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000200000003000000c80200005801000000080000580100000000000000000000300200003002000030020000300200003000"/87], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:12 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) clone(0x2000, &(0x7f0000000200)="3d1f6a89b64f1f6f31341236da084c5bdb63a64fb9b21f9b23e0663cef58923cdfda7087251e56686b76570a3f6c53a30a0ddcd5ad0337235626a97aff5d40ec3fe8fa41f2d5b0b151ea3614a08320e5ad253d02f787b84c706cf900a286017279a18fb8e100f28c77ba43c8aa5ae4c44f2bd4546ebe4b73008c7142894d9383b483d154c02b4a95616f3391e4953d971c210d5bc4b43dac821a2425787244774f51c77e8429e15ada", &(0x7f0000000040), &(0x7f00000000c0), &(0x7f00000002c0)="2f2cd7855cceb76f1d96c6aae969ec58f7a99a6624bd2932b27ca2aec57dec81620631e381e4631254d7ba8b875f8e9bcf9fa1a09d15a94c2bfee619205d5867694c305a46a32ccaf2f6ec66eb8b6a8c37b57b730117aab28713c64fe0473f14749b76dcdbae16d7ef6ec92964a6825dda1cfcb66f0e57721c6923c57227acd91a564e6b0fdb3f28ad23f8690d29f6266271b634106cbd6e8214e5ca6f7e68b96d18d7fedd8187cecf145f28384cb8d8d600de65") r4 = dup3(0xffffffffffffffff, r3, 0x80000) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r4, 0xe1000) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 982.406294] FAULT_INJECTION: forcing a failure. [ 982.406294] name failslab, interval 1, probability 0, space 0, times 0 23:37:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffffffffff88, 0x0, &(0x7f0000000040)={0x1, 0x7, [0xa0c, 0x333, 0x6ba, 0xa61]}) r1 = getpid() ptrace(0xffffffffffffffff, r1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x200000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xffffffff, [], @string=&(0x7f00000001c0)=0x5}}) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000040)=[{}, {}]) r3 = getpid() ptrace(0xffffffffffffffff, r3) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1f, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={r10, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r11 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r11, 0x10001) sendfile(r0, r11, 0x0, 0x88000fc000000) [ 982.475167] CPU: 0 PID: 16740 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 982.483369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 982.492747] Call Trace: [ 982.495363] dump_stack+0x197/0x210 [ 982.499025] should_fail.cold+0xa/0x1b [ 982.502943] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 982.508089] ? lock_downgrade+0x880/0x880 [ 982.512266] __should_failslab+0x121/0x190 [ 982.516522] should_failslab+0x9/0x14 [ 982.520342] kmem_cache_alloc+0x2ae/0x700 [ 982.524866] getname_flags+0xd6/0x5b0 [ 982.528691] do_mkdirat+0xa0/0x2a0 [ 982.532247] ? __ia32_sys_mknod+0xb0/0xb0 [ 982.536424] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 982.541215] ? do_syscall_64+0x26/0x620 [ 982.545211] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.550595] ? do_syscall_64+0x26/0x620 [ 982.554587] ? lockdep_hardirqs_on+0x415/0x5d0 [ 982.559189] __x64_sys_mkdir+0x5c/0x80 [ 982.563096] do_syscall_64+0xfd/0x620 [ 982.566918] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 982.572132] RIP: 0033:0x45a767 [ 982.575337] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 982.594346] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 982.602346] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 982.609635] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 982.616915] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a 23:37:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaddf3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b70890d4fe3d1ebee594bf4ae856ffb6c779fe6657adc2845d9207ca8db761c5b33ea8b4df0b3a2f967ffd83c481e982170ebcfeabb7887247"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f00000001c0)=0x7fffffff) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000200)=0xa87, 0x4) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 982.624202] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 982.631607] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000018 [ 982.648526] audit: type=1800 audit(1579822632.531:449): pid=16742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=16538 res=0 23:37:12 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000011) 23:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261779c000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000001000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x190, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe63}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x32}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x528}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) socket(0x0, 0x0, 0x0) 23:37:12 executing program 5 (fault-call:0 fault-nth:25): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:12 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x1}}, 0x20000090) r2 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x80400, 0x9) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380), 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8269836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) r5 = socket(0x25, 0xa, 0xff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x8c, r7, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x6d30b74c62d33a85) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177c8000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 982.981094] audit: type=1800 audit(1579822632.871:450): pid=16878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17261 res=0 23:37:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000012) [ 983.077224] audit: type=1800 audit(1579822632.931:451): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17278 res=0 [ 983.116762] FAULT_INJECTION: forcing a failure. 23:37:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = socket(0x1f, 0x800, 0x9a) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r5, 0x7}, 0x8) r6 = socket(0x1f, 0x800, 0x9a) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r9}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={r9, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={r5, 0xb7b, 0x47, 0x401, 0x2, 0x7, 0x20, 0x0, {r10, @in6={{0xa, 0x4e24, 0x6, @mcast2, 0x5}}, 0x10001, 0x4, 0x6, 0x10000, 0x10000}}, &(0x7f00000001c0)=0xb0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r11 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r11, 0x10001) sendfile(r0, r11, 0x0, 0x88000fc000000) [ 983.116762] name failslab, interval 1, probability 0, space 0, times 0 [ 983.155476] CPU: 1 PID: 16975 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 983.163418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.172796] Call Trace: [ 983.175589] dump_stack+0x197/0x210 [ 983.179259] should_fail.cold+0xa/0x1b [ 983.184935] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 983.190074] ? lock_downgrade+0x880/0x880 [ 983.194261] __should_failslab+0x121/0x190 [ 983.198740] should_failslab+0x9/0x14 [ 983.202744] kmem_cache_alloc+0x2ae/0x700 [ 983.207450] getname_flags+0xd6/0x5b0 [ 983.211308] do_mkdirat+0xa0/0x2a0 [ 983.214879] ? __ia32_sys_mknod+0xb0/0xb0 [ 983.219135] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 983.223927] ? do_syscall_64+0x26/0x620 [ 983.228980] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.235158] ? do_syscall_64+0x26/0x620 [ 983.239945] ? lockdep_hardirqs_on+0x415/0x5d0 [ 983.244562] __x64_sys_mkdir+0x5c/0x80 [ 983.248657] do_syscall_64+0xfd/0x620 [ 983.252629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.257847] RIP: 0033:0x45a767 [ 983.261060] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.281510] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 983.289599] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 983.296897] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 23:37:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) truncate(&(0x7f0000000080)='./file0\x00', 0x80) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x8) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:13 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2000) close(r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r1, 0x24, &(0x7f0000001480)={0x0, 0x2, 0x5, 0x40, r2}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)="aca2dac7"}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000001680)={0x104, 0x3, 0x4, 0x100, 0xfffffe01, {0x0, 0x2710}, {0x4, 0x0, 0x43, 0x7, 0x3, 0x9, "5752962c"}, 0x3c5, 0x4, @userptr=0x3ff, 0x7}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x4001fe) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000001780)={0x990000, 0x80000000, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000001740)={0xa2093d, 0x6, [], @string=&(0x7f0000001700)=0x7f}}) setsockopt$inet_tcp_int(r9, 0x6, 0xa, &(0x7f0000000180)=0x8, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) openat$vcsu(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vcsu\x00', 0x3, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$EVIOCGRAB(r13, 0x40044590, &(0x7f0000001500)=0x92f2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r14 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r14, &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='\x00', 0x1, 0x3) r15 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x28) write$P9_RREADDIR(r4, &(0x7f00000017c0)=ANY=[@ANYPTR64=&(0x7f0000001900)=ANY=[@ANYRES64=0x0]], 0x8) ftruncate(r15, 0x10001) sendfile(r3, r15, 0x0, 0x88000fc000000) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup2(r16, r16) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$FIONREAD(r17, 0x541b, &(0x7f0000001600)) socket$isdn_base(0x22, 0x3, 0x0) timer_create(0x6, &(0x7f0000000200)={0x0, 0x35, 0x0, @thr={&(0x7f0000000480)="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", &(0x7f00000003c0)="7145e2b1d772a5bfb3a814a145c5aaf11bb89c69ffcbd2ffb089063646d2c18e48277394d6f95e8a349234c4cc4e9704f21b4c33fad8cb8a25b98113b2080b81beb8ef16b9d67af449f3c245ab7235b79a22dafa6975a5d160d7569389"}}, &(0x7f0000000340)) [ 983.304190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 983.312359] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 983.319668] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000019 23:37:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1f, 0x800, 0x9a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={r8, 0x7}, 0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, [0x4, 0x7, 0x2, 0x7, 0x100000000, 0xff, 0xfffffffffffffffd, 0x93, 0x4, 0xa6, 0x20, 0x4, 0x7fff, 0x8, 0x1]}, &(0x7f00000004c0)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r8, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x92be, 0x1, 0x7, 0x80000000, 0x7, 0x2, 0x4c1229e7, 0x0, 0x3, 0x85d8, 0x2, 0x5, 0x0, 0x6, 0x2]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r11, @in6={{0xa, 0x4e24, 0xffff, @dev={0xfe, 0x80, [], 0xf}, 0x2b5a6843}}, 0x2, 0x1}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xfffffffe, 0x20}, 0xc) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r12, 0x0, 0x80001d00c0d0) 23:37:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177d0000000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="0e348a7e726177000000000000008dd58236a4c8000000000000000000000000000000000000000000000200000003000000c802000058010000fcff00005801000000000000000000003002000030020000300200003002000000"], 0x1) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x990000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990903, 0x1, [], @value64=0xffffffffffffffc0}}) setsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f0000000180)="a9ee81f5b581752866c28ac6cfc5dc6dfd4898be1456462d4fb18323a2b0de70323a0f764572e06f8eae8f9cd30112c32cbedab190f218bcd3c4d018f86dba05b13fbf29f6fcbf71923d36dc3af99757343317267a892e9b1ba933cd6af1c8503b17c088f193c3cb54ecbb70b40352d48a169714b461ad99bedc454c05af7ff551d2fd791909a3af957084f7cb00a4d73a9037af254104262b5a4180799b75ab05b3d63507ce4146d57ba3914ee42e44da605a1017f5b8a6d59b18121fe7d2b9ae66be11a8b841aa0997d7f670325cd0d14fbb332e8449afbd980be77961c89bd13d23684e", 0xe5) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) write$P9_RLERRORu(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="1800f227eb532e9b8265000000000070757365740104000094d36ceaec020084c12f7a59c4f01cb21d45647df2418e5b55a65768eb652d5637a4a8b035aded562c2d803a2c796dac000000000000000000e3338f9da3d09daccf3d79664783c9f8b042be354b148b3e1faef09803985ecdbe195c827354a2a60423e8a10e589a078fae5e3d4248b43c803d3b6cdd4d56c5a54df963cc38090b13fe7edc131ebaa330aa62239112f1f351777f905a9171893768bc064ce58a9e9805ddded84bfeb7a572645f9741328b097ba4be5e710ee661179b8f8bacf2a2994e17e8eef84315ef18a61e0b2e76cfc030f65954a5f41f2d600e89e70ee3c055add1b6f1e3b9affe4fe5a74cadbe7cf3db69ec1ffc70d9df58de371aaea7aff35c992d8b2d511c37b7eb6c896aea7ceae15f14198f0803b5d148f69db053355bd22ebafe6ae99bc3625b89f86a4c22b4059eee0e95ddca1444268253ff8a334b2a32cdb93a63bcb1366d0192fce2c2170e85337ae905655a68e12ac2fe6be02549f58e6991f13f0eea9e84de8478b681f0d56b9569ff3ddcf20f1f2161f9bdd68eac0905a367d2acc6b04eb1af06134afb5c8ba08fd0427f"], 0x18) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r9, 0x5601, 0x0) socket(0x25, 0x4, 0x0) [ 983.406523] audit: type=1800 audit(1579822633.291:452): pid=17087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17286 res=0 [ 983.452538] input: syz1 as /devices/virtual/input/input548 23:37:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000013) 23:37:13 executing program 5 (fault-call:0 fault-nth:26): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617702010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000541842, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 983.598487] FAULT_INJECTION: forcing a failure. [ 983.598487] name failslab, interval 1, probability 0, space 0, times 0 23:37:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) dup2(r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 983.696113] CPU: 0 PID: 17151 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 983.701003] xt_check_match: 18 callbacks suppressed [ 983.701017] x_tables: ip_tables: ah match: only valid for protocol 51 [ 983.705148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 983.705172] Call Trace: [ 983.705202] dump_stack+0x197/0x210 [ 983.705224] should_fail.cold+0xa/0x1b [ 983.705246] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 983.742497] ? lockdep_hardirqs_on+0x415/0x5d0 [ 983.747116] __should_failslab+0x121/0x190 [ 983.752082] should_failslab+0x9/0x14 [ 983.756734] kmem_cache_alloc+0x2ae/0x700 [ 983.760914] ? map_id_range_down+0x1ee/0x370 [ 983.765344] ? __put_user_ns+0x70/0x70 [ 983.769258] selinux_inode_alloc_security+0xb6/0x2a0 [ 983.774396] security_inode_alloc+0x8a/0xd0 [ 983.779703] inode_init_always+0x56e/0xb40 [ 983.784314] alloc_inode+0x81/0x190 [ 983.788081] new_inode_pseudo+0x19/0xf0 [ 983.792711] new_inode+0x1f/0x40 23:37:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x10000, 0x0) recvfrom$l2tp6(r3, &(0x7f0000000580)=""/234, 0xea, 0x1, &(0x7f0000000400)={0xa, 0x0, 0x0, @remote}, 0x20) 23:37:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617704010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 983.796188] __ext4_new_inode+0x3cb/0x52d0 [ 983.800466] ? kasan_check_read+0x11/0x20 [ 983.804646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.810386] ? ext4_free_inode+0x1470/0x1470 [ 983.815661] ? dquot_get_next_dqblk+0x180/0x180 [ 983.820549] ? selinux_determine_inode_label+0x1b1/0x360 [ 983.826121] ext4_mkdir+0x3d5/0xdf0 [ 983.829884] ? ext4_init_dot_dotdot+0x520/0x520 [ 983.834586] ? selinux_inode_mkdir+0x23/0x30 [ 983.839117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 983.844773] ? security_inode_mkdir+0xe4/0x120 [ 983.849470] vfs_mkdir+0x42e/0x690 [ 983.853056] do_mkdirat+0x234/0x2a0 [ 983.857241] ? __ia32_sys_mknod+0xb0/0xb0 [ 983.861421] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 983.866231] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.872772] ? do_syscall_64+0x26/0x620 [ 983.877211] ? lockdep_hardirqs_on+0x415/0x5d0 [ 983.881836] __x64_sys_mkdir+0x5c/0x80 [ 983.885755] do_syscall_64+0xfd/0x620 [ 983.889590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 983.894802] RIP: 0033:0x45a767 [ 983.898543] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 983.918762] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 983.927045] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 983.934335] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 23:37:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r6) r7 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r7) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r9) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000400)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=0x0, @ANYRES64, @ANYBLOB="287577ce13374b4a0b", @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYRES32=0x0, @ANYRES64=r1, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="ecbbec845adb43ca3b7bfc81ba8c5e264dcf35a458a33bcc14b90861605781de47318731f862944199688efe32a957b5c34f4ed60cfe66c3c76671485aec436e4ed6a9c908687b2dbb375bede9eaacb67528e7ed43e49781bce7eb36203d793a8f91ed5f72fd081b69d504db952bc14823958b6b68dfc66264b3a16035d5fc893cd2667c402f914188ed95b7a8897209892f"], @ANYBLOB="3f9bcfeddafa4dbae80b841a5f74f0e0ceae112336a8a447645c32353c9687c9a2516375a28215a59a0b2d8f1d91071ae263342e76ba3cfd6bf0f59b05ec1fbb50dbd8", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES64=r3, @ANYPTR, @ANYPTR, @ANYRESOCT=r1, @ANYRES16=r7, @ANYRESDEC=r8, @ANYRESDEC], @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYRES32], @ANYRES32=r9, @ANYRESDEC=r3], 0x7) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:13 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r4) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES64=r2], @ANYRESOCT=r4, @ANYRESHEX=r1]], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x44081) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r5 = open(&(0x7f0000000080)='./file0\x00', 0x1100003d1242, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000000c0)=""/3) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) [ 983.942762] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 983.950066] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 983.957442] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000001a [ 983.966499] audit: type=1800 audit(1579822633.731:453): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17243 res=0 [ 983.999848] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:13 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x40) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:13 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000014) [ 984.043025] x_tables: ip_tables: ah match: only valid for protocol 51 [ 984.074789] input: syz1 as /devices/virtual/input/input549 23:37:14 executing program 5 (fault-call:0 fault-nth:27): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770e010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 984.108176] input: syz1 as /devices/virtual/input/input550 [ 984.114394] input: syz1 as /devices/virtual/input/input551 [ 984.193142] x_tables: ip_tables: ah match: only valid for protocol 51 [ 984.207123] FAULT_INJECTION: forcing a failure. [ 984.207123] name failslab, interval 1, probability 0, space 0, times 0 [ 984.218847] CPU: 1 PID: 17431 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 984.226669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 984.236039] Call Trace: [ 984.238733] dump_stack+0x197/0x210 [ 984.242401] should_fail.cold+0xa/0x1b [ 984.251279] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 984.256449] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.258664] audit: type=1800 audit(1579822634.111:454): pid=17436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17278 res=0 [ 984.262149] __should_failslab+0x121/0x190 [ 984.262190] should_failslab+0x9/0x14 [ 984.292001] __kmalloc+0x71/0x750 [ 984.295577] ? context_struct_to_string+0x428/0x880 [ 984.300631] context_struct_to_string+0x428/0x880 [ 984.305512] ? security_load_policycaps+0x540/0x540 [ 984.310548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.316109] ? sidtab_search_core+0x1d0/0x320 [ 984.320639] security_sid_to_context_core.isra.0+0x226/0x2f0 [ 984.326469] security_sid_to_context_force+0x38/0x50 [ 984.331603] selinux_inode_init_security+0x3b6/0x7a0 [ 984.336741] ? selinux_inode_create+0x30/0x30 [ 984.341254] ? ext4_get_acl+0x107/0x5a0 [ 984.345250] ? rcu_read_lock_sched_held+0x110/0x130 [ 984.350303] security_inode_init_security+0x1ad/0x3b0 [ 984.355507] ? ext4_init_acl+0x240/0x240 [ 984.359588] ? security_kernel_load_data+0xb0/0xb0 [ 984.364530] ? posix_acl_create+0x11a/0x450 [ 984.368861] ? lock_downgrade+0x880/0x880 [ 984.373031] ? ext4_set_acl+0x490/0x490 [ 984.377028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.382591] ? check_preemption_disabled+0x48/0x290 [ 984.387632] ext4_init_security+0x34/0x40 [ 984.391819] __ext4_new_inode+0x3b2f/0x52d0 [ 984.396170] ? ext4_free_inode+0x1470/0x1470 [ 984.400602] ? dquot_get_next_dqblk+0x180/0x180 [ 984.405288] ? selinux_determine_inode_label+0x1b1/0x360 [ 984.410771] ext4_mkdir+0x3d5/0xdf0 [ 984.414431] ? ext4_init_dot_dotdot+0x520/0x520 [ 984.419121] ? selinux_inode_mkdir+0x23/0x30 [ 984.423541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 984.429090] ? security_inode_mkdir+0xe4/0x120 [ 984.433688] vfs_mkdir+0x42e/0x690 [ 984.437248] do_mkdirat+0x234/0x2a0 [ 984.440888] ? __ia32_sys_mknod+0xb0/0xb0 [ 984.445052] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 984.449826] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.455202] ? do_syscall_64+0x26/0x620 [ 984.459223] ? lockdep_hardirqs_on+0x415/0x5d0 [ 984.463817] __x64_sys_mkdir+0x5c/0x80 [ 984.467716] do_syscall_64+0xfd/0x620 [ 984.471533] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 984.476728] RIP: 0033:0x45a767 [ 984.480195] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 984.499205] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 984.506920] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 984.514194] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 984.521563] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 984.528842] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 984.536126] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000001b 23:37:14 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e21, @multicast2}], 0x10) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 23:37:14 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000015) 23:37:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617730010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 984.564497] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c800000000000023e300000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x62) socket(0x0, 0x0, 0xfd) 23:37:14 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 984.653280] x_tables: ip_tables: ah match: only valid for protocol 51 [ 984.673898] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617751010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:14 executing program 5 (fault-call:0 fault-nth:28): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0xf0, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x20}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x37}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 984.833207] x_tables: ip_tables: ah match: only valid for protocol 51 [ 984.865902] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:14 executing program 1: getsockname$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)=0x6e) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmget(0x1, 0x4000, 0x1600, &(0x7f0000ffb000/0x4000)=nil) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:14 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x101) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1f, 0x800, 0x9a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00') getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000002ac0)={@mcast1, 0x0}, &(0x7f0000002b00)=0x14) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r13, r13) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000002bc0)={{{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000002cc0)=0xe8) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000002d80)={&(0x7f0000000200), 0xc, &(0x7f0000002d40)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="020026bd7000ffdbdf250e00000008000300", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="05002a0000000000"], 0x7}, 0x1, 0x0, 0x0, 0x440c1}, 0x20000000) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup2(r15, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) ioctl$TUNGETFILTER(r16, 0x801054db, &(0x7f00000001c0)=""/16) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r8}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000100)={r8, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={r8, 0x10001}, &(0x7f00000000c0)=0x8) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 984.889381] audit: type=1800 audit(1579822634.781:455): pid=17757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17273 res=0 [ 984.953116] FAULT_INJECTION: forcing a failure. [ 984.953116] name failslab, interval 1, probability 0, space 0, times 0 [ 984.985290] CPU: 1 PID: 17766 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 984.993141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.002512] Call Trace: [ 985.005119] dump_stack+0x197/0x210 [ 985.008781] should_fail.cold+0xa/0x1b [ 985.012702] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 985.017845] __should_failslab+0x121/0x190 [ 985.022120] should_failslab+0x9/0x14 [ 985.025937] kmem_cache_alloc+0x2ae/0x700 [ 985.030100] ? security_compute_sid.part.0+0xbb0/0x15c0 [ 985.035574] ? rcu_read_lock_sched_held+0x110/0x130 [ 985.040618] ? ratelimit_state_init+0xb0/0xb0 [ 985.045316] ext4_alloc_inode+0x1f/0x630 [ 985.049391] ? ratelimit_state_init+0xb0/0xb0 [ 985.053895] alloc_inode+0x64/0x190 [ 985.057561] new_inode_pseudo+0x19/0xf0 [ 985.061547] new_inode+0x1f/0x40 [ 985.064923] __ext4_new_inode+0x3cb/0x52d0 [ 985.069177] ? kasan_check_read+0x11/0x20 [ 985.073341] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.079517] ? ext4_free_inode+0x1470/0x1470 [ 985.084029] ? dquot_get_next_dqblk+0x180/0x180 [ 985.088715] ? selinux_determine_inode_label+0x1b1/0x360 [ 985.094619] ext4_mkdir+0x3d5/0xdf0 [ 985.099314] ? ext4_init_dot_dotdot+0x520/0x520 [ 985.104012] ? selinux_inode_mkdir+0x23/0x30 [ 985.108430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.114320] ? security_inode_mkdir+0xe4/0x120 [ 985.118916] vfs_mkdir+0x42e/0x690 [ 985.122558] do_mkdirat+0x234/0x2a0 [ 985.126198] ? __ia32_sys_mknod+0xb0/0xb0 [ 985.130358] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 985.135127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.140507] ? do_syscall_64+0x26/0x620 [ 985.145078] ? lockdep_hardirqs_on+0x415/0x5d0 [ 985.149675] __x64_sys_mkdir+0x5c/0x80 [ 985.153604] do_syscall_64+0xfd/0x620 [ 985.157508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.163836] RIP: 0033:0x45a767 [ 985.167304] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.186316] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 985.194037] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 23:37:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x0, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x810) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000e8ffffff000000000032000000c95e3293f598de18d0e39ae8bc413523e1ffa75e695dac94abfeac8c6267c0c74080921b8e76f52c9d48509142e0a55de6ce761ecd122b84513d80113cc0363066b4906985b64fffa5b0532dcda97551a2560d7aea2a72a4c54a39e251d4770bb3324e975961a53fb225a32ca39d07dc76b4f237a6cf2674dc625358b30c6390a6fa4309e1654c12aff0d9e637f3a81f9be63b944bd7ae797163a95f10ad0b8fac5e3e1dd868aec72fadfb5157a2d1cff7560d683f0985835cbb36cf"], &(0x7f00000000c0)=0x56) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) 23:37:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177be010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000016) [ 985.202619] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 985.210854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 985.218234] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 985.227363] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000001c 23:37:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}, 0x1, 0x0, 0x0, 0x40884}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b95cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x9, 0x1f, 0x4, 0x0, 0x0, 0x5, 0xc000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x32000, 0x5, 0x2, 0x2, 0xfffffffffffffffe, 0x1, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x1) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 985.292999] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:15 executing program 5 (fault-call:0 fault-nth:29): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r4, 0x541c, &(0x7f0000000040)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00') r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r12, 0x40045567, 0x6) 23:37:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177df010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x1) write$binfmt_script(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="2321202e2f66696c65300a049c1dae263d4ce72d45ef7578ccd317ac8d38e0367cbef93996b3a5b470f44344a7f0ce4b86ce42233f3ffd6c094b735af8f0e1423e0aa25ce09cb50f4c39ca8716f4f5bc10d0a519d99171aaeea2feb4ae1a29b8e2d1c619320b47d3ec614709433322c01e9289e76614fb25c879e8f343ae3016dd96ce9bc147467e5ba02b8eae62c13a418932fca08f0bd0d441a2a2ecaaa3e25983c5a7d655365215a53e42d09c06297ae90000000200000000"], 0x7d) 23:37:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_WAITACTIVE(r3, 0x5607) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ftruncate(r4, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r4, 0x0, 0x80001d00c0d0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0x1000, 0x0, 0x3007, 0x1, 0x8, 0x5, 0x100}) 23:37:15 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000017) [ 985.570977] FAULT_INJECTION: forcing a failure. [ 985.570977] name failslab, interval 1, probability 0, space 0, times 0 [ 985.603795] CPU: 1 PID: 18078 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 985.611674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 985.621928] Call Trace: [ 985.624541] dump_stack+0x197/0x210 [ 985.628201] should_fail.cold+0xa/0x1b [ 985.632116] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 985.637282] __should_failslab+0x121/0x190 [ 985.641544] should_failslab+0x9/0x14 [ 985.645561] kmem_cache_alloc+0x2ae/0x700 [ 985.649744] ? security_compute_sid.part.0+0xbb0/0x15c0 [ 985.655583] ? rcu_read_lock_sched_held+0x110/0x130 [ 985.660730] ? ratelimit_state_init+0xb0/0xb0 [ 985.665385] ext4_alloc_inode+0x1f/0x630 [ 985.671185] ? ratelimit_state_init+0xb0/0xb0 [ 985.676842] alloc_inode+0x64/0x190 [ 985.681369] new_inode_pseudo+0x19/0xf0 [ 985.685472] new_inode+0x1f/0x40 [ 985.688865] __ext4_new_inode+0x3cb/0x52d0 [ 985.693132] ? kasan_check_read+0x11/0x20 [ 985.697401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.703666] ? ext4_free_inode+0x1470/0x1470 [ 985.708290] ? dquot_get_next_dqblk+0x180/0x180 [ 985.713181] ? selinux_determine_inode_label+0x1b1/0x360 [ 985.718766] ext4_mkdir+0x3d5/0xdf0 [ 985.722428] ? ext4_init_dot_dotdot+0x520/0x520 [ 985.727131] ? selinux_inode_mkdir+0x23/0x30 [ 985.731573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 985.737139] ? security_inode_mkdir+0xe4/0x120 [ 985.741752] vfs_mkdir+0x42e/0x690 [ 985.746712] do_mkdirat+0x234/0x2a0 [ 985.750366] ? __ia32_sys_mknod+0xb0/0xb0 [ 985.754618] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 985.762212] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.768737] ? do_syscall_64+0x26/0x620 [ 985.772744] ? lockdep_hardirqs_on+0x415/0x5d0 [ 985.777358] __x64_sys_mkdir+0x5c/0x80 [ 985.781496] do_syscall_64+0xfd/0x620 [ 985.785418] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 985.790912] RIP: 0033:0x45a767 [ 985.794130] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 985.813049] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 23:37:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) tee(r2, r0, 0x9, 0x8) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:15 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/psched\x00') ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x9) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip_mr_vif\x00') setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000040)=0x6, 0x4) r4 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177ec010000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 985.820781] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 985.828331] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 985.835800] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 985.843785] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 985.851106] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000001d 23:37:15 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x63, r4}) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) 23:37:16 executing program 5 (fault-call:0 fault-nth:30): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617701020000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) inotify_init1(0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x2, 0x3, 0x3, 0x44, 0x0, 0x8, 0x0, 0x13, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x2, 0x9}, 0x8000, 0x100000001, 0xfff, 0x9, 0x4, 0x81, 0x4}, r3, 0xe, 0xffffffffffffffff, 0xd) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @descriptor="44bb46c06a2c6b05"}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='\x01posix_acl_accessvmnet1security\x00', &(0x7f00000001c0)='eth0\x00', &(0x7f0000000200)='em1\x00', &(0x7f0000000240)='#\x00', &(0x7f0000000280)='user-\\\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='lo}\x00', &(0x7f0000000340)='system)\x00', &(0x7f00000003c0)=']\x00'], &(0x7f0000000540)=[&(0x7f0000000480)='self,]wlan0bdevppp1:(md5sum[$self\x00', &(0x7f00000004c0)='vmnet0\x00', &(0x7f0000000500)='y*cpuset.\')!(\x00']) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1}}, 0x4c801) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8befbdfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) ftruncate(r3, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000018) [ 986.223822] FAULT_INJECTION: forcing a failure. [ 986.223822] name failslab, interval 1, probability 0, space 0, times 0 [ 986.237040] CPU: 0 PID: 18227 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 986.245791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 986.256252] Call Trace: [ 986.259999] dump_stack+0x197/0x210 [ 986.264303] should_fail.cold+0xa/0x1b [ 986.268670] ? fault_create_debugfs_attr+0x1e0/0x1e0 23:37:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) socket$inet6(0xa, 0x5, 0xff) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617738020000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 986.274054] ? save_stack+0xa9/0xd0 [ 986.278143] ? __es_tree_search.isra.0+0x1bf/0x230 [ 986.283091] ? save_stack+0x45/0xd0 [ 986.286753] __should_failslab+0x121/0x190 [ 986.291020] should_failslab+0x9/0x14 [ 986.294953] kmem_cache_alloc+0x47/0x700 [ 986.299057] ? ext4_es_scan+0x730/0x730 [ 986.303065] __es_insert_extent+0x2cc/0xf20 [ 986.307420] ? do_raw_write_lock+0xbd/0x1e0 [ 986.311876] ext4_es_insert_extent+0x27e/0x640 [ 986.316495] ? ext4_es_find_delayed_extent_range+0xa30/0xa30 23:37:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 986.322531] ? rcu_read_lock_sched_held+0x110/0x130 [ 986.327575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 986.333144] ? ext4_es_find_delayed_extent_range+0x387/0xa30 [ 986.339066] ext4_ext_put_gap_in_cache+0xf7/0x150 [ 986.343938] ? ext4_zeroout_es+0x180/0x180 [ 986.348203] ? ext4_find_extent+0x76e/0x9d0 [ 986.352816] ? ext4_find_extent+0x6a6/0x9d0 [ 986.357251] ext4_ext_map_blocks+0x204c/0x55c0 [ 986.361870] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 986.367902] ? __lock_is_held+0xb6/0x140 [ 986.372594] ? lock_acquire+0x16f/0x3f0 [ 986.377041] ? ext4_map_blocks+0x4cf/0x1b20 [ 986.382447] ext4_map_blocks+0xf83/0x1b20 [ 986.386635] ? ext4_issue_zeroout+0x170/0x170 [ 986.391176] ? kasan_check_write+0x14/0x20 [ 986.395440] ? __brelse+0x95/0xb0 [ 986.399048] ext4_getblk+0xc4/0x510 [ 986.402881] ? ext4_iomap_begin+0xf70/0xf70 [ 986.407322] ? ext4_free_inode+0x1470/0x1470 [ 986.412281] ext4_bread+0x8f/0x230 [ 986.415891] ? ext4_getblk+0x510/0x510 [ 986.420160] ext4_append+0x155/0x370 [ 986.424085] ext4_mkdir+0x61b/0xdf0 [ 986.428820] ? ext4_init_dot_dotdot+0x520/0x520 [ 986.433546] ? selinux_inode_mkdir+0x23/0x30 [ 986.437985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 986.443844] ? security_inode_mkdir+0xe4/0x120 [ 986.450198] vfs_mkdir+0x42e/0x690 [ 986.453767] do_mkdirat+0x234/0x2a0 [ 986.457639] ? __ia32_sys_mknod+0xb0/0xb0 [ 986.461804] ? trace_hardirqs_on_thunk+0x1a/0x1c 23:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261776c020000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 986.474051] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.479440] ? do_syscall_64+0x26/0x620 [ 986.483443] ? lockdep_hardirqs_on+0x415/0x5d0 [ 986.488054] __x64_sys_mkdir+0x5c/0x80 [ 986.491974] do_syscall_64+0xfd/0x620 [ 986.496250] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 986.501541] RIP: 0033:0x45a767 [ 986.504757] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 986.523936] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 986.531673] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 986.539228] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 986.554789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 986.562088] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 23:37:16 executing program 1: getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0xfffff489, @loopback, 0x6}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 986.569380] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000001e 23:37:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x35dd36ca}, 0x8) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) sendto(r5, &(0x7f0000000280)="5324842d81e135e3bf8f4ecb37971a59ebcbc1d573e0dce5288463a2a66b130392ce7cb9ecd2307bbf448288d6515564fc3045e78334acc8359e37e3dbe461b823e8ded09f1e90a49a0e3d2cb9214244fcd98db82fa5e8bc02d3c77524bd531c64cdb94c74e8651fa5e2452715593ea15095bba523c6011ff0ac514f37ecdbc74c087e3a8ced7856a75eb8a545d36406b300050b181e3c07d4219989a6f20c98d6bf468ace9bcd1b3fc6122753d4273dcf359cc9954d8142587a5a26436b72f2d9998e58c929", 0xc6, 0x0, &(0x7f00000003c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 986.617468] tmpfs: Bad value 'local:' for mount option 'mpol' 23:37:16 executing program 5 (fault-call:0 fault-nth:31): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffe) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) fcntl$getflags(r5, 0x401) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r8, r8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r9) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) fcntl$lock(r9, 0x24, &(0x7f0000000280)={0x0, 0x2, 0x3, 0x9, r10}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/71, 0xfffffffffffffff8}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x6, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000180)={'ipvs\x00'}, &(0x7f0000000200)=0x1e) ioctl$TIOCGPTLCK(r11, 0x80045439, &(0x7f00000000c0)) 23:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177b0020000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 986.786394] input: syz1 as /devices/virtual/input/input552 [ 986.797460] kauditd_printk_skb: 4 callbacks suppressed [ 986.797483] audit: type=1800 audit(1579822636.681:460): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17295 res=0 23:37:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177f8020000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:16 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000019) [ 986.954507] FAULT_INJECTION: forcing a failure. [ 986.954507] name failslab, interval 1, probability 0, space 0, times 0 [ 986.987644] CPU: 1 PID: 18528 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 986.995497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.006179] Call Trace: [ 987.008792] dump_stack+0x197/0x210 [ 987.012622] should_fail.cold+0xa/0x1b [ 987.016540] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 987.021854] __should_failslab+0x121/0x190 [ 987.026583] should_failslab+0x9/0x14 [ 987.030404] kmem_cache_alloc+0x2ae/0x700 [ 987.034592] ? rcu_read_lock_sched_held+0x110/0x130 [ 987.039820] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.045393] ? __mark_inode_dirty+0x241/0x1280 [ 987.050011] ext4_mb_new_blocks+0x5a0/0x3dd0 [ 987.054460] ? ext4_find_extent+0x76e/0x9d0 [ 987.058997] ext4_ext_map_blocks+0x2b26/0x55c0 [ 987.065709] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 987.070767] ? __lock_is_held+0xb6/0x140 [ 987.074886] ext4_map_blocks+0x990/0x1b20 [ 987.079075] ? ext4_issue_zeroout+0x170/0x170 [ 987.084403] ? kasan_check_write+0x14/0x20 [ 987.088758] ? __brelse+0x95/0xb0 [ 987.092251] ext4_getblk+0xc4/0x510 [ 987.095908] ? ext4_iomap_begin+0xf70/0xf70 [ 987.100265] ? ext4_free_inode+0x1470/0x1470 [ 987.104821] ext4_bread+0x8f/0x230 [ 987.109167] ? ext4_getblk+0x510/0x510 [ 987.113106] ext4_append+0x155/0x370 [ 987.118613] ext4_mkdir+0x61b/0xdf0 [ 987.122364] ? ext4_init_dot_dotdot+0x520/0x520 [ 987.127065] ? selinux_inode_mkdir+0x23/0x30 [ 987.131597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.138907] ? security_inode_mkdir+0xe4/0x120 [ 987.143710] vfs_mkdir+0x42e/0x690 [ 987.147890] do_mkdirat+0x234/0x2a0 [ 987.152415] ? __ia32_sys_mknod+0xb0/0xb0 [ 987.156875] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 987.161664] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.167241] ? do_syscall_64+0x26/0x620 [ 987.171261] ? lockdep_hardirqs_on+0x415/0x5d0 [ 987.177102] __x64_sys_mkdir+0x5c/0x80 [ 987.181034] do_syscall_64+0xfd/0x620 [ 987.184995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.190507] RIP: 0033:0x45a767 [ 987.193984] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.213527] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 987.221571] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 987.229318] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 987.237997] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 987.245642] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 23:37:16 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x1, 0x80000001, 0x9}}, 0x28) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000080)=""/92, &(0x7f00000001c0)=0x5c) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:16 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r3) keyctl$setperm(0x5, r3, 0x10) r4 = add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r4, 0x32, 0xe9}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'blake2s-256-generic\x00'}}, &(0x7f0000000280)="9aa63c96437c6586ebc441d66974fdaa75816de5eba497b2273884f05eb356637a50d6ea1fd9d862383f45144619d728ec1a", &(0x7f00000002c0)=""/233) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}, 0x1, 0x0, 0x0, 0x4048000}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177fa020000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 987.252939] R13: 0000000000000b82 R14: 00000000004cc665 R15: 000000000000001f 23:37:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:17 executing program 5 (fault-call:0 fault-nth:32): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 987.420142] audit: type=1800 audit(1579822637.301:461): pid=18756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17521 res=0 23:37:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./bus\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 23:37:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00001a) [ 987.489370] FAULT_INJECTION: forcing a failure. [ 987.489370] name failslab, interval 1, probability 0, space 0, times 0 [ 987.501714] CPU: 1 PID: 18787 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 987.509531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 987.521194] Call Trace: [ 987.524554] dump_stack+0x197/0x210 [ 987.528256] should_fail.cold+0xa/0x1b [ 987.532228] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 987.538288] ? save_stack+0xa9/0xd0 [ 987.541985] ? __es_tree_search.isra.0+0x1bf/0x230 [ 987.546941] ? save_stack+0x45/0xd0 [ 987.552080] __should_failslab+0x121/0x190 [ 987.556791] should_failslab+0x9/0x14 [ 987.561311] kmem_cache_alloc+0x47/0x700 [ 987.565867] ? ext4_es_scan+0x730/0x730 [ 987.569879] __es_insert_extent+0x2cc/0xf20 [ 987.574348] ? do_raw_write_lock+0xbd/0x1e0 [ 987.578798] ext4_es_insert_extent+0x27e/0x640 [ 987.593668] ? ext4_es_find_delayed_extent_range+0xa30/0xa30 [ 987.599505] ? rcu_read_lock_sched_held+0x110/0x130 [ 987.613845] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 987.619421] ? ext4_es_find_delayed_extent_range+0x387/0xa30 [ 987.633620] ext4_ext_put_gap_in_cache+0xf7/0x150 [ 987.638500] ? ext4_zeroout_es+0x180/0x180 [ 987.642776] ? ext4_find_extent+0x76e/0x9d0 [ 987.647133] ? ext4_find_extent+0x6a6/0x9d0 [ 987.651494] ext4_ext_map_blocks+0x204c/0x55c0 [ 987.656140] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 987.661187] ? __lock_is_held+0xb6/0x140 [ 987.665286] ? lock_acquire+0x16f/0x3f0 [ 987.669285] ? ext4_map_blocks+0x4cf/0x1b20 [ 987.673664] ext4_map_blocks+0xf83/0x1b20 [ 987.679409] ? ext4_issue_zeroout+0x170/0x170 [ 987.683936] ? kasan_check_write+0x14/0x20 [ 987.688472] ? __brelse+0x95/0xb0 [ 987.691961] ext4_getblk+0xc4/0x510 [ 987.695792] ? ext4_iomap_begin+0xf70/0xf70 [ 987.700140] ? ext4_free_inode+0x1470/0x1470 [ 987.705644] ext4_bread+0x8f/0x230 [ 987.708528] audit: type=1800 audit(1579822637.391:462): pid=18791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17409 res=0 [ 987.709727] ? ext4_getblk+0x510/0x510 [ 987.736595] ext4_append+0x155/0x370 [ 987.740360] ext4_mkdir+0x61b/0xdf0 [ 987.744014] ? ext4_init_dot_dotdot+0x520/0x520 [ 987.748711] ? selinux_inode_mkdir+0x23/0x30 [ 987.753219] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 987.758870] ? security_inode_mkdir+0xe4/0x120 [ 987.763481] vfs_mkdir+0x42e/0x690 [ 987.767055] do_mkdirat+0x234/0x2a0 [ 987.772699] ? __ia32_sys_mknod+0xb0/0xb0 [ 987.776872] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 987.781828] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.787939] ? do_syscall_64+0x26/0x620 23:37:17 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000080)={{}, 'syz1\x00', 0x4}) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f00000000c0)='-.selfbdevcpusetwlan0\x00', 0x0) dup2(r0, r9) sync_file_range(r2, 0xffffffffa331c5ad, 0x7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/117, 0x75}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x10000000000000c6}, 0x161) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0x2, &(0x7f00000005c0)=0x1d, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r11 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r11, 0x0, 0x80001d00c0d0) [ 987.791939] ? lockdep_hardirqs_on+0x415/0x5d0 [ 987.796547] __x64_sys_mkdir+0x5c/0x80 [ 987.800477] do_syscall_64+0xfd/0x620 [ 987.804353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 987.809562] RIP: 0033:0x45a767 [ 987.812773] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 987.831795] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 23:37:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x24008009, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @rand_addr="01c0127f201fa8a6fb13f05fd8270294"}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0800253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 987.836346] input: syz1 as /devices/virtual/input/input553 [ 987.839776] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 987.839785] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 987.839793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 987.839801] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 987.839811] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000020 [ 987.841985] tmpfs: Bad value 'local:' for mount option 'mpol' [ 987.900484] input: syz1 as /devices/virtual/input/input554 23:37:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617730030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:17 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00001b) [ 987.978602] audit: type=1800 audit(1579822637.871:463): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17426 res=0 23:37:18 executing program 5 (fault-call:0 fault-nth:33): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000003d00)={'vxcan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="eba7000094f9000000000800000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xf413}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) 23:37:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617733030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r2) ftruncate(r3, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 23:37:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617754030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 988.239736] FAULT_INJECTION: forcing a failure. [ 988.239736] name failslab, interval 1, probability 0, space 0, times 0 23:37:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) setsockopt$rose(r1, 0x104, 0x2, &(0x7f00000000c0)=0x7ff, 0x4) r2 = dup(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x4a0302, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003d00)={'vxcan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000075c0)={0x1c, r5, 0xb631c6b8429a7eb, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2dd}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xe2400000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r2, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r8 = open(&(0x7f0000000440)='./file0\x00', 0x1100001490c2, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r8, 0x10001) sendfile(r0, r8, 0x0, 0x88000fc000000) [ 988.307663] CPU: 1 PID: 19048 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 988.315630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 988.327270] Call Trace: [ 988.329886] dump_stack+0x197/0x210 [ 988.333721] should_fail.cold+0xa/0x1b [ 988.337643] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 988.343389] ? ext4_es_find_delayed_extent_range+0xa30/0xa30 [ 988.349914] __should_failslab+0x121/0x190 [ 988.354416] should_failslab+0x9/0x14 [ 988.358245] __kmalloc+0x2e2/0x750 [ 988.361815] ? ext4_find_extent+0x76e/0x9d0 [ 988.366836] ext4_find_extent+0x76e/0x9d0 [ 988.371030] ext4_ext_map_blocks+0x1c3/0x55c0 [ 988.376793] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 988.381842] ? __lock_is_held+0xb6/0x140 [ 988.386737] ? lock_acquire+0x16f/0x3f0 [ 988.391272] ? ext4_map_blocks+0x928/0x1b20 [ 988.396250] ext4_map_blocks+0x990/0x1b20 [ 988.400462] ? ext4_issue_zeroout+0x170/0x170 [ 988.405005] ? kasan_check_write+0x14/0x20 [ 988.409269] ? __brelse+0x95/0xb0 [ 988.413405] ext4_getblk+0xc4/0x510 [ 988.418558] ? ext4_iomap_begin+0xf70/0xf70 [ 988.423812] ? ext4_free_inode+0x1470/0x1470 [ 988.429114] ext4_bread+0x8f/0x230 [ 988.432704] ? ext4_getblk+0x510/0x510 [ 988.437249] ext4_append+0x155/0x370 [ 988.441864] ext4_mkdir+0x61b/0xdf0 [ 988.446490] ? ext4_init_dot_dotdot+0x520/0x520 [ 988.451194] ? selinux_inode_mkdir+0x23/0x30 [ 988.456808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 988.462985] ? security_inode_mkdir+0xe4/0x120 [ 988.467958] vfs_mkdir+0x42e/0x690 [ 988.471535] do_mkdirat+0x234/0x2a0 [ 988.475196] ? __ia32_sys_mknod+0xb0/0xb0 [ 988.479373] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 988.484902] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.491077] ? do_syscall_64+0x26/0x620 [ 988.495113] ? lockdep_hardirqs_on+0x415/0x5d0 [ 988.499723] __x64_sys_mkdir+0x5c/0x80 [ 988.503644] do_syscall_64+0xfd/0x620 [ 988.508629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 988.516196] RIP: 0033:0x45a767 [ 988.519452] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 988.541331] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 988.549090] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 988.556651] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 988.565276] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 988.572579] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 988.580076] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000021 23:37:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617788030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00001c) 23:37:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x104) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8087f000000000000000000000000000000000400000003000000c80200005801000000003000e0a95084ea100d923cc6a0d8eb00"/83], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0xffffffff00000000, 0x3, &(0x7f0000000840)=[{&(0x7f00000005c0)="c173e544d5668a068c2ac04c254f6186293e2e8906f9fe9c1b3aa5af4296c3b374627607312ed4945fec13e1af696b8524a3a92abec87b8e6c0af977ea95ba3fb9a881309e3c63994604e84d9e18921fcc51db11b708a515b5d48a9853da767264b948420634a47f0a03fc500326590089422cf9130870a17d897a3232123e48994ae1a9a86d41d2879a42a0e5515fc3e2918e1c08eba00dbd6b32cadb4567f44c8f71563cac3f5e7f71249a84c3384405d12be958055e691673275aa6f521322be77bb5ab1ae2b3ae5d566d7a05044b9f800fe13b6c854b6fc1c989b834ec952fd767c685a4e1d4a2d5d7efaebd4e138d7fbea66c3a463080fc9493", 0xfc, 0x3}, {&(0x7f00000006c0)="785c5a8cf2105bb630930547a23765a14479cd186240fa54af7f71cf6bddf78ea5ffedeeee3f432dfef75a5ae41177c77456420154c19839728ba3c955ded0a89589706d834fa6b61a1168a2b22f35dd3dc3ac6f80b9c83a38f27f269785195b586486256a0a07509157ad9bb7dacc2d97ce08ec914a1b439c82a9bf877491739c4006be5918ccbe00c064f696055a1a9911f591a846689fc51eb7044f4ea09b6c77ce4b55fb02304573544adea818fc5dd1", 0xb2, 0x8001}, {&(0x7f0000000780)="68ba997c2c02435094b5d3c23cbd4ec308133ab374f1f7c8c5be2355802353f8b8020021992e13d0e15fe2b723bdcf42ecc1b7dded24017552adce6aaf409cc8bd42a1fed844d14551e88d1f718a05a92c0608d1c70271ddd57660bb055caad0ee36ffb151ae1b43fabcd18550d43bdc548e54ebbd970191f32f762294b56926d3430fb87740f902ca8d87c8d9424ac05216c0baeb3085ebb2870c70da1920b76463261579b3a34eb2fcab7a155f8753064fd6b4a26152", 0xb7, 0x7}], 0x22, &(0x7f00000039c0)={[{@filestreams='filestreams'}, {@gqnoenforce='gqnoenforce'}, {@norecovery='norecovery'}, {@logbufs={'logbufs', 0x3d, 0x2}}, {@mtpt='mtpt'}, {@biosize={'biosize', 0x3d, 0x2}}, {@logbsize={'logbsize', 0x3d, [0x25, 0x36, 0x6d, 0x2d]}}, {@rtdev={'rtdev', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role'}}, {@smackfsdef={'smackfsdef', 0x3d, '!'}}]}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) r7 = fcntl$getown(r6, 0x9) fcntl$setown(r5, 0x8, r7) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r9, r9) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x8, &(0x7f0000000380)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x7}}, {@common=@access_client='access=client'}], [{@measure='measure'}, {@dont_measure='dont_measure'}, {@smackfsdef={'smackfsdef', 0x3d, '^-)cpusetppp1vboxnet0'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'xfs\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r8}}, {@dont_appraise='dont_appraise'}, {@uid_eq={'uid', 0x3d, r10}}, {@seclabel='seclabel'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'norecovery'}}]}}) socket(0x0, 0x0, 0x0) [ 988.614373] audit: type=1800 audit(1579822638.201:464): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17553 res=0 23:37:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177a0030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 988.738082] audit: type=1800 audit(1579822638.201:465): pid=19123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17329 res=0 23:37:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) [ 988.779069] xt_check_match: 26 callbacks suppressed [ 988.779079] x_tables: ip_tables: ah match: only valid for protocol 51 [ 988.836757] audit: type=1800 audit(1579822638.711:466): pid=19238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17377 res=0 [ 988.861040] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:18 executing program 5 (fault-call:0 fault-nth:34): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:18 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x82400, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/54) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @local}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 23:37:18 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000080)) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177a8030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000100)={0x3, 0x0, 0x6d96, 0x84000, r6}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) socketpair(0x6b, 0x6, 0x5, &(0x7f00000002c0)={0xffffffffffffffff}) r9 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x0) close(r9) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r10, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x1, 0x1, "13a0f57c58150366aec124145c29a9e90987cda6012237eb1e83699ccb053a75af7cca9b223d1b37f79645eed62ef204c0a7e455dc1a8ebbe571b1e49f1182b861354610007a882c031380403a878a7f57ed50207625c213f59e8bde7e2744b05e29cc3cca4226cbefbc323a2d8a5183bd9e8cc319eb0e41299958105f1dfc3ebbaad18a5d9b54ae46cb3abb0f5dc4a9da086f572396b79abf279a50386f17fa2cc3d5a36aad11802d3b7ab555f85f6b8b62c4f65480de29eed506eb59f50233d9d740f583835d92eb093ec92a7c5230ca82ef98f021a72b8babe88d908b81ea5a00c29075387b80218f025705a615c2cff3f5e4e2666e742915894aa691b2f1", 0x2, 0x6, 0x7, 0x5, 0x0, 0x1}, r13}}, 0x120) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup2(r15, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r18, r18) r19 = dup2(r17, r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = socket$inet6_tcp(0xa, 0x1, 0x0) r21 = dup2(r20, r20) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) r22 = socket$inet6_tcp(0xa, 0x1, 0x0) r23 = dup2(r22, r22) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r23, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r24 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x640800, 0x0) ioctl$TCSETSW(r24, 0x5403, &(0x7f0000000040)={0x8, 0xd4, 0x10000, 0x1, 0x7, "fb66ace7bc65d87ce5035a0e54ab1c17bc97dc"}) socket(0x0, 0x0, 0x0) 23:37:18 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00001d) [ 988.995850] audit: type=1800 audit(1579822638.881:467): pid=19450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17665 res=0 [ 989.088854] x_tables: ip_tables: ah match: only valid for protocol 51 [ 989.122472] FAULT_INJECTION: forcing a failure. [ 989.122472] name failslab, interval 1, probability 0, space 0, times 0 [ 989.136525] CPU: 0 PID: 19463 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 989.145822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.155202] Call Trace: [ 989.157820] dump_stack+0x197/0x210 [ 989.161478] should_fail.cold+0xa/0x1b [ 989.168529] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 989.173955] __should_failslab+0x121/0x190 [ 989.178237] should_failslab+0x9/0x14 [ 989.183022] kmem_cache_alloc+0x2ae/0x700 [ 989.187202] ? rcu_read_lock_sched_held+0x110/0x130 [ 989.192277] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 989.204019] ? __mark_inode_dirty+0x241/0x1280 [ 989.208640] ext4_mb_new_blocks+0x5a0/0x3dd0 [ 989.213121] ? ext4_find_extent+0x76e/0x9d0 [ 989.222529] ext4_ext_map_blocks+0x2b26/0x55c0 [ 989.227281] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 989.232585] ? __lock_is_held+0xb6/0x140 [ 989.236701] ext4_map_blocks+0x990/0x1b20 [ 989.240985] ? ext4_issue_zeroout+0x170/0x170 [ 989.245533] ? kasan_check_write+0x14/0x20 [ 989.249809] ? __brelse+0x95/0xb0 [ 989.253290] ext4_getblk+0xc4/0x510 [ 989.256934] ? ext4_iomap_begin+0xf70/0xf70 [ 989.261275] ? ext4_free_inode+0x1470/0x1470 [ 989.268480] ext4_bread+0x8f/0x230 [ 989.272047] ? ext4_getblk+0x510/0x510 [ 989.275985] ext4_append+0x155/0x370 [ 989.279735] ext4_mkdir+0x61b/0xdf0 [ 989.283441] ? ext4_init_dot_dotdot+0x520/0x520 [ 989.289981] ? selinux_inode_mkdir+0x23/0x30 [ 989.294505] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.300074] ? security_inode_mkdir+0xe4/0x120 [ 989.305319] vfs_mkdir+0x42e/0x690 [ 989.308903] do_mkdirat+0x234/0x2a0 [ 989.312558] ? __ia32_sys_mknod+0xb0/0xb0 [ 989.317605] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 989.323279] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.328669] ? do_syscall_64+0x26/0x620 [ 989.332935] ? lockdep_hardirqs_on+0x415/0x5d0 [ 989.338786] __x64_sys_mkdir+0x5c/0x80 [ 989.342735] do_syscall_64+0xfd/0x620 [ 989.347140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.353064] RIP: 0033:0x45a767 [ 989.356735] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.377678] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 23:37:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x5) write$P9_RREADDIR(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b947b043d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4661ef82acd665a6df1e43e7db708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x101, 0x3, 0x4, 0x20, 0x29d8, {}, {0x2, 0x2, 0x7, 0xb, 0x1f, 0x7f, "6b8a5259"}, 0x632, 0x3, @planes=&(0x7f0000000000)={0xde, 0x800, @userptr=0x20, 0x9f}, 0x3ff, 0x0, r0}) name_to_handle_at(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x8d, 0x9, "8d6a06bfbf019c184a46817b975b61d8879a44ca8c62ce53a7a6c7559983fc6e5711a9cdd0de3973aa5b89c6f9f3144031416259b21b501947f5b49f3a67858ad01892b4d69abf3553caf58e8945576c33a51db8e7aa9b53d13c01e313995bb7ab897a0e88a8c949c831221b6469d1d05082a61522bbe6ae53752374bc2fcde62f3d3376dd"}, &(0x7f0000000100), 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 989.386804] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 989.394393] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 989.397781] audit: type=1800 audit(1579822639.251:468): pid=19467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17260 res=0 [ 989.401677] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a 23:37:19 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc00001e) 23:37:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000080)) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000a, 0x80012, r5, 0x0) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 989.436415] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 989.443847] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000022 [ 989.465778] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177ac030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:19 executing program 5 (fault-call:0 fault-nth:35): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000000)) r5 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r5, 0x7005) r6 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c800002b000000000000000000000000000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030000000000000000000000000b8db00004d0358a301d2650b95759f1fa089ca190914bd21b5549d3ba7d82e202f05a1288aa3bc96d38f33724aee3270d9c188bfb367dd50c16bb2b728df4cf4916e64d748d4af171688c64ef2284db7c4caf53744f20798d17896088d5fdebadd45c130544497526d83140da3776906576837f4a656dd22912b7cf449aa46a39e77b6c02de9fe1cf500"/237], 0x1) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r8, 0x40045569, 0x4) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000180080040000000000080000000000000000400000000000000e02199182e8f391ce88d34c25ad99b037d07a885411534cebfcfab819309a4294b2107fc28a62d6f4e135573cf054801bf4bfd168459fce38568e93ce3567aecf8ff30672aecbb1853c447823328000000000000"]) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 989.663931] x_tables: ip_tables: ah match: only valid for protocol 51 [ 989.683497] FAULT_INJECTION: forcing a failure. [ 989.683497] name failslab, interval 1, probability 0, space 0, times 0 [ 989.700018] x_tables: ip_tables: ah match: only valid for protocol 51 [ 989.738579] CPU: 0 PID: 19692 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 989.756560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 989.767881] Call Trace: [ 989.770503] dump_stack+0x197/0x210 [ 989.774179] should_fail.cold+0xa/0x1b [ 989.778146] ? fault_create_debugfs_attr+0x1e0/0x1e0 23:37:19 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) sendto$inet6(r2, 0x0, 0x0, 0x24000008, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x800}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1e00313195eefb8ac366ca799e00005838891126b18ce96b770ecee2341a25aa119812cd255b3667e80939f93d5b94cf2c3d4cbfc47a79d63fe37b204077b66a0f971ea265f8329836d965eebd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd63999f44ef79a62d000000"], 0x80) ftruncate(r3, 0x10001) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r5, 0x4038564f, &(0x7f00000000c0)={{0x0, @name="0d9b388ee6be96a5e82bb7cfc283ed6c61728ec78c372cb3ab4f5508f5ee328d"}, 0x8, 0x8, 0x83b}) sendfile(r0, r3, 0x0, 0x88000fc000000) [ 989.784766] ? ext4_es_find_delayed_extent_range+0xa30/0xa30 [ 989.790613] __should_failslab+0x121/0x190 [ 989.796130] should_failslab+0x9/0x14 [ 989.800055] __kmalloc+0x2e2/0x750 [ 989.804353] ? ext4_find_extent+0x76e/0x9d0 [ 989.808734] ext4_find_extent+0x76e/0x9d0 [ 989.813705] ext4_ext_map_blocks+0x1c3/0x55c0 [ 989.818333] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 989.823588] ? __lock_is_held+0xb6/0x140 [ 989.828933] ? lock_acquire+0x16f/0x3f0 [ 989.833116] ? ext4_map_blocks+0x928/0x1b20 [ 989.837587] ext4_map_blocks+0x990/0x1b20 [ 989.841785] ? ext4_issue_zeroout+0x170/0x170 [ 989.846320] ? kasan_check_write+0x14/0x20 [ 989.851157] ? __brelse+0x95/0xb0 [ 989.854749] ext4_getblk+0xc4/0x510 [ 989.858993] ? ext4_iomap_begin+0xf70/0xf70 [ 989.863349] ? ext4_free_inode+0x1470/0x1470 [ 989.868230] ext4_bread+0x8f/0x230 [ 989.871808] ? ext4_getblk+0x510/0x510 [ 989.875966] ext4_append+0x155/0x370 [ 989.880664] ext4_mkdir+0x61b/0xdf0 [ 989.884427] ? ext4_init_dot_dotdot+0x520/0x520 [ 989.889398] ? selinux_inode_mkdir+0x23/0x30 [ 989.893909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 989.899640] ? security_inode_mkdir+0xe4/0x120 [ 989.905155] vfs_mkdir+0x42e/0x690 [ 989.909586] do_mkdirat+0x234/0x2a0 [ 989.913220] ? __ia32_sys_mknod+0xb0/0xb0 [ 989.917367] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 989.922332] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.928336] ? do_syscall_64+0x26/0x620 [ 989.932323] ? lockdep_hardirqs_on+0x415/0x5d0 [ 989.938823] __x64_sys_mkdir+0x5c/0x80 [ 989.942831] do_syscall_64+0xfd/0x620 [ 989.947912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 989.954333] RIP: 0033:0x45a767 [ 989.957527] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c2 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 989.979601] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 23:37:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177b8030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 989.987609] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045a767 [ 989.995163] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 990.002828] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 990.010203] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000003 [ 990.018180] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000023 [ 990.127194] audit: type=1800 audit(1579822640.011:469): pid=19698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17298 res=0 [ 990.134959] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000021) 23:37:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8001000000000000000000000000003000000c802000058010000b1808e212abc00000000580100000000000000000000300200003002000030020000300200003000"/93], 0x1) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 990.240762] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177d0030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:20 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x7) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000240)='/dev/dlm_plock\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x4}}, r3, 0x4, 0xffffffffffffffff, 0x8) r4 = socket(0x1f, 0x800, 0x9a) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000100)={r7, 0x7}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$TIOCGISO7816(r9, 0x80285442, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f00000000c0)) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x90100, 0x0) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f0000000300)={0xffffff7c, 0x5, 0x4, 0x40020000, 0xfff, {}, {0x1, 0x8, 0xff, 0x4, 0x8, 0x8, "6301b567"}, 0x7c, 0x1, @offset=0x5, 0x8, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGABS3F(r11, 0x8018457f, &(0x7f0000000280)=""/127) setsockopt$inet_int(r11, 0x0, 0x21, &(0x7f00000003c0)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r12, 0x200004) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x60000, 0x0) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r13, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r14, 0x0, 0x8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={r14, 0x2f500000, 0x18}, 0xc) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r15, r15) sendfile(r15, r12, 0x0, 0x80001d00c0d0) 23:37:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="726177000000000000008dd58236a5c8000000000000000000000000000000000000000000000200000003000000c802000058010000000000005801000000000000000000003002000030020000300200003002000030"], 0x1) socket$packet(0x11, 0x0, 0x300) prctl$PR_GET_KEEPCAPS(0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 990.472655] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:20 executing program 5 (fault-call:0 fault-nth:36): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 990.548945] x_tables: ip_tables: ah match: only valid for protocol 51 23:37:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0xc}, 0x1, 0x21, &(0x7f0000000280)="395e21052cff693baa910b1d369c65f6105b3adfbebafbce7b9be164816399b9736f6ce0371e61bf59664061426b73f675bde93c8a05886f0d17434c372ec5d36c6b64b9c7cc7fc6227f024f91d9900c78ced2bf12c116974906da55e1d4243cefebba9ed7048ef4e313d86e946cac00faa88e30fee3d2b1de4397c808b8f5e5a23813d2678041780b599cac5aedfaacb1690cf788b534d3d6c16f2935ed6794acf48bcbd442a6fc32755a0a09b0edea35", 0xb1, 0x7fff, 0x1, 0x1, 0x8, 0x6, &(0x7f0000000080)="58bb2ebeb64047b1f307a82eac0aeb762c9d873e9854169fccde084fbf9cee45a85ad7d166f98b25ac776c2a86f8e812d41585d8a3645fc571123c2417083f1e2e6b"}) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) 23:37:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177da030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:20 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000022) 23:37:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffffffffff88, 0x0, &(0x7f0000000040)={0x1, 0x7, [0xa0c, 0x333, 0x6ba, 0xa61]}) r1 = getpid() ptrace(0xffffffffffffffff, r1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x200000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xffffffff, [], @string=&(0x7f00000001c0)=0x5}}) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000040)=[{}, {}]) r3 = getpid() ptrace(0xffffffffffffffff, r3) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1f, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={r10, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r11 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r11, 0x10001) sendfile(r0, r11, 0x0, 0x88000fc000000) 23:37:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177e4030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:20 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000080)={'bond0\x00', 0x2179}) r3 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r3, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce9e93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r4, 0x10001) sendfile(r0, r4, 0x0, 0x88000fc000000) [ 990.799820] FAULT_INJECTION: forcing a failure. [ 990.799820] name failslab, interval 1, probability 0, space 0, times 0 23:37:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177e6030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:20 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffffffffff88, 0x0, &(0x7f0000000040)={0x1, 0x7, [0xa0c, 0x333, 0x6ba, 0xa61]}) r1 = getpid() ptrace(0xffffffffffffffff, r1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x200000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xffffffff, [], @string=&(0x7f00000001c0)=0x5}}) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000040)=[{}, {}]) r3 = getpid() ptrace(0xffffffffffffffff, r3) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1f, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={r10, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r11 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r11, 0x10001) sendfile(r0, r11, 0x0, 0x88000fc000000) [ 991.057607] CPU: 1 PID: 19969 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 991.065501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 991.075227] Call Trace: [ 991.077847] dump_stack+0x197/0x210 [ 991.081597] should_fail.cold+0xa/0x1b [ 991.086368] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 991.092230] ? lock_downgrade+0x880/0x880 [ 991.096778] __should_failslab+0x121/0x190 [ 991.101739] should_failslab+0x9/0x14 [ 991.105575] __kmalloc_track_caller+0x2de/0x750 [ 991.110970] ? mntput+0x74/0xa0 [ 991.114389] ? strndup_user+0x77/0xd0 [ 991.118308] memdup_user+0x26/0xb0 [ 991.121880] strndup_user+0x77/0xd0 [ 991.125540] ksys_mount+0x3c/0x150 [ 991.129116] __x64_sys_mount+0xbe/0x150 [ 991.133220] do_syscall_64+0xfd/0x620 [ 991.137796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 991.143144] RIP: 0033:0x45dd9a [ 991.146624] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 991.167005] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 991.174738] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045dd9a [ 991.182031] RDX: 00007f9c56ebeae0 RSI: 00000000200000c0 RDI: 00007f9c56ebeb00 [ 991.189325] RBP: 000000000075bf20 R08: 00007f9c56ebeb40 R09: 00007f9c56ebeae0 [ 991.196616] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 23:37:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000023) [ 991.203908] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000024 23:37:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:21 executing program 5 (fault-call:0 fault-nth:37): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177e8030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000080)=0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r3 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836050000004285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r3, 0x10001) sendfile(r0, r3, 0x0, 0x88000fc000000) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) 23:37:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x7fff, 0x80000000}, &(0x7f00000000c0)=0x10) r6 = socket(0x27, 0x800, 0x9a) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r9}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000100)={r9, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, 0xc) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r10, 0x0, 0x80001d00c0d0) 23:37:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffffffffff88, 0x0, &(0x7f0000000040)={0x1, 0x7, [0xa0c, 0x333, 0x6ba, 0xa61]}) r1 = getpid() ptrace(0xffffffffffffffff, r1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x200000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xffffffff, [], @string=&(0x7f00000001c0)=0x5}}) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000040)=[{}, {}]) r3 = getpid() ptrace(0xffffffffffffffff, r3) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1f, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={r10, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r11 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r11, 0x10001) sendfile(r0, r11, 0x0, 0x88000fc000000) 23:37:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4315395eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfea0300d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:21 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000024) 23:37:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177ea030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:21 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xffffffffffffff88, 0x0, &(0x7f0000000040)={0x1, 0x7, [0xa0c, 0x333, 0x6ba, 0xa61]}) r1 = getpid() ptrace(0xffffffffffffffff, r1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x200000, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xffffffff, [], @string=&(0x7f00000001c0)=0x5}}) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000040)=[{}, {}]) r3 = getpid() ptrace(0xffffffffffffffff, r3) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r4, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1f, 0x800, 0x9a) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f00000000c0)={r10, 0x9}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r11 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r11, 0x10001) sendfile(r0, r11, 0x0, 0x88000fc000000) 23:37:21 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 23:37:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177ec030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:21 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x5}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r9 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f40ef79a62da4b708"], 0x80) ftruncate(r9, 0x10001) sendfile(r0, r9, 0x0, 0x88000fc000000) [ 991.919483] FAULT_INJECTION: forcing a failure. [ 991.919483] name failslab, interval 1, probability 0, space 0, times 0 [ 992.017941] CPU: 1 PID: 20597 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 992.025810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.035357] Call Trace: [ 992.038082] dump_stack+0x197/0x210 [ 992.041757] should_fail.cold+0xa/0x1b [ 992.045684] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.050836] ? lock_downgrade+0x880/0x880 [ 992.055027] __should_failslab+0x121/0x190 [ 992.059314] should_failslab+0x9/0x14 [ 992.063156] __kmalloc_track_caller+0x2de/0x750 [ 992.067859] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.073425] ? strndup_user+0x77/0xd0 [ 992.077267] memdup_user+0x26/0xb0 [ 992.080841] strndup_user+0x77/0xd0 [ 992.084687] ksys_mount+0x7b/0x150 [ 992.088345] __x64_sys_mount+0xbe/0x150 [ 992.092354] do_syscall_64+0xfd/0x620 [ 992.096189] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.101405] RIP: 0033:0x45dd9a [ 992.102652] kauditd_printk_skb: 3 callbacks suppressed [ 992.102666] audit: type=1800 audit(1579822641.911:473): pid=20601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17953 res=0 [ 992.104630] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 992.150957] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 992.158784] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045dd9a [ 992.166085] RDX: 00007f9c56ebeae0 RSI: 00000000200000c0 RDI: 00007f9c56ebeb00 [ 992.173373] RBP: 000000000075bf20 R08: 00007f9c56ebeb40 R09: 00007f9c56ebeae0 [ 992.180751] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 992.188064] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000025 23:37:22 executing program 5 (fault-call:0 fault-nth:38): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) 23:37:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177f4030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7, 0x400) sendmsg$nl_netfilter(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, 0x10, 0x6, 0x301, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic, @typed={0x8, 0x31, 0x0, 0x0, @fd=r1}, @nested={0xc, 0x42, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @fd=r4}]}, @typed={0x5, 0xa, 0x0, 0x0, @str='\x00'}, @generic="e899eacec8ef79683bdb569819e6296cd9f0c0a5d723592537113104b14976596173157e7aa9306924beeb1729dff592ea66172c2ae9ce7035696499986719a746b6441c29c9d33c3b278edfed71fee68710de57c6ca3fa798016faace2e464b40689d0533b2b6c6fae1fda96f3fca46d49108e09e20b131f5c1b8e5e9fe57d255a8cb24ee8ffc05f2e7a89fc2d912"]}, 0xc0}, 0x1, 0x0, 0x0, 0x40050}, 0x80) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0xa, &(0x7f0000000200)=[{}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r5, 0xc010641d, &(0x7f0000000140)={r6, &(0x7f00000000c0)=""/49}) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 23:37:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x4000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x800, &(0x7f0000000200)={0xa, 0x4e20, 0x2000800, @loopback, 0x10000007}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x800}}, 0x0, 0xa000}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={r4, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0xd}, 0x3ff}, @in6={0xa, 0x4e23, 0x1, @remote, 0x1000}, @in6={0xa, 0x4e23, 0x4d1, @ipv4={[], [], @rand_addr=0x7f}, 0x8ad}], 0x80) r5 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d20bee93a1aaf1d00735b3667aa0939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r5, 0x10001) sendfile(r0, r5, 0x0, 0x88000fc000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$rfkill(r7, &(0x7f0000000100)={0x0, 0x5, 0x2, 0x1}, 0x8) 23:37:22 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYPTR64], 0x1}}, 0x4c080) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x100) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="a5b4313195eefb8ac366ca799e00005838891126b18ce96b770ece1d25bee93a15af1d00735b3667e80939f93d5b94cf1d3d4cbfd63fe37b204077b66a0f978fde0cbfa265f8329836d965e6bd4285fea2d8be0adfeaf7f3d95ee5090a0416253e0000000056b77a1f97eeceecf886e865415585dd639a9f44ef79a62da4b708"], 0x80) ftruncate(r2, 0x10001) sendfile(r0, r2, 0x0, 0x88000fc000000) 23:37:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177f5030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 992.387106] audit: type=1800 audit(1579822642.271:474): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17302 res=0 23:37:22 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000025) 23:37:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/101, 0x65) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 992.471962] FAULT_INJECTION: forcing a failure. [ 992.471962] name failslab, interval 1, probability 0, space 0, times 0 [ 992.597649] CPU: 1 PID: 20818 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 992.606593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.616384] Call Trace: [ 992.619739] dump_stack+0x197/0x210 [ 992.623938] should_fail.cold+0xa/0x1b [ 992.628043] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.633368] ? lock_downgrade+0x880/0x880 [ 992.637782] __should_failslab+0x121/0x190 [ 992.642138] should_failslab+0x9/0x14 [ 992.646103] kmem_cache_alloc_trace+0x2cc/0x760 [ 992.651251] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.657300] ? _copy_from_user+0xdd/0x150 [ 992.661672] copy_mount_options+0x5c/0x3a0 [ 992.665953] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.671762] ksys_mount+0xa7/0x150 [ 992.675512] __x64_sys_mount+0xbe/0x150 [ 992.679565] do_syscall_64+0xfd/0x620 [ 992.683513] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 992.689076] RIP: 0033:0x45dd9a [ 992.692380] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 992.711962] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 992.719901] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045dd9a [ 992.727358] RDX: 00007f9c56ebeae0 RSI: 00000000200000c0 RDI: 00007f9c56ebeb00 [ 992.734734] RBP: 000000000075bf20 R08: 00007f9c56ebeb40 R09: 00007f9c56ebeae0 23:37:22 executing program 2 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0xff03}], 0x1}}], 0x4000070, 0x8000) [ 992.742503] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 992.750248] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000026 [ 992.809486] FAULT_INJECTION: forcing a failure. [ 992.809486] name failslab, interval 1, probability 0, space 0, times 0 [ 992.843840] CPU: 1 PID: 20827 Comm: syz-executor.2 Not tainted 4.19.98-syzkaller #0 [ 992.851876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 992.862035] Call Trace: [ 992.864670] dump_stack+0x197/0x210 [ 992.868684] should_fail.cold+0xa/0x1b [ 992.873019] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 992.878577] ? lock_downgrade+0x880/0x880 [ 992.882336] audit: type=1800 audit(1579822642.731:475): pid=20821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17969 res=0 [ 992.883028] __should_failslab+0x121/0x190 [ 992.883062] should_failslab+0x9/0x14 [ 992.883078] __kmalloc+0x2e2/0x750 [ 992.919355] ? __local_bh_enable_ip+0x15a/0x270 [ 992.924232] ? lock_sock_nested+0xe2/0x120 [ 992.928497] ? __local_bh_enable_ip+0x15a/0x270 [ 992.933282] ? lockdep_hardirqs_on+0x415/0x5d0 [ 992.937908] ? sock_kmalloc+0xc6/0x120 [ 992.941930] sock_kmalloc+0xc6/0x120 [ 992.945866] af_alg_alloc_tsgl+0x2db/0x3d0 [ 992.950147] af_alg_sendmsg+0x75b/0x11a7 [ 992.954338] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 992.959921] ? af_alg_async_cb+0x180/0x180 [ 992.964343] skcipher_sendmsg+0xba/0xf0 [ 992.968439] ? skcipher_setkey+0x50/0x50 [ 992.972528] sock_sendmsg+0xd7/0x130 [ 992.976550] ___sys_sendmsg+0x3e2/0x920 [ 992.980673] ? copy_msghdr_from_user+0x430/0x430 [ 992.986153] ? lock_downgrade+0x880/0x880 [ 992.990838] ? kasan_check_read+0x11/0x20 [ 992.995026] ? __fget+0x367/0x540 [ 992.998970] ? iterate_fd+0x360/0x360 [ 993.002800] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 993.008535] ? proc_fail_nth_write+0x9d/0x1e0 [ 993.013073] ? __fget_light+0x1a9/0x230 [ 993.017077] ? __fdget+0x1b/0x20 [ 993.020471] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 993.026209] ? sockfd_lookup_light+0xcb/0x180 [ 993.030821] __sys_sendmmsg+0x1bf/0x4e0 [ 993.035093] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 993.039693] ? kasan_check_write+0x14/0x20 [ 993.044245] ? __sb_end_write+0xd9/0x110 [ 993.048339] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 993.054352] ? fput+0x128/0x1a0 [ 993.057681] ? ksys_write+0x1f1/0x2d0 [ 993.061601] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 993.066381] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 993.071160] ? do_syscall_64+0x26/0x620 [ 993.075405] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.080910] ? do_syscall_64+0x26/0x620 [ 993.084927] __x64_sys_sendmmsg+0x9d/0x100 [ 993.089455] do_syscall_64+0xfd/0x620 [ 993.093545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.099460] RIP: 0033:0x45b349 [ 993.102939] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.122431] RSP: 002b:00007f800f1b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 993.130310] RAX: ffffffffffffffda RBX: 00007f800f1b16d4 RCX: 000000000045b349 [ 993.137608] RDX: 0000000004000070 RSI: 0000000020003b80 RDI: 0000000000000007 [ 993.145259] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.152813] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000008 23:37:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="726177f9030000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) 23:37:22 executing program 0 (fault-call:1 fault-nth:0): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 23:37:22 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)=""/112, 0x70) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000200)) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 993.160181] R13: 00000000000008aa R14: 00000000004ca045 R15: 0000000000000000 [ 993.183183] FAULT_INJECTION: forcing a failure. [ 993.183183] name failslab, interval 1, probability 0, space 0, times 0 [ 993.195780] CPU: 1 PID: 20933 Comm: syz-executor.0 Not tainted 4.19.98-syzkaller #0 [ 993.203927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.213308] Call Trace: [ 993.216046] dump_stack+0x197/0x210 [ 993.219724] should_fail.cold+0xa/0x1b [ 993.224463] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 993.229605] ? lock_downgrade+0x880/0x880 [ 993.233800] __should_failslab+0x121/0x190 [ 993.238249] should_failslab+0x9/0x14 [ 993.242216] __kmalloc+0x2e2/0x750 [ 993.245968] ? __lock_is_held+0xb6/0x140 [ 993.250409] ? tracepoint_probe_unregister+0x1a5/0x670 [ 993.255988] tracepoint_probe_unregister+0x1a5/0x670 [ 993.261283] ? perf_trace_sched_kthread_stop+0x520/0x520 [ 993.267189] trace_event_reg+0x189/0x350 [ 993.271425] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 993.276756] perf_trace_event_unreg.isra.0+0xb6/0x220 [ 993.282073] perf_trace_destroy+0xbc/0x100 [ 993.286604] tp_perf_event_destroy+0x16/0x20 [ 993.291137] ? perf_tp_event_init+0x120/0x120 [ 993.295844] _free_event+0x354/0x1220 [ 993.299776] ? ring_buffer_attach+0x650/0x650 [ 993.305410] put_event+0x47/0x60 [ 993.309018] perf_event_release_kernel+0x6d1/0xd80 [ 993.314077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 993.319861] ? put_event+0x60/0x60 [ 993.323443] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 993.329022] ? perf_event_release_kernel+0xd80/0xd80 [ 993.334166] perf_release+0x37/0x50 [ 993.337980] __fput+0x2dd/0x8b0 [ 993.341305] ____fput+0x16/0x20 [ 993.344712] task_work_run+0x145/0x1c0 [ 993.348852] exit_to_usermode_loop+0x273/0x2c0 [ 993.353562] do_syscall_64+0x53d/0x620 [ 993.357747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.362962] RIP: 0033:0x45b349 [ 993.366179] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 993.386649] RSP: 002b:00007f9760a5fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 993.394946] RAX: 0000000000000000 RBX: 00007f9760a606d4 RCX: 000000000045b349 [ 993.402440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 23:37:23 executing program 5 (fault-call:0 fault-nth:39): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 993.409914] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 993.417478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 993.424859] R13: 0000000000000072 R14: 0000000000501352 R15: 0000000000000000 23:37:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700050000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 993.456536] FAULT_INJECTION: forcing a failure. [ 993.456536] name failslab, interval 1, probability 0, space 0, times 0 [ 993.526380] CPU: 0 PID: 20937 Comm: syz-executor.5 Not tainted 4.19.98-syzkaller #0 [ 993.534386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.544012] Call Trace: [ 993.546851] dump_stack+0x197/0x210 [ 993.550619] should_fail.cold+0xa/0x1b [ 993.555165] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 993.557732] audit: type=1800 audit(1579822643.431:476): pid=20942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=18049 res=0 [ 993.560804] ? lock_downgrade+0x880/0x880 [ 993.588611] __should_failslab+0x121/0x190 [ 993.593027] should_failslab+0x9/0x14 [ 993.597330] kmem_cache_alloc+0x2ae/0x700 [ 993.601826] ? find_held_lock+0x35/0x130 [ 993.606182] ? fs_reclaim_acquire+0x20/0x20 [ 993.610773] getname_flags+0xd6/0x5b0 [ 993.615150] user_path_at_empty+0x2f/0x50 [ 993.619497] do_mount+0x150/0x2bc0 [ 993.623074] ? rcu_read_lock_sched_held+0x110/0x130 [ 993.624465] audit: type=1800 audit(1579822643.501:477): pid=20938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=18091 res=0 [ 993.628372] ? copy_mount_string+0x40/0x40 [ 993.628389] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 993.628404] ? _copy_from_user+0xdd/0x150 [ 993.628422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.628437] ? copy_mount_options+0x280/0x3a0 [ 993.628457] ksys_mount+0xdb/0x150 [ 993.628476] __x64_sys_mount+0xbe/0x150 [ 993.628497] do_syscall_64+0xfd/0x620 [ 993.628516] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 993.628527] RIP: 0033:0x45dd9a [ 993.628541] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 4d 8c fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 2a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 23:37:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x101, @mcast1, 0x3f}, 0x1c) getdents(r1, &(0x7f0000000200)=""/204, 0xcc) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) lgetxattr(0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)=""/98, 0x62) sendfile(r2, r4, 0x0, 0x80001d00c0d0) 23:37:23 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_tcp_int(r1, 0x6, 0x2000000000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x2, 0x4) r4 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) ftruncate(r4, 0x10099b7) sendfile(r0, r4, 0x0, 0x88000fc000026) 23:37:23 executing program 2 (fault-call:7 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0xff03}], 0x1}}], 0x4000070, 0x8000) [ 993.628548] RSP: 002b:00007f9c56ebea68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 993.628562] RAX: ffffffffffffffda RBX: 00007f9c56ebf6d4 RCX: 000000000045dd9a [ 993.628576] RDX: 00007f9c56ebeae0 RSI: 00000000200000c0 RDI: 00007f9c56ebeb00 [ 993.745296] RBP: 000000000075bf20 R08: 00007f9c56ebeb40 R09: 00007f9c56ebeae0 [ 993.752811] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000003 [ 993.760445] R13: 0000000000000b82 R14: 00000000004cc665 R15: 0000000000000027 23:37:23 executing program 0 (fault-call:1 fault-nth:1): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 993.802775] xt_check_match: 17 callbacks suppressed [ 993.802786] x_tables: ip_tables: ah match: only valid for protocol 51 [ 993.868358] FAULT_INJECTION: forcing a failure. [ 993.868358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 993.881096] x_tables: ip_tables: ah match: only valid for protocol 51 [ 993.895313] WARNING: CPU: 0 PID: 21054 at kernel/tracepoint.c:256 tracepoint_probe_register_prio+0x216/0x790 [ 993.906102] Kernel panic - not syncing: panic_on_warn set ... [ 993.906102] 23:37:23 executing program 5 (fault-call:0 fault-nth:40): syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='mpol=local:']) [ 993.913690] CPU: 0 PID: 21054 Comm: syz-executor.0 Not tainted 4.19.98-syzkaller #0 [ 993.921953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 993.931756] Call Trace: [ 993.934401] dump_stack+0x197/0x210 [ 993.939220] panic+0x26a/0x50e [ 993.942535] ? __warn_printk+0xf3/0xf3 [ 993.946717] ? tracepoint_probe_register_prio+0x216/0x790 [ 993.952411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 993.958115] ? __warn.cold+0x5/0x53 [ 993.961783] ? tracepoint_probe_register_prio+0x216/0x790 [ 993.967956] __warn.cold+0x20/0x53 [ 993.971715] ? tracepoint_probe_register_prio+0x216/0x790 [ 993.977766] report_bug+0x263/0x2b0 [ 993.981634] do_error_trap+0x204/0x360 [ 993.985819] ? math_error+0x340/0x340 [ 993.989657] ? __mutex_lock+0x3cd/0x1300 [ 993.994265] ? tracepoint_probe_register_prio+0x36/0x790 [ 994.000089] ? error_entry+0x7c/0xe0 [ 994.004053] ? trace_hardirqs_off_caller+0x65/0x220 [ 994.009114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 994.014014] do_invalid_op+0x1b/0x20 [ 994.018389] invalid_op+0x14/0x20 [ 994.021883] RIP: 0010:tracepoint_probe_register_prio+0x216/0x790 [ 994.028062] Code: 48 89 f8 48 c1 e8 03 80 3c 08 00 0f 85 b1 04 00 00 48 8b 45 b8 49 3b 45 08 0f 85 21 ff ff ff 41 bd ef ff ff ff e8 6a ad fe ff <0f> 0b e8 63 ad fe ff 48 c7 c7 c0 e0 fc 88 e8 b7 9f e8 05 44 89 e8 [ 994.056598] RSP: 0018:ffff888041c5fa80 EFLAGS: 00010216 [ 994.062315] RAX: 0000000000040000 RBX: ffffffff89c7bf60 RCX: ffffc90005ea6000 [ 994.070188] RDX: 000000000000154c RSI: ffffffff816c6806 RDI: ffff888089066730 [ 994.078633] RBP: ffff888041c5fad8 R08: ffff88805098a640 R09: fffffbfff11f9c19 [ 994.087367] R10: ffff888041c5fa70 R11: ffffffff88fce0c7 R12: ffff888089066710 [ 994.095002] R13: 00000000ffffffef R14: 00000000ffffffff R15: ffffffff814864d0 [ 994.102621] ? perf_trace_sched_kthread_stop+0x520/0x520 [ 994.109039] ? tracepoint_probe_register_prio+0x216/0x790 [ 994.115226] ? pcpu_balance_workfn+0x1270/0x1270 [ 994.120621] ? perf_trace_sched_kthread_stop+0x520/0x520 [ 994.125737] audit: type=1800 audit(1579822644.011:478): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=18089 res=0 [ 994.126665] ? perf_trace_sched_kthread_stop+0x520/0x520 [ 994.126701] tracepoint_probe_register+0x2b/0x40 [ 994.126721] trace_event_reg+0x21b/0x350 [ 994.165509] perf_trace_event_init+0x4f3/0x980 [ 994.170127] perf_trace_init+0x189/0x250 [ 994.174742] perf_tp_event_init+0xa6/0x120 [ 994.182270] perf_try_init_event+0x131/0x2f0 [ 994.187409] perf_event_alloc.part.0+0x1039/0x2f50 [ 994.193572] ? list_del_event+0x7f0/0x7f0 [ 994.204105] ? do_raw_spin_unlock+0x181/0x270 [ 994.209104] __do_sys_perf_event_open+0x99f/0x2a70 [ 994.214473] ? perf_event_set_output+0x4e0/0x4e0 [ 994.219530] ? put_timespec64+0xda/0x140 [ 994.234479] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 994.239286] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 994.244950] ? do_syscall_64+0x26/0x620 [ 994.249489] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.256264] ? do_syscall_64+0x26/0x620 [ 994.260364] __x64_sys_perf_event_open+0xbe/0x150 [ 994.265710] do_syscall_64+0xfd/0x620 23:37:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="72617700060000000000000000000000000000000000000000000000000010000200000003000000d002000030010000000000003001000030010000300100003802000038020000380200003802000038020000030000000000000000000000e0000001ac1414aa0000000000000000697036677265746170300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001100000000000000d0003001000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000000000020005000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000801000000000000000000000000000000000000000030006168000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000006e657462696f732d6e7300000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000007000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) [ 994.269558] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.275463] RIP: 0033:0x45b349 [ 994.279108] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.299720] RSP: 002b:00007f9760a5fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 994.307707] RAX: ffffffffffffffda RBX: 00007f9760a606d4 RCX: 000000000045b349 [ 994.315247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002025c000 [ 994.322544] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.330191] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000ffffffff [ 994.337671] R13: 00000000000007e9 R14: 00000000004c957f R15: 000000000075bf2c [ 994.344988] CPU: 1 PID: 21052 Comm: syz-executor.2 Not tainted 4.19.98-syzkaller #0 [ 994.353081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 994.362448] Call Trace: [ 994.365055] dump_stack+0x197/0x210 [ 994.368698] should_fail.cold+0xa/0x1b [ 994.372685] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 994.378012] ? __might_sleep+0x95/0x190 [ 994.382014] __alloc_pages_nodemask+0x1ee/0x750 [ 994.386734] ? __alloc_pages_slowpath+0x2870/0x2870 [ 994.391851] ? __local_bh_enable_ip+0x15a/0x270 [ 994.396853] ? sock_kmalloc+0xc6/0x120 [ 994.401040] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 994.406696] alloc_pages_current+0x107/0x210 [ 994.411121] ? af_alg_alloc_tsgl+0x2b6/0x3d0 [ 994.415628] af_alg_sendmsg+0x879/0x11a7 [ 994.419788] ? af_alg_async_cb+0x180/0x180 [ 994.424238] skcipher_sendmsg+0xba/0xf0 [ 994.428249] ? skcipher_setkey+0x50/0x50 [ 994.432418] sock_sendmsg+0xd7/0x130 [ 994.436310] ___sys_sendmsg+0x3e2/0x920 [ 994.440542] ? copy_msghdr_from_user+0x430/0x430 [ 994.445501] ? lock_downgrade+0x880/0x880 [ 994.449817] ? kasan_check_read+0x11/0x20 [ 994.454292] ? __fget+0x367/0x540 [ 994.457766] ? iterate_fd+0x360/0x360 [ 994.461588] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 994.467137] ? proc_fail_nth_write+0x9d/0x1e0 [ 994.471795] ? __fget_light+0x1a9/0x230 [ 994.475787] ? __fdget+0x1b/0x20 [ 994.479254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 994.485044] ? sockfd_lookup_light+0xcb/0x180 [ 994.489571] __sys_sendmmsg+0x1bf/0x4e0 [ 994.493758] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 994.498453] ? kasan_check_write+0x14/0x20 [ 994.502852] ? __sb_end_write+0xd9/0x110 [ 994.507200] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 994.512904] ? fput+0x128/0x1a0 [ 994.516408] ? ksys_write+0x1f1/0x2d0 [ 994.520409] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 994.525324] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 994.530087] ? do_syscall_64+0x26/0x620 [ 994.534103] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.539514] ? do_syscall_64+0x26/0x620 [ 994.543657] __x64_sys_sendmmsg+0x9d/0x100 [ 994.547903] do_syscall_64+0xfd/0x620 [ 994.551720] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 994.557027] RIP: 0033:0x45b349 [ 994.560237] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 994.580024] RSP: 002b:00007f800f1b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 994.588036] RAX: ffffffffffffffda RBX: 00007f800f1b16d4 RCX: 000000000045b349 [ 994.597115] RDX: 0000000004000070 RSI: 0000000020003b80 RDI: 0000000000000007 [ 994.605516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 994.613044] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000008 [ 994.620488] R13: 00000000000008aa R14: 00000000004ca045 R15: 0000000000000001 [ 994.629538] Kernel Offset: disabled [ 994.633475] Rebooting in 86400 seconds..