x220/0x220 [ 383.652446] [] evdev_ioctl+0x27/0x30 [ 383.652453] [] ? evdev_ioctl_compat+0x30/0x30 [ 383.652460] [] do_vfs_ioctl+0x1ac/0x11a0 [ 383.652467] [] ? ioctl_preallocate+0x220/0x220 [ 383.652475] [] ? selinux_capable+0x40/0x40 [ 383.652481] [] ? __fget+0x20a/0x3b0 [ 383.652487] [] ? __fget+0x231/0x3b0 [ 383.652493] [] ? __fget+0x47/0x3b0 [ 383.652501] [] ? security_file_ioctl+0x8f/0xc0 [ 383.652507] [] SyS_ioctl+0x8f/0xc0 [ 383.652514] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 383.652521] [] do_syscall_64+0x1a6/0x490 [ 383.652529] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 383.941394] CPU: 1 PID: 24444 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 383.949091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.958435] ffff88019abcf950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 383.966503] ffff8801da3a8780 ffff88019abcfb20 0000000000000000 ffff88019abcfb48 [ 383.974554] ffffffff81cbab1b 0000000000000dca ffff88019b8b8908 ffff8801da3a888c [ 383.982623] Call Trace: [ 383.985206] [] dump_stack+0xc1/0x128 [ 383.990567] [] handle_userfault.cold.18+0x3e/0x51 [ 383.997067] [] ? debug_check_no_locks_freed+0x210/0x210 [ 384.004074] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 384.010499] [] ? plist_del+0x14f/0x200 [ 384.016027] [] ? futex_wake+0x1aa/0x450 [ 384.021648] [] ? handle_mm_fault+0x1267/0x28e0 [ 384.027873] [] ? handle_mm_fault+0x220f/0x28e0 [ 384.034097] [] handle_mm_fault+0x221d/0x28e0 [ 384.040146] [] ? vm_insert_mixed+0x200/0x200 [ 384.046198] [] ? check_preemption_disabled+0x3b/0x170 [ 384.053037] [] __do_page_fault+0x5af/0xd50 [ 384.058914] [] ? mm_fault_error+0x2c0/0x2c0 [ 384.064880] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.071538] [] do_page_fault+0x27/0x30 [ 384.077070] [] page_fault+0x28/0x30 [ 384.082330] [] ? do_sigaltstack+0x267/0x6f0 [ 384.088278] [] ? do_sigaltstack+0x271/0x6f0 [ 384.094236] [] ? move_addr_to_kernel+0x50/0x50 [ 384.100455] [] SyS_sigaltstack+0x6c/0x90 [ 384.106158] [] ? do_sigaction+0x8c0/0x8c0 [ 384.111937] [] do_syscall_64+0x1a6/0x490 [ 384.117633] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 03:34:25 executing program 6: r0 = socket$inet6(0xa, 0x80000, 0x61) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000180)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 03:34:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='systemmd5sum\\\x00', 0x1) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x31, &(0x7f00000000c0), 0x0) 03:34:25 executing program 5: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x7ff0000000000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x1, 0x100, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x91b9}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0xb) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, r0, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000740)=0x0) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000580)={'team_slave_1\x00', @ifru_names='bond_slave_1\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r3, r4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x100ffd, 0x0) ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000002c0)) utimensat(r6, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000340)={{0x77359400}}, 0x100) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x5c, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000100)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) 03:34:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@remote, 0x4e22, 0x0, 0x4e24, 0x7f, 0xa, 0x80, 0xa0, 0x29, r1, r2}, {0xd07, 0x0, 0x8, 0x4, 0x9, 0x200, 0xdd9, 0x8}, {0x9, 0x3, 0xba1, 0xc16a}, 0xe49d, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0x3b}, 0xa, @in6=@ipv4={[], [], @rand_addr=0x1}, 0x3502, 0x7, 0x3, 0x100000001, 0x8, 0x9, 0x3}}, 0xe8) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = gettid() r5 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x4000) write$P9_RFSYNC(r5, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r6 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) bind$inet(r6, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r5, &(0x7f00000e5000)={0x2, 0x4e21, @rand_addr=0x8000}, 0x10) connect$inet(r6, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) write$binfmt_elf64(r6, &(0x7f00000002c0)=ANY=[], 0x0) dup2(r3, r6) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)="736974300000e5dfffffffff1f00", 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000100)) tkill(r4, 0x1000000000016) 03:34:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x7}, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0xa0000, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = geteuid() fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x20, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}]}}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x4, 0x2d6, 0x6}}, 0x30) 03:34:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xbe6a) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 03:34:25 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140), &(0x7f0000000c80)="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", 0xad4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000180)='cifs.idmap\x00') ustat(0x3, &(0x7f00000001c0)) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f0000000380), 0x1000) 03:34:25 executing program 7: mprotect(&(0x7f000022f000/0x4000)=nil, 0x4000, 0x40000000) clock_settime(0x0, &(0x7f0000000080)={0x0, 0x989680}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='limits\x00') ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0xffffffff}) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000580)=0x6) syslog(0x9, &(0x7f0000000480)=""/149, 0x95) r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'teql0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@updpolicy={0xfc, 0x19, 0x306, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast1, @in=@loopback, 0x4e23, 0x62, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x2, r2, r3}, {0x80000001, 0x80000001, 0x6, 0xa33, 0x2, 0x2, 0x7, 0xf6c2}, {0x40000000000, 0x3ad5, 0x7, 0x6}, 0x7, 0x6e6bb6, 0x0, 0x0, 0x3}, [@mark={0xc, 0x15, {0x350759, 0x1}}, @sec_ctx={0x38, 0x8, {0x31, 0x8, 0x1, 0x4, 0x29, "cde8e4c083a283af02b700f742f784aa10ce8202fe9a71c1417be872fe33d2cd2ea505d10eddd18569"}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0x267d) bind$packet(r0, &(0x7f0000000540)={0x11, 0x4, r2, 0x1, 0x1000, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 03:34:25 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x9, 0x8, 0x6, 0xb3, 0xfff}) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000140)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) [ 384.321872] sd 0:0:1:0: [sg0] tag#161 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 384.330633] sd 0:0:1:0: [sg0] tag#161 CDB: opcode=0xda (vendor) [ 384.336710] sd 0:0:1:0: [sg0] tag#161 CDB[00]: da 84 5a ca 5d c2 5c cf b9 89 85 d8 5f d5 54 5a [ 384.345585] sd 0:0:1:0: [sg0] tag#161 CDB[10]: bd 01 3c 3b 82 b5 c3 e6 fe e1 e1 af 2b 9a 06 93 [ 384.354368] sd 0:0:1:0: [sg0] tag#161 CDB[20]: a7 af 3a a9 db 9a 00 06 58 4e 6f c2 58 d2 d3 d3 [ 384.363145] sd 0:0:1:0: [sg0] tag#161 CDB[30]: a6 26 ff fa a0 bc f6 34 25 94 ea 8e 48 71 09 20 03:34:26 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000140)={0x39, 0x3, 0x0, {0x5, 0x18, 0x0, '/selinux/avc/hash_stats\x00'}}, 0x39) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) geteuid() ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) socket$inet_tcp(0x2, 0x1, 0x0) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 03:34:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = memfd_create(&(0x7f0000000080)='cgroup)userposix_acl_access\x00', 0x2) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_ifreq(r0, 0x891e, &(0x7f0000000000)={'team_slave_1\x00', @ifru_mtu}) ioctl$sock_ifreq(r0, 0x8927, &(0x7f0000000040)={'vlan0\x00', @ifru_hwaddr=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) [ 384.371962] sd 0:0:1:0: [sg0] tag#161 CDB[40]: 2b 9d 53 5a 90 76 53 c8 65 9d 3e a8 ab a8 de 60 [ 384.380772] sd 0:0:1:0: [sg0] tag#161 CDB[50]: 71 7c 31 40 d2 1d b2 d8 c1 a7 ec 67 03:34:26 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000200)=r2, 0x12) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10}], 0x10}}], 0x2, 0x8000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x180, 0x0) 03:34:26 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x0, 0x0) sysinfo(&(0x7f0000000140)=""/54) sendto$inet(r2, &(0x7f0000000180), 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pread64(r1, &(0x7f0000001600)=""/4096, 0x1000, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r2, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast1, @empty, 0x0, 0x7, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast2, @multicast1, @remote, @multicast1]}, 0x2c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) connect(r2, &(0x7f0000000400)=@un=@file={0x0, './file0\x00'}, 0x80) 03:34:26 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) ioctl$int_out(r1, 0x2, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x3, 0x6b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000000), &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x785) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="540100001600100029bd7000fedbdf251d00000008000b00", @ANYRES32=r2, @ANYBLOB="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"], 0x154}}, 0x85) 03:34:26 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140), &(0x7f0000000c80)="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", 0xad4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000180)='cifs.idmap\x00') ustat(0x3, &(0x7f00000001c0)) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000400), &(0x7f0000000380), 0x1000) [ 384.484078] FAULT_FLAG_ALLOW_RETRY missing 30 [ 384.488700] FAULT_FLAG_ALLOW_RETRY missing 30 [ 384.488712] CPU: 0 PID: 24495 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 384.488717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.488732] ffff8801b6d4f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 384.488747] ffff8801da3a8900 ffff8801b6d4f7e0 0000000000000000 ffff8801b6d4f808 [ 384.488759] ffffffff81cbab1b 00000000000067c2 ffff8801cb28d130 ffff8801da3a8a0c [ 384.488762] Call Trace: [ 384.488776] [] dump_stack+0xc1/0x128 [ 384.488788] [] handle_userfault.cold.18+0x3e/0x51 [ 384.488800] [] ? debug_check_no_locks_freed+0x210/0x210 03:34:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000089000)) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 03:34:26 executing program 7: request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100), &(0x7f0000000140)='dh\x00', 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:26 executing program 5: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sync() 03:34:26 executing program 0: stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000040)={0x0, @loopback, 0x0, 0x0, 'lblcr\x00'}, 0x2c) [ 384.488811] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 384.488822] [] ? check_preemption_disabled+0x3b/0x170 [ 384.488830] [] ? check_preemption_disabled+0x3b/0x170 [ 384.488841] [] ? handle_mm_fault+0x1267/0x28e0 [ 384.488849] [] ? handle_mm_fault+0x220f/0x28e0 03:34:26 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xffffffffffffffff) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x1c}) 03:34:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000089000)) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 384.488858] [] handle_mm_fault+0x221d/0x28e0 [ 384.488866] [] ? vm_insert_mixed+0x200/0x200 [ 384.488874] [] ? __lock_is_held+0xa2/0xf0 [ 384.488884] [] __do_page_fault+0x5af/0xd50 [ 384.488892] [] ? mm_fault_error+0x2c0/0x2c0 [ 384.488901] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 384.488909] [] do_page_fault+0x27/0x30 [ 384.488918] [] page_fault+0x28/0x30 [ 384.488926] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 384.488936] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 384.488943] [] ? str_to_user+0xa0/0xa0 [ 384.488951] [] ? __lock_acquire+0x654/0x4070 [ 384.488960] [] ? exit_robust_list+0x220/0x220 [ 384.488969] [] evdev_ioctl+0x27/0x30 [ 384.488976] [] ? evdev_ioctl_compat+0x30/0x30 [ 384.488984] [] do_vfs_ioctl+0x1ac/0x11a0 [ 384.488990] [] ? ioctl_preallocate+0x220/0x220 [ 384.488998] [] ? selinux_capable+0x40/0x40 [ 384.489005] [] ? __fget+0x20a/0x3b0 [ 384.489011] [] ? __fget+0x231/0x3b0 [ 384.489017] [] ? __fget+0x47/0x3b0 [ 384.489034] [] ? security_file_ioctl+0x8f/0xc0 [ 384.489043] [] SyS_ioctl+0x8f/0xc0 [ 384.489051] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 384.489061] [] do_syscall_64+0x1a6/0x490 [ 384.489069] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 384.952702] CPU: 1 PID: 24509 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 384.960398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.969743] ffff880199767950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 384.977779] ffff8801da3a8900 ffff880199767b20 0000000000000000 ffff880199767b48 [ 384.985796] ffffffff81cbab1b 0000000000000dca ffff88019dbae908 ffff8801da3a8a0c [ 384.993805] Call Trace: [ 384.996553] [] dump_stack+0xc1/0x128 [ 385.001903] [] handle_userfault.cold.18+0x3e/0x51 [ 385.008383] [] ? debug_check_no_locks_freed+0x210/0x210 [ 385.015405] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 385.021817] [] ? handle_mm_fault+0x1267/0x28e0 [ 385.028038] [] ? handle_mm_fault+0x220f/0x28e0 [ 385.034253] [] handle_mm_fault+0x221d/0x28e0 [ 385.040287] [] ? vm_insert_mixed+0x200/0x200 [ 385.046333] [] __do_page_fault+0x5af/0xd50 [ 385.052207] [] ? mm_fault_error+0x2c0/0x2c0 [ 385.058165] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.064814] [] do_page_fault+0x27/0x30 [ 385.070331] [] page_fault+0x28/0x30 [ 385.075591] [] ? do_sigaltstack+0x267/0x6f0 [ 385.081562] [] ? do_sigaltstack+0x271/0x6f0 [ 385.087618] [] ? security_file_ioctl+0x8f/0xc0 [ 385.093833] [] SyS_sigaltstack+0x6c/0x90 [ 385.099525] [] ? do_sigaction+0x8c0/0x8c0 [ 385.105307] [] do_syscall_64+0x1a6/0x490 [ 385.111006] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 03:34:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 03:34:26 executing program 7: request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100), &(0x7f0000000140)='dh\x00', 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:26 executing program 1: request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100), &(0x7f0000000140)='dh\x00', 0xfffffffffffffffd) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 03:34:26 executing program 5: r0 = getpgrp(0x0) r1 = gettid() madvise(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0xa) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x30003}) r2 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000a72000)={0x563}, &(0x7f0000a77ff0), &(0x7f000044a000)={0x0, 0x989680}, 0x8) pwrite64(r2, &(0x7f0000000080)="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", 0x1000, 0x19) 03:34:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000089000)) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 03:34:26 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xffffffffffffffff) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x1c}) 03:34:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000004c0)=""/117, &(0x7f0000000480)=0xe07ea879c0faf3b) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x7f) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x501101, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f") ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000001a40)={@empty, @multicast1}, &(0x7f0000001a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001c00)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001c80)={0x0, @remote, @local}, &(0x7f0000001cc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@local, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001e00)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @empty, @multicast1}, &(0x7f0000001e80)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'veth0_to_bridge\x00'}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop-control\x00', 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001f00)={{{@in=@rand_addr, @in=@multicast1}}, {{@in6=@ipv4}, 0x0, @in6=@local}}, &(0x7f0000002000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002100)={'team0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002140)={0x0, @loopback, @dev}, &(0x7f0000002180)=0xc) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000300)=""/19) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) r5 = gettid() syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read(r0, &(0x7f0000000000)=""/11, 0xb) tkill(r5, 0x0) 03:34:26 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 03:34:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000000)="025cc80700145f8f764070") r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) mount$9p_tcp(&(0x7f00000000c0)='127.0.0.1\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7472616e733d743d3078dae28e8b85fe91b2e50277bf4a3030303030"]) 03:34:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)='/dev/zero\x00', 0xfffffffffffffffa) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x4, 0x4) dup2(r1, r0) r2 = getpid() r3 = getpgrp(0x0) rt_tgsigqueueinfo(r2, r3, 0x27, &(0x7f0000000100)={0x40, 0x20, 0x6, 0x1}) 03:34:26 executing program 1: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x7f) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f") ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a00)={'team0\x00'}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001a40)={@empty, @multicast1}, &(0x7f0000001a80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@multicast2, @in=@loopback}}, {{}, 0x0, @in=@dev}}, &(0x7f0000001c00)=0xe8) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001c80)={0x0, @remote, @local}, &(0x7f0000001cc0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@local, @in6=@loopback}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001e00)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001e40)={0x0, @empty, @multicast1}, &(0x7f0000001e80)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'veth0_to_bridge\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001f00)={{{@in=@rand_addr, @in=@multicast1}}, {{@in6=@ipv4}, 0x0, @in6=@local}}, &(0x7f0000002000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00'}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002140)={0x0, @loopback, @dev}, &(0x7f0000002180)=0xc) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000300)=""/19) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000003c0)=0x3) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) r5 = gettid() syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read(r1, &(0x7f0000000000)=""/11, 0xb) tkill(r5, 0x0) 03:34:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 385.360039] FAULT_FLAG_ALLOW_RETRY missing 30 [ 385.360107] FAULT_FLAG_ALLOW_RETRY missing 30 [ 385.360117] CPU: 0 PID: 24588 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 03:34:27 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0xfff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xffffffffffffffff) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x1c}) 03:34:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x8000, 0x0) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000240)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000001f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bf0000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x81, 0x20, 0x9, 0x8001, 0x0, 0x9, 0x22810, 0x8, 0x4, 0x5, 0x1000, 0x400, 0x7d3d06ce, 0x2, 0x0, 0x800, 0x9d1d, 0x6, 0x0, 0x7, 0xfff, 0x7, 0xaa4, 0x0, 0x1f, 0x1, 0x800, 0xffffffffffff8000, 0x20, 0x2, 0x100000000, 0x1, 0x80000000, 0x9, 0x3, 0x80000001, 0x0, 0x3, 0x4, @perf_config_ext={0x6}, 0x0, 0xffffffffffffffff, 0x5, 0x6, 0x100000000, 0x80000001, 0x7}, r3, 0xb, r1, 0x2) [ 385.360121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.360135] ffff8801a46c7610 ffffffff81eb46a9 0000000000000002 0000000000000000 03:34:27 executing program 7: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000040)="05", 0x1, 0xfffffffffffffffc) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000200)) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000001c0), 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_ro(r1, &(0x7f0000000240)='cpuacct.stat\x00', 0x0, 0x0) keyctl$link(0x8, r0, r2) keyctl$unlink(0x9, r0, r2) r3 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x200000) r4 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000180)={r4, 0x0, 0x400, 0xffffffff, 0x7}) 03:34:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) write$selinux_user(r3, &(0x7f0000000340)={'system_u:object_r:var_t:s0', 0x20, 'user_u\x00'}, 0x22) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000300}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, 0x37, 0x200, 0x70bd25, 0x25dfdbfe, {0x6}, [@typed={0x8, 0x4e, @pid=r2}, @generic="ad312b416d3b7a562caa8b2f1c9d868c4fb83af8971f2630821c870908909dd2076d9a49881d9e135656f36be7f1004b4fa9a690eaae956d88926a71d2cd359039fb7f750ccb7468bf017206f04bb7ec3c13c06d10be34d6346e65355aeb400726f6c84b297b6ababb091e15", @nested={0x7c, 0x0, [@generic, @generic="5915e67c03c0fb72ec23d41b350e1d71434da141e3344d83da1e5ceb469cf0ae847bd471238091f463fec9e37ddaceb24937747275c1eeac5d9a3b354fb23ffac0a8b776ae26674fbf9b756ef66dff8cbd4e7abd234bd7f4da58e143f88fa5d4a28880c68507a27f0ecd3c1d23bc3ee23b3f9014e9e4d5"]}, @generic="f58cb2ad50ac4252e868"]}, 0x110}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000100000000000100000014000100719e40c9020000000800050000000003"], 0x28}}, 0x0) [ 385.360146] ffff8801da3a8a80 ffff8801a46c77e0 0000000000000000 ffff8801a46c7808 [ 385.360157] ffffffff81cbab1b 00000000000067c2 ffff880199fae930 ffff8801da3a8b8c [ 385.360159] Call Trace: [ 385.360171] [] dump_stack+0xc1/0x128 [ 385.360180] [] handle_userfault.cold.18+0x3e/0x51 [ 385.360192] [] ? debug_check_no_locks_freed+0x210/0x210 [ 385.360204] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 385.360213] [] ? unwind_next_frame+0x86/0xe0 [ 385.360220] [] ? __save_stack_trace+0x7d/0xf0 [ 385.360230] [] ? handle_mm_fault+0x1267/0x28e0 [ 385.360237] [] ? handle_mm_fault+0x220f/0x28e0 [ 385.360243] [] handle_mm_fault+0x221d/0x28e0 [ 385.360251] [] ? vm_insert_mixed+0x200/0x200 [ 385.360258] [] ? __lock_is_held+0xa2/0xf0 [ 385.360267] [] __do_page_fault+0x5af/0xd50 [ 385.360275] [] ? mm_fault_error+0x2c0/0x2c0 [ 385.360282] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.360290] [] do_page_fault+0x27/0x30 [ 385.360297] [] page_fault+0x28/0x30 [ 385.360306] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 385.360315] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 385.360322] [] ? str_to_user+0xa0/0xa0 [ 385.360330] [] ? __lock_acquire+0x654/0x4070 [ 385.360338] [] ? exit_robust_list+0x220/0x220 [ 385.360346] [] evdev_ioctl+0x27/0x30 [ 385.360353] [] ? evdev_ioctl_compat+0x30/0x30 [ 385.360361] [] do_vfs_ioctl+0x1ac/0x11a0 [ 385.360367] [] ? ioctl_preallocate+0x220/0x220 [ 385.360375] [] ? selinux_capable+0x40/0x40 [ 385.360382] [] ? __fget+0x20a/0x3b0 [ 385.360388] [] ? __fget+0x231/0x3b0 [ 385.360394] [] ? __fget+0x47/0x3b0 [ 385.360402] [] ? security_file_ioctl+0x8f/0xc0 [ 385.360408] [] SyS_ioctl+0x8f/0xc0 [ 385.360415] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 385.360421] [] do_syscall_64+0x1a6/0x490 [ 385.360429] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 385.410599] 9pnet: Could not find request transport: t=0xÚ⎋…þ‘²åw¿J00000 [ 385.431912] 9pnet: Could not find request transport: t=0xÚ⎋…þ‘²åw¿J00000 [ 385.668965] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. [ 385.676184] netlink: 16 bytes leftover after parsing attributes in process `syz-executor6'. [ 385.896641] CPU: 1 PID: 24591 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 385.896645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.896658] ffff88019abcf950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 385.896668] ffff8801da3a8a80 ffff88019abcfb20 0000000000000000 ffff88019abcfb48 [ 385.896677] ffffffff81cbab1b 0000000000000dca ffff880198c83908 ffff8801da3a8b8c [ 385.896679] Call Trace: [ 385.896692] [] dump_stack+0xc1/0x128 [ 385.896704] [] handle_userfault.cold.18+0x3e/0x51 [ 385.896713] [] ? debug_check_no_locks_freed+0x210/0x210 [ 385.896722] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 385.896732] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 385.896742] [] ? handle_mm_fault+0x1267/0x28e0 [ 385.896750] [] ? handle_mm_fault+0x220f/0x28e0 [ 385.896757] [] handle_mm_fault+0x221d/0x28e0 [ 385.896765] [] ? vm_insert_mixed+0x200/0x200 [ 385.896776] [] __do_page_fault+0x5af/0xd50 [ 385.896784] [] ? mm_fault_error+0x2c0/0x2c0 [ 385.896792] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 385.896799] [] do_page_fault+0x27/0x30 [ 385.896807] [] page_fault+0x28/0x30 [ 385.896816] [] ? do_sigaltstack+0x267/0x6f0 [ 385.896823] [] ? do_sigaltstack+0x271/0x6f0 [ 385.896832] [] ? security_file_ioctl+0x8f/0xc0 [ 385.896840] [] SyS_sigaltstack+0x6c/0x90 [ 385.896847] [] ? do_sigaction+0x8c0/0x8c0 [ 385.896854] [] do_syscall_64+0x1a6/0x490 [ 385.896861] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 03:34:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 03:34:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 03:34:27 executing program 0: recvfrom(0xffffffffffffffff, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f0000000180)=""/9, 0x9}], 0x2, 0xfffffffffffffffc) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_vif\x00') connect$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) getpid() r1 = socket$inet6(0xa, 0x1040000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="24000000010a07031dfffd946fa2830020200a0009000100001d85680c1baba24273203095bbb2a5de2a0400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0e14b45ffcc3b0b027c1a09b28b9791a789d92fba22332d5b61608c156961a9b699f4e2b9", 0x7a}], 0x1}, 0x0) 03:34:27 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x8, 0x90, 0x933, 0xc0, 0x0, 0x1000, 0x10008, 0x1, 0x4, 0x4, 0x401, 0x6, 0x8, 0x0, 0xd2c3, 0x100000001, 0x10001, 0x4, 0x1, 0x4, 0xaf, 0x371, 0x4, 0x2, 0x6, 0xffff, 0x0, 0x6, 0xfc62, 0x4, 0x4, 0x69f7, 0x6, 0x5, 0x8, 0x1, 0x0, 0x1, 0x6, @perf_config_ext={0x401, 0x7c2}, 0x102, 0xfffffffffffffe00, 0xff, 0x1, 0xbb3c4dc, 0x8, 0x3}, r2, 0xb, r0, 0xb) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000380)=0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) socketpair(0x2, 0xa, 0x80000000, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r4, 0x540e, 0x2) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4002020}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec010000", @ANYRES16=0x0, @ANYBLOB="000028bd7000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="d001020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00014d725f6c696e6b7570000000000b0000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="5c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000500030000000000000000c50200000000000509008000000000000040000000080000f60000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c0004006861736800000000"], 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x2000, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000180)="6e8e71e7d228e41d943ea18fe0309e8c839b16fac56786d66f5c340f9587a6e0b3a815a6c0ca785e08e15fde386551d4aa386b26fa1e8a64b199b51e2eebadec7129f5dd72ab8d23e10cc6b286c2a4403a68ed476f01911f8bd868e6167395175c27cd5da9834b8b1fa9f4cb9f606f3814f34a7633f8603798f2e389ecb59358aeb0f70fa222b0") 03:34:27 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0xfc9f73fa8eff0a1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r3, &(0x7f0000000000)=""/24, 0x18, 0x8, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000440)="3a98a57a6a3c0b038d1b407ae3603568", 0x10) mq_timedsend(r3, &(0x7f0000000100), 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000600)=@nfc, &(0x7f0000000680)=0x80) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000780)=""/228, &(0x7f0000000880)=0xe4) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x312) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffefffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf3a50b7e52190176198b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc70c257077f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bdc5ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b432330cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c582beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a4f837d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3a88d0f4a450d89a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc6220847666f8f52c4571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18ea3bfacf9662601fc9868329b3524cb8c0785072"], 0xb61) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 03:34:27 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc80700145f8f764070") preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0) 03:34:27 executing program 5: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000280)=""/246) pwritev(r1, &(0x7f0000001280)=[{&(0x7f0000000040)='\x00!', 0x1c}], 0x1, 0x4) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x5, 0x5, 0x3}}, 0x28) 03:34:27 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2, 0x0) close(r0) 03:34:27 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) fcntl$setlease(r0, 0x400, 0x1) mq_unlink(&(0x7f0000000000)='=@ppp1systemvmnet0(}-#*\\\x00') sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02040000020000000000000000001100"], 0x10}}, 0x0) 03:34:27 executing program 1: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x1) r0 = getpgrp(0x0) getpgrp(r0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000580)) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fchmodat(r1, &(0x7f0000000140)='./file0\x00', 0x8e) fremovexattr(r1, &(0x7f0000000680)=@known='system.posix_acl_access\x00') [ 386.248926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 386.259655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 03:34:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 03:34:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000002c0)={0x8}, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='schedstat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'rose0\x00', r5}) r6 = dup(r1) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r3, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r6]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r4, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) [ 386.340848] FAULT_FLAG_ALLOW_RETRY missing 30 [ 386.340989] FAULT_FLAG_ALLOW_RETRY missing 30 [ 386.340999] CPU: 0 PID: 24679 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 386.341004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.341017] ffff8801ac0ff950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 386.341028] ffff8801d86faf00 ffff8801ac0ffb20 0000000000000000 ffff8801ac0ffb48 [ 386.341039] ffffffff81cbab1b 0000000000000dca ffff88019b682108 ffff8801d86fb00c [ 386.341042] Call Trace: [ 386.341055] [] dump_stack+0xc1/0x128 [ 386.341066] [] handle_userfault.cold.18+0x3e/0x51 03:34:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000002c0)={0x8}, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40046c, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='schedstat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'rose0\x00', r5}) r6 = dup(r1) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x2) sendmmsg$unix(r3, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r6]}], 0x18}], 0x4924924924926c2, 0x0) recvmmsg(r4, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000080)=""/9, 0x9}}], 0x37a, 0x0, &(0x7f00000050c0)={0x77359400}) 03:34:28 executing program 7: prctl$setmm(0x23, 0x2, &(0x7f0000ffe000/0x2000)=nil) prctl$setmm(0x23, 0x1, &(0x7f0000ffc000/0x1000)=nil) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x20, 0x0, 0x3}, 0x9}}, 0x18) 03:34:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(0xffffffffffffffff, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 386.341076] [] ? debug_check_no_locks_freed+0x210/0x210 [ 386.341087] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 386.341100] [] ? handle_mm_fault+0x1267/0x28e0 [ 386.341108] [] ? handle_mm_fault+0x220f/0x28e0 03:34:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x0) r2 = dup2(r0, r1) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000003600)=0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = memfd_create(&(0x7f0000000040)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000003640)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r6 = syz_genetlink_get_family_id$team(&(0x7f0000003040)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f00000035c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80100004}, 0xc, &(0x7f0000003580)={&(0x7f0000003080)={0xfffffffffffffd7b, r6, 0x30, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x260}}, {{0x8, 0x1, r4}, {0x210, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2e4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r4}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x401, 0x7ff, 0x1, 0x148e}, {0x7, 0x1, 0xff, 0x100}, {0x4555, 0xb45, 0x100, 0x3}, {0x2, 0x4, 0xc0be, 0x2dc}, {0x9, 0x8, 0xa9, 0x961c}, {0x1f, 0xffff, 0x1, 0x2}, {0x98, 0x0, 0x1}]}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000045) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) r8 = fcntl$getown(r1, 0x9) sendmsg$netlink(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000080)={0x10, 0x40, 0x24, 0x70bd29, 0x25dfdbfc}, 0x10}, {&(0x7f0000000500)={0x13e0, 0x39, 0x210, 0x70bd25, 0x25dfdbff, "", [@nested={0x1d4, 0x2, [@generic="6a7ce58d5560a0c429d4eb7d0ea010fc3eb44fff7aa805c97d4c2d5934cce820873ea6b535f1a1f375ef3f310f5c834e4a1a4d4f1986dc0dd3ccc34f86578a0841e8509a86a329d106", @generic="6d69598cbdf9937dd85ccb413633ef36500d966fb21793e866082e85853b8dee5189e4a37666b48517461bb4794e47ec48fb80bb8d304de7396939ae849c5c64e14110b0ce8080bcb3522d421fe22595eb1475fd301eb1ec4fbfc96e451d8bae9d2aa912ae52766e504c69e817370829673a31aefa2de9689483e5a67c27838e11681979006e15dd3f4c38481b752ef9352f351c460456c3f6915c29cb8d69e0d37c3e17d8244d31594c0bf59dc684585c27787758966efdbb4b5af58cb00971a2acde98940f12d38cf0b15ff90159f1780b", @generic="c5e48793847c2a8aa396f58efdf10edef6d22149956d043ab2a8be5b4763cc3ad7a57575d346c4db1ce039c886cf4ad89f43fc18484b856d15d5292be09873a47a41e647d557928998ec181814e2fa33d9c0ff8bc8cb38c33f8aa0d7f5ca84a3e2f1cf9bc2a9ccfbd138efaaee6c5fa61273150e60244e2c6349e79c1568e569e84de16dfcfe17d9707f54a168b1817512e963ac4c55dd96b226d1c7247ad13a1d9d71103ac61b72a0ac349a04116bcc72960f"]}, @generic="c1dddf58bc5a26a0fed245613660b91f5a1597a3d9d95e6e8e7d254a82c1207483a0502b317e0786722477f0e676ecd9c10b39e3d4715f434c0acc59aa6adbc517054581497faab6eea489cdc23e34", @nested={0x11ac, 0x5d, [@typed={0x8, 0x25, @ipv4=@multicast2}, @generic="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", @generic="76949fe4fba7422e52e79c862604cd7a506ff94ff4b17b994566b13decd4f599efc00e6d5432e2bebf52009f83de40d63dd7df0e811e4fbd8f129ee074eac51c017312876bc7ddc37fa3435d6403fb5d1357871f8038e5d1d7de098a682e28594d449f012e80cf17f318c577555d226731d9607315731ccbaddd952e9df062135b6eb7f95b59d7b5839c95cd775579cc74ea35601ef6f6ed7cc104d1f415", @typed={0x8, 0x69, @uid=r5}, @typed={0x8, 0x5a, @pid=r7}, @generic="0ec10888ebac9f0edef0f10de68e55ab196d0aa06219a34a90cecfd72f748d6649eb3f37272a09efd80c40dd24ced7c8c25e812eb173af572a94e9924383ee942b1c6203e543875e7f7d5be9d8129060c57cd840041ac7cedcad740b74b35af24a0a5dd8dee1e719c22f49bf3f660c4895893c952cf288bafc4f0dcd9746ee8b322accd3e584dad7e8812031d4e896ec82f6c1963ed471945aba0f5955b56342cfa972aacf0bd1faec7c2216ec5a21b848232374dddf27e803b457945e3a54ac17d3906431ebc5b8e2677eb20c6ba6ce73513c60d1c1ee5b334dabe1c70851e76083c615e7ce9c4635c22332cf5c0fb043"]}]}, 0x13e0}, {&(0x7f0000001900)=ANY=[@ANYBLOB="f40000003800010028bd7000fedbdf25e40076000f4393dadb0dce26ecd1a2bf9f3242447de8a44e9575bdba5c18ca49c31081f867a38631272cf51aeac57afec644fc4842e7646eb905baab908161ff06852fe06cc12846a739a5c6c9feaddfcbf9a95065f00c07b2e4b1613f815e85197e9acbef2595327f5eb9e2e37c2856f6e46520d20fc87b27b22cbe84074636a263e75c7b46b648b96eb6fb0bf7fb2e4b4f5303de17c6dcb1ca914ded1ca6f52c315e902832a4932c9db7fba294cc7e24545620295bfb2c0eafc5e2b608c8ba25fa71bc99b693c5393cd8130fef619e2c0085f596b7e58f5efa3a788ff2c30000000000"], 0xf4}, {&(0x7f0000001a00)={0x3dc, 0x40, 0x300, 0x70bd29, 0x25dfdbfc, "", [@nested={0x258, 0x0, [@generic, @generic="d7128e62ddf0d1fa3488bc534ff5e306d8d0210fb25b88b90a491b55877ab6d387ebe588e8aa2af65e6041ca953e2d59a23950a96cf7a4b259ba6e71520ced13858b852f322882e8e9f2c97396a02e226c324295909c183711a1bdbea21da62d5d", @generic="4d1dd609e2d7894dcb75bfac448b0f8182d6f40b028632aa1a6de059c602296334bc4ad010884a646f166caf883e995d60b7f5a7c4cb8dc197ac5b0c0175c6e8ccbd5e961be79906096f2c126db08980ecfc407f07e697c67b5699cb4cf54bb1e691af910a4bed7f48962ec9733231479eaa540068b1d20c811126d3b1ab0c64ad193d7c7c71dcda5dfc1756180dcfc994871a294dfae53b3c01f93cbc761b316d0c48c6e50d32b4be479c7cb2bf721128f2d89f977bbe7e7682c43f1689140e9793c79633321da6d35b795a6e1c56d46b171577477f186024566e08c4e8af678f6cb1b59cab1b71f19fd2a723c81f600b40f7a9d4bb948913", @typed={0x8, 0x67, @pid=r8}, @generic="72217913f1f3a7528714107107ee2cef7e3a8790a09b84e732b19f9dc0c5872bb0840302f209b54e13631df538a9328efe4e6dbea78c762ccc42f632758b9c40b60d62efdef5d5ca7c8231c523f6d2d05b90b477683234a41bcdc28c3b2e3351c6f79cd969ffc147", @generic="c47918c6360f5e648706cbf9ffbf2827065204103b359651ac6a19336d7f6f297a3cac6e2df8248fb429d891550a001eb80105779c16a329a5ff5aaa466e8cd1568cde51", @typed={0x8, 0x2a, @u32=0x5}, @typed={0x3c, 0x86, @binary="855fef20d912642079bda8a0567a1a3d674df66c16b0a51a5bdf946362b402be81466400a9b9b22bfd51dc3b2b32900fe47ef6d0bb44c2"}]}, @nested={0x168, 0x80, [@generic="378625897a89501d4b7071513472e8c5416914413fd55b75de39ea5a09f53a3e9eb3224c4bb65ed906ecece4d329e5b49240626aecc81f9b66a4cf484934cee9e9239057cc968ed4e46bd2b57f2396f242de0aaf0654523285bf7aef65debe89ae1b533e57978683426deaf14a26b60fe3f44db8b22497c7530c4bd158bb966b84", @generic="caf808f2f5e8c852b23976ee9c3ce8ec36ef1af5650fbb0f6f57d16099ea04f6502882a752bab04b472a8f05ba9bcabe0f98891deb1ef14156335bcadfc2c26110bbc0d1abb164c24c349581774538e7e12eb401d8d1ed515f567a694733298dccd78767275b486fe6b77dc8e2e1b3692bc453ef2a7bd2a6f00f86664236e64558d0fc1cb44af2973956524efa91f542e04ef46832c2b7f16a95973e344a2efdf0a665c82794d695757be6d91045d7eb6cacc29ed0b0c0a7795c3cae9805e0b8417df424f53838", @typed={0x8, 0x76, @ipv4}, @typed={0x14, 0x0, @ipv6=@loopback}]}, @typed={0xc, 0x52, @u64=0x7}]}, 0x3dc}, {&(0x7f0000001e00)={0x104c, 0x30, 0x828, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x89}, @generic="2fbca8b4bf33bbbd9280ce6ccd41efb48b2593edd518384817201f81", @typed={0x14, 0x40, @ipv6=@local}, @typed={0x8, 0x47, @u32=0x7}, @generic="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"]}, 0x104c}, {&(0x7f00000003c0)={0x18, 0x31, 0x42a, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x94, @ipv4=@multicast2}]}, 0x18}, {&(0x7f0000002e80)={0x10, 0x25, 0x520, 0x70bd26, 0x25dfdbfc, "", [@generic]}, 0x10}], 0x7, &(0x7f0000002f40)=[@rights={0x20, 0x1, 0x1, [r3, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}], 0x60, 0x4000}, 0x800) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x17, 0x0, "10dec303415fe113b503cf1ae125cffac7e0f30f657e036d8beab09fd20f016238cbff4c48bedba30ba1508f70d88ebe0a077b1bb29ee38b71b351d15ce4ec82", "c3174cfe994a2869e5662e1e2a72e0fb06000000f2df380b95e5b25a31c801000100fe8bf214ff8e583ea7b0e03ff510bcddd4757451a798594da244e721450f", "a2b98fba2b259731fba7132ce30a6db82958009e4ff06da85422d63bc7d0db26"}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "858818c80a06f9419f0645f5c828aff30125fe03f167d575e66335269e4a2784b6fa7ca74f3c4fcc18a97b489efa6cbfc375b6099c15059172f17c8dac70b01b", "c56cc6030016763b68466b3882888b474c3d859b5a4d9ed3ad01737782ad10568d74c9ee09f808a2bb61eec4409ff01aeebedd00000000c71d77353820975691", "2c5c591f0dc612cbf01b5b40aab1963f73172251e32b2dd768558f22ee0a0acc"}) [ 386.341115] [] handle_mm_fault+0x221d/0x28e0 [ 386.341123] [] ? vm_insert_mixed+0x200/0x200 [ 386.341133] [] __do_page_fault+0x5af/0xd50 [ 386.341141] [] ? mm_fault_error+0x2c0/0x2c0 [ 386.341149] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.341157] [] do_page_fault+0x27/0x30 [ 386.341165] [] page_fault+0x28/0x30 [ 386.341174] [] ? do_sigaltstack+0x267/0x6f0 [ 386.341181] [] ? do_sigaltstack+0x271/0x6f0 [ 386.341190] [] ? security_file_ioctl+0x8f/0xc0 [ 386.341198] [] SyS_sigaltstack+0x6c/0x90 [ 386.341205] [] ? do_sigaction+0x8c0/0x8c0 [ 386.341217] [] do_syscall_64+0x1a6/0x490 [ 386.341224] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 386.690719] CPU: 0 PID: 24672 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 386.690723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.690737] ffff8801ab27f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 386.690747] ffff8801d86faf00 ffff8801ab27f7e0 0000000000000000 ffff8801ab27f808 [ 386.690757] ffffffff81cbab1b 00000000000067c2 ffff880199de8930 ffff8801d86fb00c [ 386.690759] Call Trace: [ 386.690771] [] dump_stack+0xc1/0x128 [ 386.690785] [] handle_userfault.cold.18+0x3e/0x51 [ 386.690794] [] ? debug_check_no_locks_freed+0x210/0x210 [ 386.690802] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 386.690809] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 386.690817] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 386.690835] [] ? handle_mm_fault+0x1267/0x28e0 [ 386.690842] [] ? handle_mm_fault+0x220f/0x28e0 [ 386.690850] [] handle_mm_fault+0x221d/0x28e0 [ 386.690857] [] ? vm_insert_mixed+0x200/0x200 [ 386.690864] [] ? __lock_is_held+0xa2/0xf0 [ 386.690876] [] __do_page_fault+0x5af/0xd50 [ 386.690883] [] ? mm_fault_error+0x2c0/0x2c0 [ 386.690890] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 386.690898] [] do_page_fault+0x27/0x30 [ 386.690906] [] page_fault+0x28/0x30 [ 386.690914] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 386.690924] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 386.690931] [] ? str_to_user+0xa0/0xa0 [ 386.690938] [] ? __lock_acquire+0x654/0x4070 [ 386.690947] [] ? exit_robust_list+0x220/0x220 [ 386.690955] [] evdev_ioctl+0x27/0x30 [ 386.690962] [] ? evdev_ioctl_compat+0x30/0x30 [ 386.690969] [] do_vfs_ioctl+0x1ac/0x11a0 [ 386.690976] [] ? ioctl_preallocate+0x220/0x220 [ 386.690985] [] ? selinux_capable+0x40/0x40 [ 386.690991] [] ? __fget+0x20a/0x3b0 [ 386.690997] [] ? __fget+0x231/0x3b0 [ 386.691002] [] ? __fget+0x47/0x3b0 [ 386.691010] [] ? security_file_ioctl+0x8f/0xc0 [ 386.691016] [] SyS_ioctl+0x8f/0xc0 [ 386.691023] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 386.691030] [] do_syscall_64+0x1a6/0x490 [ 386.691037] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 03:34:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x61) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 03:34:28 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0xfffffffffffffffe) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000000100)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 03:34:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0xfc9f73fa8eff0a1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000280)) setpriority(0x0, 0x0, 0x0) unshare(0x8000000) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r3, &(0x7f0000000000)=""/24, 0x18, 0x8, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x400, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000440)="3a98a57a6a3c0b038d1b407ae3603568", 0x10) mq_timedsend(r3, &(0x7f0000000100), 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000600)=@nfc, &(0x7f0000000680)=0x80) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[], 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000780)=""/228, &(0x7f0000000880)=0xe4) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x312) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xb61) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 03:34:28 executing program 0: chdir(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x40000, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200600, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/132, 0x84}, {&(0x7f00000002c0)=""/139, 0x8b}], 0x3, &(0x7f00000003c0)=""/187, 0xbb, 0xdd1}, 0x100) r1 = socket$inet6(0xa, 0x5, 0xfcf) getpeername$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @remote}, &(0x7f0000000500)=0x10) lseek(r1, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000540)="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", 0xff, 0x80, &(0x7f0000000640)={0x2, 0x4e21, @remote}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000680)={0xf75, 0x10000, 0x60c, 'queue0\x00', 0x3}) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) pread64(r1, &(0x7f0000000740)=""/155, 0x9b, 0x0) r2 = accept4(r1, &(0x7f0000000800)=@ethernet, &(0x7f0000000880)=0x80, 0x80800) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000008c0)={0x8}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000900)=0x800, 0x4) utime(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x1}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000a00)=@add_del={0x2, &(0x7f00000009c0)='veth1_to_bond\x00', 0x2}) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000a40)={0x8, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e22}}}, 0x108) ioctl$TIOCSCTTY(r0, 0x540e, 0x3) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000bc0), 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c40)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5f3d}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) accept$inet(r3, &(0x7f0000000d80)={0x2, 0x0, @multicast2}, &(0x7f0000000dc0)=0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000e00)=@req3={0x8, 0x7fff, 0x2, 0xcc, 0x8, 0x7a, 0x2}, 0x1c) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000e40)={{0x2, 0x4e22, @local}, {0x7}, 0x40, {0x2, 0x4e20, @local}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000ec0)={'erspan0\x00', 0x6}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000f00)='/selinux/context\x00', 0x2, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000f40)={0x98, 0x3ff, 0x71f02240, 0x94, 0x200, 0x3ff0}) 03:34:28 executing program 7: timerfd_create(0x7, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000034c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001180)='/dev/sequencer\x00', 0x280, 0x0) readv(r2, &(0x7f00000025c0)=[{&(0x7f0000000080)=""/213, 0xfffffffffffffe28}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001540)=""/217, 0xd9}, {&(0x7f0000000180)=""/4096, 0xfffffe9b}], 0x4) tee(r2, r1, 0x400000000008, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffff9c, 0x894b, &(0x7f00000011c0)) tee(r0, r3, 0x9, 0xa) 03:34:28 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) arch_prctl(0x1004, &(0x7f0000000980)="26b48c3098755439f40b27926ad26504f8c3b0001bf974781b0c66ff917c0c") r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000680)="691ee106e886c486875c5971") ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000480)={{}, 0x4000}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020201839400de5e6b6ba0c4936c81d4d2840054"], 0x1}}, 0x20000010) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000002380)={@mcast2}, 0x14) unshare(0x60000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)="60732a78303c98586a17a9aa55059baf1324a15a4b39e194ae7857f23d48e6eba9113f9e3d87be1a9a2e837bdb39c17d0585ee96e0a3257fb4b3aa95d7ad72f57cc40eebff6b9151b1321da5448150ef9dd5a8701bc73b0b5d1aa64f83579f36a3bc22635704d694331715fa758f530500172b2eb24e892c09fb", 0x7a}], 0x1, &(0x7f0000001000), 0x0, 0x4000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000180), 0x4) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000080)=0x54) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000240)={'filter\x00'}, &(0x7f00000002c0)=0x54) creat(&(0x7f00000009c0)='./file0\x00', 0x80) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000300)={'raw\x00'}, &(0x7f0000000380)=0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) preadv(r3, &(0x7f0000000940)=[{&(0x7f00000006c0)=""/232, 0xe8}, {&(0x7f0000000880)=""/176, 0xb0}, {&(0x7f00000007c0)}], 0x3, 0x0) ptrace$peekuser(0x3, r6, 0x5) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x40100, 0x0) mknodat(r3, &(0x7f00000003c0)='./file0\x00', 0x31, 0x5) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r7, r0, &(0x7f00000000c0), 0x1) 03:34:28 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x20) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14, 0x80800) connect(r0, &(0x7f0000000140)=@can={0x1d, r2}, 0x80) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000001c0)) ioctl$sock_ifreq(r1, 0x8949, &(0x7f0000000200)={'irlan0\x00', @ifru_flags=0x5200}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') write$P9_RLERRORu(r3, &(0x7f0000000080)={0x2b, 0x7, 0x0, {{0x1e, '*]posix_acl_access^ppp0trusted'}}}, 0x2b) 03:34:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 03:34:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) setresuid(r1, r3, r4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000440)={[], 0x8, 0x80, 0x3, 0x0, 0x6, r2}) sendmmsg(r0, &(0x7f0000000100), 0x400000000000384, 0x15) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) [ 387.210332] FAULT_FLAG_ALLOW_RETRY missing 30 [ 387.215037] CPU: 0 PID: 24742 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 387.222747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.232105] ffff88019e12f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 387.240174] ffff8801da3a8300 ffff88019e12fb20 0000000000000000 ffff88019e12fb48 [ 387.248226] ffffffff81cbab1b 0000000000000dca ffff880199ba0908 ffff8801da3a840c [ 387.256317] Call Trace: [ 387.258900] [] dump_stack+0xc1/0x128 [ 387.264261] [] handle_userfault.cold.18+0x3e/0x51 [ 387.270747] [] ? debug_check_no_locks_freed+0x210/0x210 [ 387.277743] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 387.284141] [] ? plist_del+0x14f/0x200 [ 387.289669] [] ? futex_wake+0x1aa/0x450 [ 387.295283] [] ? handle_mm_fault+0x1267/0x28e0 [ 387.301497] [] ? handle_mm_fault+0x220f/0x28e0 [ 387.307713] [] handle_mm_fault+0x221d/0x28e0 [ 387.313759] [] ? vm_insert_mixed+0x200/0x200 [ 387.319865] [] __do_page_fault+0x5af/0xd50 [ 387.325738] [] ? mm_fault_error+0x2c0/0x2c0 [ 387.331777] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.338423] [] do_page_fault+0x27/0x30 [ 387.343940] [] page_fault+0x28/0x30 [ 387.349196] [] ? do_sigaltstack+0x267/0x6f0 [ 387.355159] [] ? do_sigaltstack+0x271/0x6f0 03:34:29 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0xffffffffffffffff}) ioctl$EVIOCGREP(r0, 0x40047451, &(0x7f0000000000)=""/174) close(r0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)) [ 387.361115] [] ? security_file_ioctl+0x8f/0xc0 [ 387.367329] [] SyS_sigaltstack+0x6c/0x90 [ 387.373054] [] ? do_sigaction+0x8c0/0x8c0 [ 387.378834] [] do_syscall_64+0x1a6/0x490 [ 387.384529] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 387.410477] IPVS: Creating netns size=2536 id=52 03:34:29 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8949, &(0x7f00000001c0)={'tunl0\x00H\x00', @ifru_ivalue}) 03:34:29 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(r0, 0x82080) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 03:34:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2000000000000f, &(0x7f0000000040)=0x10004, 0x4) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)) socket$inet6(0xa, 0x7, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x40040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6=@ipv4={[], [], @broadcast}, 0x4e20, 0x0, 0x4e23, 0x5, 0xa, 0xa0, 0x80, 0x3f, r2, r3}, {0x7, 0x7, 0x4, 0x5, 0xfffffffffffffff9, 0x80, 0x7, 0x6}, {0x20, 0x4, 0xff, 0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x3, 0x0, 0x1, 0x3}, {{@in6=@local, 0x4d2, 0x33}, 0x2, @in6=@loopback, 0x34ff, 0x3, 0x1, 0x1, 0x7, 0x7ff, 0x1}}, 0xe8) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=""/204, &(0x7f00000002c0)=0xcc) r4 = socket$netlink(0x10, 0x3, 0x8000000003) writev(r4, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 387.580968] IPVS: Creating netns size=2536 id=53 03:34:29 executing program 5: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) open(&(0x7f0000000680)='./bus\x00', 0x40000, 0x10) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000300)={'teql0\x00', 0x9}) r0 = open(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffc, 0x1df) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={0x5, {0x2, 0x4e20, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @rand_addr=0x81}, 0x8, 0x10000, 0x3, 0x9d, 0x5c, &(0x7f0000000580)='bcsf0\x00', 0x3, 0x1, 0x7fffffff}) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="40e2e12b4329084f95d4523a3eb687448b96152f87b1ccf5ffe854c8547d9ef81bcefa38c007d7bba4cfcff10123c291f475f5905e574cedcf301c84ce91091c589414407a446a2b198542952926036730bb5d478375f9240e97169939c3088c52b4f8ed0e7de2462e61c6504395867d2ab76a203c9fd28263834484469ff6ae8eab2f17804ce4a025f234bda6a3813f4fd66f4a1d5af4013f5cc8dbe418b3888e2c81800d3253acf32b94a666546ebf71378052826b2c0bb0a92a21e471acbc660424a79789aed1b5dba705814a8b267d7915e8843b3a69cb86c52c912d1bf72db28a185606a492ad1a8e7fe8fb620500f26ebee84897"], 0x8c) recvfrom$packet(r1, &(0x7f0000000380)=""/252, 0xfc, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x70) ioctl$int_out(r0, 0x0, &(0x7f00000002c0)) socket$key(0xf, 0x3, 0x2) rt_sigaction(0x21, &(0x7f0000000180)={0x3f, {0xa24f}, 0xf94b1c9d7a79a00e, 0x10000}, 0x0, 0x8, &(0x7f0000000240)) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:34:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x6) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x204000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x3) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000002c0)=""/44) 03:34:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x15458527c3a772f5}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000010000101000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="002000000000000008001a0004000a00"], 0x3}, 0x1, 0x0, 0x0, 0x800000}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x37, &(0x7f0000000080)=0x8, 0x4) [ 387.684840] FAULT_FLAG_ALLOW_RETRY missing 30 [ 387.694553] FAULT_FLAG_ALLOW_RETRY missing 30 [ 387.694565] CPU: 0 PID: 24800 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 387.694571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.694590] ffff88019fe67950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 387.694603] ffff8801d86fbb00 ffff88019fe67b20 0000000000000000 ffff88019fe67b48 [ 387.694614] ffffffff81cbab1b 0000000000000dca ffff88019a200908 ffff8801d86fbc0c [ 387.694615] Call Trace: [ 387.694629] [] dump_stack+0xc1/0x128 [ 387.694639] [] handle_userfault.cold.18+0x3e/0x51 [ 387.694651] [] ? debug_check_no_locks_freed+0x210/0x210 [ 387.694661] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 387.694668] [] ? HARDIRQ_verbose+0x10/0x10 [ 387.694678] [] ? handle_mm_fault+0x1267/0x28e0 [ 387.694686] [] ? handle_mm_fault+0x220f/0x28e0 [ 387.694695] [] handle_mm_fault+0x221d/0x28e0 [ 387.694702] [] ? HARDIRQ_verbose+0x10/0x10 [ 387.694710] [] ? vm_insert_mixed+0x200/0x200 [ 387.694720] [] __do_page_fault+0x5af/0xd50 [ 387.694729] [] ? mm_fault_error+0x2c0/0x2c0 [ 387.694746] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 387.694756] [] do_page_fault+0x27/0x30 [ 387.694766] [] page_fault+0x28/0x30 [ 387.694778] [] ? do_sigaltstack+0x267/0x6f0 [ 387.694785] [] ? do_sigaltstack+0x271/0x6f0 [ 387.694794] [] ? security_file_ioctl+0x8f/0xc0 [ 387.694802] [] SyS_sigaltstack+0x6c/0x90 [ 387.694809] [] ? do_sigaction+0x8c0/0x8c0 [ 387.694817] [] do_syscall_64+0x1a6/0x490 [ 387.694825] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 387.919885] CPU: 0 PID: 24795 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 387.927596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.936940] ffff88019e877610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 387.944969] ffff8801d86fbb00 ffff88019e8777e0 0000000000000000 ffff88019e877808 [ 387.953005] ffffffff81cbab1b 00000000000067c2 ffff880198455130 ffff8801d86fbc0c [ 387.961067] Call Trace: [ 387.963643] [] dump_stack+0xc1/0x128 [ 387.969000] [] handle_userfault.cold.18+0x3e/0x51 [ 387.975480] [] ? debug_check_no_locks_freed+0x210/0x210 [ 387.982484] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 387.988870] [] ? mark_held_locks+0xc7/0x130 [ 387.994834] [] ? retint_kernel+0x2d/0x2d [ 388.000545] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 388.007387] [] ? handle_mm_fault+0x1267/0x28e0 [ 388.013715] [] ? handle_mm_fault+0x220f/0x28e0 [ 388.019951] [] handle_mm_fault+0x221d/0x28e0 [ 388.026005] [] ? vm_insert_mixed+0x200/0x200 [ 388.032056] [] ? __lock_is_held+0xa2/0xf0 [ 388.037856] [] __do_page_fault+0x5af/0xd50 [ 388.043735] [] ? mm_fault_error+0x2c0/0x2c0 [ 388.049690] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.056340] [] do_page_fault+0x27/0x30 [ 388.061858] [] page_fault+0x28/0x30 [ 388.067111] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 388.073928] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 388.080397] [] ? str_to_user+0xa0/0xa0 [ 388.085927] [] ? __lock_acquire+0x654/0x4070 [ 388.091971] [] ? exit_robust_list+0x220/0x220 [ 388.098104] [] evdev_ioctl+0x27/0x30 [ 388.103444] [] ? evdev_ioctl_compat+0x30/0x30 [ 388.109566] [] do_vfs_ioctl+0x1ac/0x11a0 [ 388.115272] [] ? ioctl_preallocate+0x220/0x220 [ 388.121502] [] ? selinux_capable+0x40/0x40 [ 388.127364] [] ? __fget+0x20a/0x3b0 [ 388.132629] [] ? __fget+0x231/0x3b0 [ 388.137896] [] ? __fget+0x47/0x3b0 03:34:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x61) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 03:34:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = open(&(0x7f0000000100)='./file1\x00', 0x8043, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000140)={@local, @local, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10002004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x923, 0x70bd25, 0x25dfdbfc, {0x0, r3, {0xffff, 0x5c7f4a354c410d1}, {0xfffb, 0xf}, {0xf, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000002c0)) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 03:34:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) dup3(r1, r0, 0x0) writev(0xffffffffffffffff, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 03:34:29 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x400000000000007) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") pipe(&(0x7f0000e2aff8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() readv(r1, &(0x7f0000616fa0)=[{&(0x7f0000e4bfb4)=""/57, 0x39}], 0x1) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000a44000)={0xffffffffffffffff, 0xffffffffffffffff}) getpriority(0x0, r3) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x7) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f00002cb000)={0x0, r3}) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000000)=""/207) recvmsg(r5, &(0x7f000070bfc8)={&(0x7f00001d6ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) personality(0x4200009) r6 = dup2(r1, r5) flock(r4, 0x1) tkill(r3, 0x16) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000100)) 03:34:29 executing program 6: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/member\x00', 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2400, 0x0) dup3(r0, r1, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write$P9_RSTATFS(r3, &(0x7f0000000040)={0x43, 0x9, 0x2, {0x5, 0xfffffffffffffbff, 0x1f, 0x470c7c1c, 0x800, 0x600000000, 0x0, 0x2, 0x10000}}, 0x43) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001000010009081000410400000000fcff", 0x58}], 0x1) [ 388.143067] [] ? security_file_ioctl+0x8f/0xc0 [ 388.149277] [] SyS_ioctl+0x8f/0xc0 [ 388.154443] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 388.160392] [] do_syscall_64+0x1a6/0x490 [ 388.166104] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 03:34:29 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @remote, 0x2}, 0x1c) flock(r0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @rand_addr=0x7}, 0x0, 0x0, 0x0, 0x82f, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8077f}, {0x0, 0x0, 0x0, 0xdb1}, 0x0, 0x6e6bb1, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x3, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e20, 0x9, @remote, 0x25d}, {0xa, 0x4e23, 0x2, @loopback, 0x7}, 0x9, [0x101, 0x4, 0x4, 0x1ff, 0x8001, 0x51, 0xff, 0xc]}, 0x5c) socket$inet6(0xa, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000200)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@broadcast, @empty, 0x0}, &(0x7f0000000280)=0xc) modify_ldt$write2(0x11, &(0x7f0000000400)={0xff, 0x20001000, 0x2000, 0xf2, 0x8, 0x1, 0x100, 0x1e9f, 0x9, 0x6}, 0x10) sendto$packet(r1, &(0x7f0000000200), 0x0, 0x20000000, &(0x7f00000002c0)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x3) 03:34:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 03:34:29 executing program 0: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@dev={0xfe, 0x80, [], 0x20}, 0x8001, 0x3, 0x3, 0x5, 0x1ff, 0x9, 0xfffffffffffffff9}, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0), 0x10) modify_ldt$read(0x0, &(0x7f0000000440)=""/121, 0xffffffde) 03:34:29 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x7f84, 0x1, 0x9, 0x0, 0x0, 0x8000, 0x5e, 0x395, 0x6, 0x3}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 03:34:29 executing program 6: r0 = socket$inet6(0xa, 0xdbb1d32b622ffa7c, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000001000), 0x9, 0x0, &(0x7f0000000000)={r1, r2+10000000}, &(0x7f0000000180), 0x2) 03:34:29 executing program 0: r0 = socket$inet6(0xa, 0xa, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") prctl$intptr(0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000200)) 03:34:30 executing program 6: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80000000000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) r2 = getpgrp(0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/ip_tables_names\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xdab15727c85a1301, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r2}) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 03:34:30 executing program 7: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000380)=0xdee6, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffff9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000280)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000480)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=""/2, 0x2}}, {{&(0x7f0000001e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002200), 0x0, &(0x7f0000000300)=""/79, 0x6}}], 0x1e6, 0x40000122, &(0x7f00000001c0)={0x77359400}) [ 388.417023] FAULT_FLAG_ALLOW_RETRY missing 30 [ 388.430458] CPU: 1 PID: 24864 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 388.438199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.447548] ffff8801b81af950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 388.455615] ffff8801d71f2000 ffff8801b81afb20 0000000000000000 ffff8801b81afb48 [ 388.463683] ffffffff81cbab1b 0000000000000dca ffff880199b73908 ffff8801d71f210c [ 388.471743] Call Trace: [ 388.474324] [] dump_stack+0xc1/0x128 [ 388.479683] [] handle_userfault.cold.18+0x3e/0x51 [ 388.486174] [] ? debug_check_no_locks_freed+0x210/0x210 [ 388.493189] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 388.499595] [] ? handle_mm_fault+0x1267/0x28e0 [ 388.505839] [] ? handle_mm_fault+0x220f/0x28e0 [ 388.512095] [] handle_mm_fault+0x221d/0x28e0 [ 388.518151] [] ? vm_insert_mixed+0x200/0x200 [ 388.524213] [] __do_page_fault+0x5af/0xd50 [ 388.530095] [] ? mm_fault_error+0x2c0/0x2c0 [ 388.536064] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 388.542731] [] do_page_fault+0x27/0x30 [ 388.548269] [] page_fault+0x28/0x30 [ 388.553541] [] ? do_sigaltstack+0x267/0x6f0 [ 388.559507] [] ? do_sigaltstack+0x271/0x6f0 [ 388.565476] [] ? security_file_ioctl+0x8f/0xc0 [ 388.571709] [] SyS_sigaltstack+0x6c/0x90 [ 388.577414] [] ? do_sigaction+0x8c0/0x8c0 [ 388.583213] [] do_syscall_64+0x1a6/0x490 [ 388.588918] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 388.620600] FAT-fs (loop6): Unrecognized mount option "net/ip_tables_names" or missing value 03:34:30 executing program 5: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000100)="ed96e22ad91fdb545f488f9db8b4cfb9ada971140d3228660d8cea20cba7cc39ff6204304d852cbaf6bfb0872b6a6a59c1892ff9debd9e85e561f60ecdae551183942c80150c3f1e0c62a8fc15decdc4b604e88652f3948dea206653ffd6db5f38ffe1f52afee8fcbd6cc6529dbe919f82a59e3d37d2cc99b7561e0e59b6f0147200", 0xffffffffffffff08, 0xe8d}, {&(0x7f0000000780)="cca71509dd5cc88ea4ab2779f2680767e4adad6557ce621c3bf4d70c81b8662df44f366ce33bad06a0456563de323cdfe40c67f66106c96262863eaa4bf0172d04298b462e6eba569a7fa5033f922670f5da7744966fbdaba3de3ea59a3835a22e71bc0c8436fd8c60345513d92577667cf2bb96d06ef16cb13689c689babd107707de8de21a7744b3e0b5c7e1d6aad4b61b31cab73ee9e4dbe093", 0x9b, 0x6}, {&(0x7f0000000340)="4e7e32e490060797de6714aca2f121b5871dd928410a21c8a44cf8a78be3d03a7b59a46b07b686ba6e40635e7ade04d9f619cdbef5e8b6ab5388f103657064a3601b50eff045ce9dc3d6131014526788cfc0070d2443d7e813e4ec2136d8324cde59f8e18acd4a93213d41b836ae35e437915da6bed9e554d98769061af56553e04b9caa1fa55f78825eb5a339f388333d8d9cfa7db158d49fadfa2371a04a1da187034e962b64cf33d8c81d96a516b88df72886faec38dfb46bb3585ae9d7e96fb8c3210962a24923e60f3b64b4c8efe9e41eb0fe302e0b8bee3a8c87518bd068fa", 0x16, 0x2}, {&(0x7f0000000000)="7f1ecb4e0c8fcf1c7151ab21467ffb9a4783a049d08b3576a867832c6ee088c6b89fe715439d1d396d53a6fe1d444230151126", 0x33, 0x4}, {&(0x7f0000000440)="05095f68e79001640c21440b4684aaa2b6dc9101e9e160da4994c3a60a7cbc8dc5d27a6766fdc3de7cefff8f50912f4b2d545052f4761b23f09109cfc5d992f2391ac897543de6c7d082710697cf411a8daf09651ff9cba82d7c5fc4985731f9155e225cc2c16ca7cc1cf6f03b5cb952b727fbe21e8654a28047b260a6b9dbd1fb1e3c7d2250950c727a93dac7be5877577817c0d7b6ffcd813798e13171bece96d5844f8891e3062d5e1b5fc2cd8496d50f9284269e96213068c8a291a8182655c85a5e05d07371eecd6c", 0xcb, 0x2}, {&(0x7f0000000540)="6c722a6abc663993f9a8b7801adb9d1a7a3f4bc2327040800feeecfdf2ea198466045e39204be5cc8ef579d7ddfcaaa5768528eb4caf0adc646161d57751d499c68a2b96db021bbe8c892f99f609469dc115a12b6a6e7bc097ed577d11644c41dd57d5d0e73a3833e0ad7e12e456598b5483379c34fbf17b61afcc625bd3b81ce132c0770e55d7d24a9bbf", 0x8b, 0x8001}, {&(0x7f0000000040)="8b5871a03354f74bc7d1530b", 0xc, 0xb4d6}, {&(0x7f0000000600)="d4a3a71741b1bc4a2bb5915c04c72e899bd809437f540b6379f893b06b0d149cb26f3802e40b6ad73c0f3a6e471616a94f2c3c935d34dd6a6b70347911c515adcf337f2e37e39e20f5d6d3a2bb2ac5e6a5c34f450cb6da70216b113e0d1384d71f3badf351ed31be453a4700617cf220f1d03e7a07137ccee6f3a41d1b4729f0c7b10e07558c63a84c149a9ed413d5b573142ad60e2ab63065bfb5729e3bdb445f8121d5a0380719e5557aa26bd2382fde3450e07604e0e445b6ebfbf6", 0xbd, 0x80000001}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='thread_pool=-']) 03:34:30 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000000c0)={0x6b, 0x5}) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x3) ioctl$BLKPG(r1, 0x40140921, &(0x7f0000000040)={0x0, 0x1, 0x1a5, &(0x7f0000000440)}) 03:34:30 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @remote, 0x2}, 0x1c) flock(r0, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@ipv4={[], [], @local}, @in6=@ipv4={[], [], @rand_addr=0x7}, 0x0, 0x0, 0x0, 0x82f, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8077f}, {0x0, 0x0, 0x0, 0xdb1}, 0x0, 0x6e6bb1, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x3, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e20, 0x9, @remote, 0x25d}, {0xa, 0x4e23, 0x2, @loopback, 0x7}, 0x9, [0x101, 0x4, 0x4, 0x1ff, 0x8001, 0x51, 0xff, 0xc]}, 0x5c) socket$inet6(0xa, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000200)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@broadcast, @empty, 0x0}, &(0x7f0000000280)=0xc) modify_ldt$write2(0x11, &(0x7f0000000400)={0xff, 0x20001000, 0x2000, 0xf2, 0x8, 0x1, 0x100, 0x1e9f, 0x9, 0x6}, 0x10) sendto$packet(r1, &(0x7f0000000200), 0x0, 0x20000000, &(0x7f00000002c0)={0x11, 0x17, r2, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180), 0x3) 03:34:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)=[0x568, 0x5e671037]) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000140)=""/26, 0x1a}], 0x1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000001c0)={'\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000380)=[{0xd8, 0x117, 0x400, "94200f2033ee375280f3ba9ba2c8e586c0bd0639fa6e49e5935c36391e46f1dd779a2ef9b2ea371355a4dddcd0f636683705d9d4655764fb19f6dcd8cbff08533bfe93a061cc2631cf122cb0b827bfda03501734395f6749c823779b6a67d22bf076837e17383b8eca6f2e1ec535d0d9c36a69a79496bdb591faa04c01154587cbf1c0feb832017302a46ecb5b53b63080c10a81aeb07cf9ab64e12dfb847cdc5040f9fc661b8a47d7cd990c4b67e4f46954c62879653339ee40631abeeff90db7448b2c0aaa2d"}, {0xd0, 0x115, 0x0, "9c53fb027fd4a5145ee10c4eda43755e2295d7afdcf0b60e5698df7bd85e26d984881cf3f347e92eab394a698c3a099be7ad9c46a4f26d328fcb0353fec7e64e0859cdca113f84672e3f01be00b08b4b48ae9a78237f1abc931732b5a763784413c0fc8d492153f884134560cf0d18c6f4b1076bf8df2454ef9ad956f4086e1a2184ac3d935535c06453e1f29e8e211eeb4ba18ea4bb76b23e1e9e4b53767439c4ec613f4796f343eed40ea28590c22acaf74f7617cfe277a7b9"}, {0xb8, 0x11f, 0xffffffff, "5c762efacc1ddb7e929c37e55bcdbbe97a1795ddf7d18c0db06d018d4ecbd770d56357a9b64e53569ed5af6eecab5d4414a15829d790bff1b88da19fdf5b6bd286a1cf8c12b5af3767d933f2bfef1bfa4eb87a5eba0a792fab17e27f7e60a6d5d60014a80cc47c8210933ac54f4669560158dfa1c219107ce0eac73a36dd3ea3201403ed5a9aebbc3c9a5bde4335eb563b06ca5a61c271bda4bb3548448d48dada0e1b51dd8ccf"}, {0x20, 0x116, 0x100000001, "3c9560ecf2e4d1a6b9"}, {0x18, 0x113, 0x8, "78dbf57e6b8d"}, {0xd0, 0x118, 0x3, "d49599ed4d6c1851358a89cadda2c931367eff2b48c8a973f9e98bdb21a7d01a761f231e753a5a719f1c12ed8f0d222c16165d12eed05415ce0fa63e517168884250be8cae69dae5f32408e2050b1697c2dd89306bf6f6606d2e8af551490350699c26a1a02feb638f4687a4fd98a3eb13a8e80e62a9610a1b4e7f4d346e3fb133b4432a74ecbb563785958f47f8c755e1149f803645a7da0b0810ef550c27826c7b1e4a7f507c5014831a00185bdb220152a566cb324ff873cbdbb156e95c"}, {0x20, 0x0, 0x5, "2fcc99296031109e6274b312cd27c0"}, {0x90, 0x104, 0x4, "168514b3075081eace0957f1e931a790e4520336847751b9d42b7a6348dba6308e8ae00a35802a8d8beb33bc64149aa73fee522c058021bfb4aecf9c8ada2f12538976843e8d28788012b0808c2812c8fa9a7312b84f914e7a0d3733713c4bb5824bd7c266cfc2f2a3f02d9289f2ff0c43b803fcab4cb42d5c685dcccf664b5e"}, {0x70, 0x103, 0x3f, "54eca1bf1a1f4c13cd5bb001e143acc369167187fa6e2345a12e3e190866917c79195249be43d0ec298542a7a4d04f1a72871984d4054e152cce021c18b06f60b9a5a35f7d21412a8c372aadc065b6db44d8a81bcddb8ff345"}, {0xa8, 0x0, 0xf9, "9481999543b92d078c5ee746f8e46aab404a795632912ecd953ca7145b9f69eb5390aac0d9024ebad7ec27e9f9b302422371ce193e6c62b6f4dae92f68bde2c7626d29e6be4d6a6b80c892b58e1d2786584cfa239a7192c9fb99c3c9207a17a9ccf85b587d9b9c2229348a4e45e1791af699a153e810735cd77bd5fc450f918b512e5e41562ef3ab22db17a5a8b40eb2d3a1dca65068c39e"}], 0x530, 0x20000080}}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) execveat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000b00)=[&(0x7f00000008c0)='\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='/dev/input/event#\x00', &(0x7f0000000980)='em0\x00', &(0x7f00000009c0)='/selinux/avc/cache_stats\x00', &(0x7f0000000a00)='\x00', &(0x7f0000000a40)='posix_acl_accesseth0bdev\x00', &(0x7f0000000a80)='/selinux/avc/cache_stats\x00', &(0x7f0000000ac0)='/dev/input/event#\x00'], 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r3) [ 388.670052] FAT-fs (loop6): Unrecognized mount option "net/ip_tables_names" or missing value 03:34:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet(0x2, 0x80003, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000480)=0x6e) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x9) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000200)={@loopback, @local, @rand_addr}, &(0x7f0000000440)=0xc) inotify_init1(0x80000) lgetxattr(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)=@random={'security.', '\x00'}, &(0x7f0000000140)=""/104, 0x68) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[]) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) [ 388.780506] md: invalid raid superblock magic on ram421 [ 388.805217] md: ram421 does not have a valid v0.0 superblock, not importing! [ 388.837046] md: md_import_device returned -22 [ 388.868888] md: invalid raid superblock magic on ram421 [ 388.887284] md: ram421 does not have a valid v0.0 superblock, not importing! [ 388.909771] md: md_import_device returned -22 03:34:30 executing program 0: clock_adjtime(0x0, &(0x7f0000000000)={0x27ff, 0x0, 0x0, 0x0, 0x0, 0x511d, 0x0, 0x0, 0x0, 0x800}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x1, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)={0x2}) 03:34:30 executing program 6: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mount$9p_xen(&(0x7f0000000080)='/\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='9p\x00', 0x7048, &(0x7f00000000c0)=ANY=[]) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x6, 0x8, &(0x7f0000000640)=[{&(0x7f00000001c0)="5dc2647e5b5702e2ddb70769938311fe7976c828ebd73ffe15e1f30f7eae481eb746378b2ee6565209939cb71913b92606d1cd5272fefd82c87d9e", 0x3b, 0x6}, {&(0x7f0000000200)="c901a512ff813afbf40977cf87860a9ae2c8c44dd120ae15641b14b0e23598a4e32fe843ef94979892fbaa7813809ec4d9fb656b97c83496eedace1f29e20ebab779c52ee1ec21088d8430c765f35602e82a7fa492a1d5443c7614fab06cb1413bd086672ca27c6956f40ef7ea070b91faea64", 0x73, 0x1}, {&(0x7f0000000280)="79ec7007397c67a06a7f4d17c3d2fe7fb0eede2956e227517dfe05f415a683d75e", 0x21, 0x8000}, {&(0x7f00000002c0)="f1b7af9434e26dfeb8d45a9ae156ed3ac1d3238a71be573e97df2c79b8be1a1dc8c39817c04d588b71b98e407cc02aa846623e13a1ad5e8c67a3bc9f4d6fbdddfacb86001588f83885de906c67a37224d360c08f15972ad2598d9d863c3a0aa59d6a041468c24a7044b2e46ae458e53f35dcc63b743cd59c91", 0x79, 0x7fffffff}, {&(0x7f0000000340)="789c6cc9f78a55a8a2b3840697ac84daef091efac012f1", 0x17, 0x4}, {&(0x7f0000000440)="d8febee8ecbd6bb428aea02abfec8bae43384b6b9eddde1c2882837dfb006a4ab50362f98175847b35ca0160ece2609a42413013ea409f5c92cca702836cbb30327a266986fae72542dd205768e6883d521f8cfa1d4d7adc402730fcecfbf342c163ad6e9fe2a9daae3c6d339a8b40b53dc4b777d2631218e4903479153b09867298b1e50c98c2823ab9923a3201379c3473fb15e9c4a27be6b20f7dc2038608fa6b295e17047580413d3c8c7ba139b887d7c38bdb540b1dc19b34937c72039f1e4acfcf301e36088cb939e9", 0xcc, 0x9}, {&(0x7f0000000540)="644f687616dad52cb5800fa7ce63b33c4218ba7d42decf58ad8f66b22edbfa426c158d7d60d976389dc65af9bc92c593da2df99dbbb2da25aa10f32c508f3fd7fb41b0695b27f6794f1d9d88ee30c143b9856792e656ecb0098d18ddc92f988624100ee691992c18ff9904cf1249dd31d6c7ab7c3b49d5a54c45c65c68209bca425a0075d5b5456cbf2e111f5f4d6c330cad02abd1aba4a61b86fed52672e6540583b2dc59bed55fa81f74d65bc71d6a6633e12958200fce983f0b10266db741f079b68960e3fc262a9a73af68d707b3c013d8bcc2212cd49139d4a42a", 0xdd, 0x4}, {&(0x7f0000000380)="bd874cdfb2abc382e6d41832788e721f1036781b7a708e2d5ec9f0d9df1df359a2dd8e46239966626ae6927919a1fd6729c46f6546e644c08c67f90cfa9e812c5b2ba06b37fb6a2eb322ebb9f40df216a2065912fb172d32c19d2eb699f39abd0e34e58533b347962f675b34dc410055192ba598", 0x74, 0xeb}], 0x80, &(0x7f0000000740)={[{@nomblk_io_submit='nomblk_io_submit'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x9, &(0x7f0000000dc0)=[{&(0x7f0000000780)="afffc17cd8de1beed5bab21d0b67becdb820dfe6a63c4d3bbf92a7c90329411f5ab22f176c29fd64e6977e1a9ccea385b89faa8ae1c7fa2d27241787691fdb76484d87f837578fbf9402d5709d084d7d50738085eaedb7d11bac", 0x5a, 0x7}, {&(0x7f0000000800)="77749eaea3c11c7e9380fcecbaf693aedd60539902485cd07e35c7e7ec3b346610001e9836884de5464fc29b11dceaf061d632281a094ff385ca37e53c888bc52a8b1c251748d95ecb6799061b05752e8bc109a4aa2175c4a947479462643659b685a1dc6cdea7c3760b676ca9c37d7fe94621c0c7f4468e94a03560bb78866924b8f416c09fbf1d656f0e8bb839992caa766cf300d24dbb3cdb57e6940fb30fdafd03bb9e14a10c04f822", 0xab, 0xa2}, {&(0x7f00000008c0)="b254548c9c15acd99d2d51a7e6197da1581773e6cf85d4199368181a9c639873932077b303350708cd8fe73f3e073c7137b3aa37b53cf45099b7629b595c6e8ad084a78770c464141e4ecede1528cdafca5b903afd987814e7dc232b37abec4953f310804a90b2e04a59ee0240b18832fe3da964e2cf535b39ce4041b719ec5adc6e95316c5a1caa8ab87c431dd18a2f5238e9a18fff96f0a59c7d79057bb3ec00213e7373d27acf710ecec5880747832bd07eb3af984e721f1b5ad553cd740dedbc1f896b455ddf809e2252f09ff97d99dc4164d4bcf369263a9b96", 0xdc, 0x3}, {&(0x7f00000009c0), 0x0, 0xffffffff}, {&(0x7f0000000a00)="d2da9694d3", 0x5, 0x1}, {&(0x7f0000000a40)="7bc84350f28eae343b3528a426d50f0b3ab71b0e61db83bbdb2f4535c44f6bb9cfd6490754c74542a328b287dd4b272d65b53b74c8455a1af17cc4192c5ba3e78bb7e8db3d8607beffe40b2c2a31477da908e184f667615cd6354ca5bf5a623a8dcfcbd2eb07efbefbce0afd051a22e2c69ca1560636d65a4f171647b7daa7ff652c8084d0118eadcb92502c2c65cd7b6939", 0x92, 0x2}, {&(0x7f0000000b00)="b05044e9644455c56e2f8d489206f9939152101940efbbbd3bc6d6498d7928f07919628fc13dbc06f4ce678a67a17da3e95be086742c4f31e460365e5b4fc1e654eb0d43760905cfba08f8f15c8812b3c7d12298a32b35ea9ef3d8a5aec660c105dfedadcb3642038d19d670a67a0165579e77e4fdcf0c62dac35da5b528e765b9dc129582ce998616a223c4d1df5a6c02fdef0d2a0ade005905370480da306afb973f73269c688d9d7441f4ae617105915e70c5eb7a17dfc2e29d7cebf095e1bc029faa40cb3d4c", 0xc8, 0x10000}, {&(0x7f0000000c00)="9bb2e7a1f94bf677e7676df92493ee093c9c272171ebe9a8b6df2f0a6f21d239f3c3ab36be6bdddc076efa0f6b0f4f95ea3cc904d7631b0a70bad22a984b70eb363a21c890ecb5192a834ddc17711b2161401c6ba97aec533550adb26cb9b1d4dcc36d569f42884cb9d519c0796ae22e2c1b591e2fd80f1e843f9a049f9c07dad2aec87bd8a7765feb6592b16d9fa6e43ef6245a8244bb35808f99742228cbdb75f2e00eeb3faa157e5d8ae43f6c0308addac94863b07ea4b04ce278008b7cb5d9c6caceb40b39dfe3f522c2e623cffa667f97cb4f8fde9af3c22b729f1654f431911a9c575fc2e75df31446c788", 0xee, 0x1f}, {&(0x7f0000000d00)="0c93a80633900b9a24d017e4a6c67f50d6780391da10a37e7a091de1e8abf16505c54d306fc1c069d69231ee23046c98194f5ef254f84fc93cc4b6b7dcd79262536994ef4a379572ce4f7af569f4351fe1c512513ec891faa8462083dfe122f22742e9f65539e3063017f06b3e2185cc5cb3f0d6a6b4e9431301ecf20a25304742ed793a59e9d20717aec17d488683fd537858f7764a1c2e65b72b16972cc02d6de58e", 0xa3, 0x2}], 0x30, &(0x7f0000000400)={[{@grpjquota='grpjquota='}]}) 03:34:30 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='ip6gre0\x00', 0x80000000}) mount$9p_rdma(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x40010, &(0x7f0000000280)=ANY=[@ANYBLOB='tranr=rdma,port=0x0000000000004e20,rq=0x0000000000000401,\x00']) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 03:34:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000), 0x0) 04:42:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000480)={0x140, 0x0, 0x2, [{0x3, 0x20, 0x0, 0x20}, {0x1, 0x8000, 0x7, 0x40, 'user_id'}, {0x6, 0x6, 0x0, 0x8}, {0x3, 0xcc1, 0x2, 0x3, 'fd'}, {0x2, 0xffffffffffffff00, 0x7, 0xacc1, 'user_id'}, {0x6, 0xffffffffffff73b9, 0x0, 0x3ff}, {0x2, 0x81, 0xd, 0x3, '/selinux/mls\x00'}, {0x5, 0x992b, 0x8, 0x80000000, 'rootmode'}, {0x0, 0x3d2e, 0x8, 0x72c2, 'group_id'}, {0x3, 0x0, 0x5, 0x18d, 'fuse\x00'}]}, 0x140) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="8243a4e8047a88996742aef9d6c4b5b59561a99f694ec1903b50e7b089b8122951ff745a74a9f2d4b5242b89dd5127edcdee876b55fca39d35386c7e17c2ab11949a0567a1"]) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000140)={0x18}, 0x18) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x400) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 04:42:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:42:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) dup3(r1, r0, 0x1000) [ 389.109871] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 04:42:46 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x111082, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) fchown(r0, r3, r4) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r5 = gettid() setpriority(0x0, r5, 0xffe) unshare(0x8000000) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x400, 0x0) mq_timedreceive(r6, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r6, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x2a9) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000780)=""/228, &(0x7f0000000880)=0xe4) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x3a9) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcdf) 04:42:46 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xffffffffffffffcf, 0x29, 0x2, {0x0, [{{0x2f, 0x3, 0x4}, 0x6, 0x7, 0x7, './file0'}]}}, 0x2a) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) [ 389.223786] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,,errors=continue 04:42:46 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x420000, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0xf070, 0x0) clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x1000, 0x200}, {0xf59d, 0x730}, 0x2, 0x5, 0x6}) setitimer(0x0, &(0x7f00000001c0)={{0x77359400}, {r2, r3/1000+30000}}, &(0x7f0000000200)) alarm(0x0) 04:42:47 executing program 7: r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x6000) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000002780)=""/191) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) r4 = gettid() process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/139, 0x8b}, {&(0x7f0000000240)=""/51, 0x33}], 0x3, &(0x7f00000026c0)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000002380)=""/232, 0xe8}, {&(0x7f0000000300)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002500)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x9, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fanotify_mark(r0, 0x2, 0x0, r0, &(0x7f00000002c0)='./file0\x00') sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) 04:42:47 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000200)='/dev/keychord\x00', 0x40000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6, @in6=@dev={0xfe, 0x80, [], 0x20}, 0x4e22, 0x0, 0x4e21, 0x3ff, 0xa, 0x0, 0x80, 0x3a, 0x0, r1}, {0xc8, 0xfffffffffffffffe, 0x4, 0x800, 0x0, 0x8, 0x0, 0xffffffffffffff7f}, {0x0, 0x8f5, 0x0, 0xfffffffffffff485}, 0x0, 0x6e6bb1, 0x1, 0x1, 0x1}, {{@in=@multicast1}, 0x0, @in, 0x0, 0x2, 0x3, 0x0, 0x80, 0x178, 0x9}}, 0xe8) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r2, &(0x7f0000000100)=0x4000000000000, 0x8) [ 389.576888] handle_userfault: 4 callbacks suppressed [ 389.576892] FAULT_FLAG_ALLOW_RETRY missing 30 [ 389.582647] FAULT_FLAG_ALLOW_RETRY missing 30 [ 389.582658] CPU: 1 PID: 24977 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 389.582663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:42:47 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x42103) write$sndseq(r0, &(0x7f00000000c0), 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x20000, 0x0) write$selinux_access(r1, &(0x7f0000000100)={'system_u:object_r:pam_var_run_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x9}, 0x5d) r2 = epoll_create(0x10000000000007e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000080), 0x8) 04:42:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x410001, 0x0) r1 = getpgrp(0xffffffffffffffff) mq_notify(r0, &(0x7f0000000400)={0x0, 0x10, 0x3, @tid=r1}) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) r4 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x10030, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=unix,noextend,noextend,loose,dfltuid=']) acct(0x0) ptrace$getregs(0xe, r4, 0x9, &(0x7f0000000180)=""/39) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r3, &(0x7f0000000340)=""/106, 0x6a) fallocate(r2, 0x3, 0x2, 0x0) close(r2) 04:42:47 executing program 7: madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2) prctl$getreaper(0x25, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x9, 0x3, 'client0\x00', 0xffffffff80000001, "a400499ffaabea12", "97d83ae8b501781e6a37ec5b3f27be108254515df13d63143028a54e9447be33", 0x6, 0x6}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000bf3000)) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) [ 389.582677] ffff8801cff9f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 389.582689] ffff8801d71f2c00 ffff8801cff9f7e0 0000000000000000 ffff8801cff9f808 [ 389.582699] ffffffff81cbab1b 00000000000067c2 ffff88019d82e930 ffff8801d71f2d0c [ 389.582702] Call Trace: 04:42:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x25, 0x100, 0x6, 0x9fe, 0x4, 0x2, 0x0, 0x6, 0x249, 0x40, 0x26, 0x1, 0x9, 0x38, 0x2, 0xfdc9, 0xf0, 0x3}, [{0x3, 0x9, 0xffffffffffffff2a, 0x7fff, 0x2, 0x8, 0x3, 0x4}], "4e19c7597a8d551ff1dd158df0e29a7eb2bafa0c27408b0203db4d4cb42d2a257eafe1ac8b18a427c5d19c2a6d9814e817bdb633387eab7334a8d8a477f72f35cdf8bae23de93cd0bff851fd9dd83ea2946a5921f6f7d506f1e50563440db9a963bc83aad8e6ae8b51c6a7995cf1896b5e3cea1c7fc377d04bfb6b6ff8df1ffa96eb6ee96cd2bdb602c70524e2b3163f32dfb83e1919afe4a464415ad71cf94826bed305e71830e0138033bea070bb2ae477b939a6aadf37c77117f7547fb73ecb64191471f3b3093ed4391fd22e021b40b7308dbe1638cbc6ea7900b6743f873be9810def5df288", [[], [], [], [], [], [], [], [], []]}, 0xa60) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000340)=""/246) [ 389.582716] [] dump_stack+0xc1/0x128 [ 389.582727] [] handle_userfault.cold.18+0x3e/0x51 [ 389.582740] [] ? debug_check_no_locks_freed+0x210/0x210 [ 389.582748] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 389.582757] [] ? check_preemption_disabled+0x3b/0x170 [ 389.582767] [] ? handle_mm_fault+0x1267/0x28e0 [ 389.582774] [] ? handle_mm_fault+0x220f/0x28e0 04:42:47 executing program 7: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0xfef56336d6a36671, 0x7, {0x7, 0x1b, 0x9, 0x2c00, 0x1000, 0x10040000, 0xffffffff, 0x80}}, 0x50) r1 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r1, 0x8912, &(0x7f00000001c0)="025cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 389.582782] [] handle_mm_fault+0x221d/0x28e0 [ 389.582790] [] ? vm_insert_mixed+0x200/0x200 [ 389.582798] [] ? __lock_is_held+0xa2/0xf0 [ 389.582809] [] __do_page_fault+0x5af/0xd50 [ 389.582818] [] ? mm_fault_error+0x2c0/0x2c0 [ 389.582827] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 389.582835] [] do_page_fault+0x27/0x30 04:42:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000), 0x0) [ 389.582844] [] page_fault+0x28/0x30 [ 389.582853] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 389.582865] [] ? evdev_ioctl_handler+0xb18/0x1820 04:42:47 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000280), 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) [ 389.582873] [] ? str_to_user+0xa0/0xa0 [ 389.582882] [] ? __lock_acquire+0x654/0x4070 [ 389.582891] [] ? exit_robust_list+0x220/0x220 [ 389.582899] [] evdev_ioctl+0x27/0x30 [ 389.582906] [] ? evdev_ioctl_compat+0x30/0x30 [ 389.582913] [] do_vfs_ioctl+0x1ac/0x11a0 [ 389.582919] [] ? ioctl_preallocate+0x220/0x220 [ 389.582927] [] ? selinux_capable+0x40/0x40 [ 389.582933] [] ? __fget+0x20a/0x3b0 [ 389.582940] [] ? __fget+0x231/0x3b0 [ 389.582946] [] ? __fget+0x47/0x3b0 04:42:47 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/enforce\x00', 0x10000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32=r0], @ANYRES64=r0], &(0x7f0000000340)=0x3) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') writev(r3, &(0x7f0000000080), 0x1a6) [ 389.582955] [] ? security_file_ioctl+0x8f/0xc0 [ 389.582962] [] SyS_ioctl+0x8f/0xc0 [ 389.582969] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 389.582976] [] do_syscall_64+0x1a6/0x490 [ 389.582985] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 389.658129] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 390.033702] CPU: 1 PID: 24982 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 390.041418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.050770] ffff8801b6ccf950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 390.058840] ffff8801d71f2c00 ffff8801b6ccfb20 0000000000000000 ffff8801b6ccfb48 [ 390.066900] ffffffff81cbab1b 0000000000000dca ffff8801d31a6908 ffff8801d71f2d0c [ 390.074958] Call Trace: [ 390.077540] [] dump_stack+0xc1/0x128 [ 390.082902] [] handle_userfault.cold.18+0x3e/0x51 [ 390.089394] [] ? debug_check_no_locks_freed+0x210/0x210 [ 390.096423] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 390.102828] [] ? plist_del+0x14f/0x200 [ 390.108369] [] ? futex_wake+0x1aa/0x450 [ 390.113991] [] ? handle_mm_fault+0x1267/0x28e0 [ 390.120223] [] ? handle_mm_fault+0x220f/0x28e0 [ 390.126453] [] handle_mm_fault+0x221d/0x28e0 [ 390.132513] [] ? vm_insert_mixed+0x200/0x200 [ 390.138573] [] __do_page_fault+0x5af/0xd50 [ 390.144458] [] ? check_preemption_disabled+0x3b/0x170 [ 390.151292] [] ? mm_fault_error+0x2c0/0x2c0 [ 390.157244] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.163889] [] do_page_fault+0x27/0x30 [ 390.169403] [] page_fault+0x28/0x30 [ 390.174661] [] ? do_sigaltstack+0x267/0x6f0 [ 390.180611] [] ? do_sigaltstack+0x271/0x6f0 [ 390.186568] [] ? security_file_ioctl+0x8f/0xc0 04:42:47 executing program 6: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x80, 0x40, 0x7bb1, 0x8001, 0x0, 0xece3, 0x0, 0x0, 0x78d, 0x3, 0x10000000000000, 0x1, 0x3, 0x10001, 0x8, 0xcb6, 0x200000, 0x5, 0x7, 0x2b, 0x2, 0x2, 0xfffffffffffffffd, 0x4, 0x7f, 0x1f, 0x7, 0x8001, 0x5, 0xf9ac, 0x3, 0x0, 0x7760, 0xd22d, 0x2, 0x7fffffff, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x2}, 0x14000, 0x1, 0x5, 0x1, 0x1, 0x1, 0xfffffffffffffffa}, r2, 0x10, r1, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0x39ce, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000240)="882a5117092885b12091a11e03d81c5a241fdc2613bde4b4bcaf56827d171e206615d333b02c976e52cc505e03ee5f48cfb3bb6c4816cbd8905e7ca25f2779cb6e73dcb012a8ce218c185741318b6644807cea81b3f27d6bea5198fe50ffb2a1", 0x60, 0x3}], 0x900028, &(0x7f0000000300)={[{@abort='abort'}, {@orlov='orlov'}, {@noauto_da_alloc='noauto_da_alloc'}, {@dioread_lock='dioread_lock'}]}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7, 0xac80) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000040)=""/159) setresuid(r4, r4, 0x0) prlimit64(r3, 0x0, 0x0, 0x0) tee(r0, r0, 0x0, 0x8) [ 390.192786] [] SyS_sigaltstack+0x6c/0x90 [ 390.198475] [] ? do_sigaction+0x8c0/0x8c0 [ 390.204248] [] do_syscall_64+0x1a6/0x490 [ 390.209960] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:42:48 executing program 5: prctl$intptr(0x22, 0x3) pause() 04:42:48 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x111082, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) stat(&(0x7f0000000700)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740), &(0x7f0000000c00)=0x0, &(0x7f0000000c40)) fchown(r0, r3, r4) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r5 = gettid() setpriority(0x0, r5, 0xffe) unshare(0x8000000) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x400, 0x0) mq_timedreceive(r6, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r6, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x2a9) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000780)=""/228, &(0x7f0000000880)=0xe4) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c460006610401000000000000000200030002000000120200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f7e7f00408afc55ccf5b4ba000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486112f23306477b3ced713d9ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db000000000000000000000000000000000000000000690eb33a31da74a43dafbb01120374215da8ce87cc93d3b23c45d6ba3523bfdc7dcf8b062675e337f234fc23dabf22331405a9478157843efe090e80dd82fad0ea292d"], 0x3a9) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcdf) 04:42:48 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 04:42:48 executing program 6: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000380)) listen(r0, 0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x1, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) socketpair$inet(0x2, 0x3, 0x400, &(0x7f0000002b80)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0}, &(0x7f0000002fc0)=0xc) lstat(&(0x7f0000003000)='./file0\x00', &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x400000000, 0x200000000082) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\x00\x00\x00'], 0x1}, 0x1, 0x0, 0x0, 0x8001}, 0x4c000) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f00000003c0)={0x2, 0xffffffffffffffab, 0x0, 0x0, 0x1, 0x80000001}) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000002b00), 0x2000005) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000002cc0)={'broute\x00', 0x0, 0x4, 0xd4, [], 0x5, &(0x7f0000002c00)=[{}, {}, {}, {}, {}], &(0x7f0000002dc0)=""/212}, &(0x7f00000002c0)=0x78) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000080)={0x11, @empty, 0x0, 0x0, 'lblcr\x00'}, 0x2c) setsockopt$inet_mreqsrc(r0, 0x0, 0x2f, &(0x7f0000000240)={@remote, @remote, @multicast1}, 0xc) 04:42:48 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x34) ioctl$void(r0, 0xc0045878) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0xff, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101081, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="0bf5430f081319", 0x7}], 0x1) r2 = gettid() sched_getaffinity(r2, 0x35b, &(0x7f0000000200)) 04:42:48 executing program 7: r0 = memfd_create(&(0x7f0000000540)="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", 0x0) write(r0, &(0x7f0000000080)="ab", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'ip6gretap0\x00'}) init_module(&(0x7f0000000140)='ip6gretap0\x00', 0xffffffffffffff01, &(0x7f0000000280)="23656d31842b00ffebfa694a0ea3bc97d9e2e37ad315bfb0f23a31664023ada5357f5334c9426a75722d9210323df1afa717f2ad6c324f4dbc1bf7caab8c57594d542468e29a7a0e63512b8c8450c712cb5a658aa17eb90835bc0a47ce19c0fcb3f18eda63964be2bbc9c50a0151427d32ffbe49648f7770249a2141f66350ec525ed6d7bf2d4000f06a0ef369fbcced3eda0d28194d382e42526f7e4875016c314123db214931b07d974f6f003c3e67e8d3122dd5d9f79e38126b67a54d4da3e7002e020600000090d3ad37730fa5dcbff7072e7e5eb3e851424c19b08c8bc5252e4f78aaaec4ec61f93c39d5050c3089a0c5609af91f51b742e32d1321daa9f6") socket$nl_xfrm(0x10, 0x3, 0x6) 04:42:48 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) socketpair(0x9, 0x2, 0x2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={@mcast2, @remote, @empty, 0x9, 0xff, 0x1f, 0x400, 0x1, 0x80000210, r3}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xd4}, 0x8) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000001c0)) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:42:48 executing program 7: r0 = socket(0x10, 0x4000000000000002, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/181) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0900004619118639c900de15a12d7770cc355f0000001b00000000000000000000000000000000000000000000000000000000000000000000000000567280813001016417fbf74166e78bff9d29a374611c40"]}) 04:42:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705fa669643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0xd88) capset(&(0x7f0000000000)={0x4000019980330}, &(0x7f0000001fe8)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x6, 0x100}}, 0x50) 04:42:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000), 0x0) 04:42:48 executing program 7: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0xd2, 0x9, 0x0, 0x6}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000140)) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 04:42:48 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) getdents64(r1, &(0x7f0000000340)=""/57, 0x39) sendmmsg(r0, &(0x7f0000001e80)=[{{&(0x7f0000000080)=@in={0x2, 0x4e20}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000080)}}, {{&(0x7f00000002c0)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000089080000000000000000000000000000001db4382c04c1d3e005643c543c1d702da8249ee9debd8e36ede34911b560ce437d2492dd3253b00f9f58c5858962aefe50f37eb92854de08bdaf59c62e64d67d04798cb604c5d62cbcc59a423fc6aa797b6100b89ce41f7bd9240738ea07487034337a10edeadcb4b1b5"], 0x18}}], 0x2, 0x0) 04:42:48 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getroute={0x1c, 0x1a, 0x303, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3900}}, 0x1c}}, 0x0) readahead(r0, 0x7, 0x1c000000) 04:42:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000240)={0x7, 0x3}) connect$netlink(r1, &(0x7f0000000040)=@proc, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getneightbl={0x14, 0x42, 0x426}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@getsadinfo={0x14, 0x23, 0x707}, 0x14}, 0x8}, 0x0) [ 390.833145] FAULT_FLAG_ALLOW_RETRY missing 30 [ 390.837810] FAULT_FLAG_ALLOW_RETRY missing 30 [ 390.837823] CPU: 1 PID: 25080 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 04:42:48 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000007c0), 0x2de, 0x0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r1, &(0x7f0000001400)=[{&(0x7f00000013c0)='8', 0x1}], 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x100, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22}, 0x10) write$FUSE_POLL(r2, &(0x7f00000003c0)={0x18, 0x0, 0x5, {0xfff}}, 0x18) setrlimit(0xf, &(0x7f00000006c0)={0x40, 0x1}) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000640)=@vsock={0x28, 0x0, 0x0, @reserved}, 0xfffffe14, &(0x7f0000000640), 0xfffffffffffffddf, &(0x7f0000002600)}, 0x0) quotactl(0xe38, &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000100)={0x1, 0x2, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local]}) getsockopt$inet_buf(r2, 0x0, 0x28, &(0x7f00000004c0)=""/179, &(0x7f0000000400)=0xb3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x103080, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) finit_module(r0, &(0x7f0000000340)=')keyring\x00', 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') getdents(r4, &(0x7f0000000180)=""/239, 0x28) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000580)=""/181, 0xfffffe01) [ 390.837829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.837844] ffff8801b8957610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 390.837857] ffff8801d71f2780 ffff8801b89577e0 0000000000000000 ffff8801b8957808 [ 390.837869] ffffffff81cbab1b 00000000000067c2 ffff8801d3c35130 ffff8801d71f288c [ 390.837871] Call Trace: [ 390.837885] [] dump_stack+0xc1/0x128 [ 390.837897] [] handle_userfault.cold.18+0x3e/0x51 [ 390.837909] [] ? debug_check_no_locks_freed+0x210/0x210 [ 390.837921] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 390.837934] [] ? unwind_next_frame+0x86/0xe0 [ 390.837943] [] ? __save_stack_trace+0x7d/0xf0 [ 390.837952] [] ? handle_mm_fault+0x1267/0x28e0 [ 390.837966] [] ? handle_mm_fault+0x220f/0x28e0 [ 390.837975] [] handle_mm_fault+0x221d/0x28e0 [ 390.837985] [] ? vm_insert_mixed+0x200/0x200 [ 390.837994] [] ? __lock_is_held+0xa2/0xf0 [ 390.838005] [] __do_page_fault+0x5af/0xd50 [ 390.838014] [] ? mm_fault_error+0x2c0/0x2c0 [ 390.838023] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 390.838031] [] do_page_fault+0x27/0x30 [ 390.838040] [] page_fault+0x28/0x30 [ 390.838049] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 390.838059] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 390.838067] [] ? str_to_user+0xa0/0xa0 [ 390.838075] [] ? __lock_acquire+0x654/0x4070 [ 390.838083] [] ? __lock_is_held+0xa2/0xf0 [ 390.838092] [] ? exit_robust_list+0x220/0x220 [ 390.838100] [] evdev_ioctl+0x27/0x30 [ 390.838108] [] ? evdev_ioctl_compat+0x30/0x30 [ 390.838116] [] do_vfs_ioctl+0x1ac/0x11a0 [ 390.838123] [] ? ioctl_preallocate+0x220/0x220 [ 390.838131] [] ? selinux_capable+0x40/0x40 [ 390.838138] [] ? __fget+0x20a/0x3b0 [ 390.838144] [] ? __fget+0x231/0x3b0 [ 390.838150] [] ? __fget+0x47/0x3b0 [ 390.838158] [] ? security_file_ioctl+0x8f/0xc0 [ 390.838165] [] SyS_ioctl+0x8f/0xc0 [ 390.838172] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 390.838179] [] do_syscall_64+0x1a6/0x490 [ 390.838187] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 391.352784] CPU: 1 PID: 25082 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 391.360588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.369928] ffff8801d8cd7950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 391.377969] ffff8801d71f2780 ffff8801d8cd7b20 0000000000000000 ffff8801d8cd7b48 [ 391.385994] ffffffff81cbab1b 0000000000000dca ffff8801d5c70908 ffff8801d71f288c [ 391.394090] Call Trace: [ 391.396658] [] dump_stack+0xc1/0x128 [ 391.402051] [] handle_userfault.cold.18+0x3e/0x51 [ 391.408526] [] ? debug_check_no_locks_freed+0x210/0x210 [ 391.415528] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 391.421915] [] ? plist_del+0x14f/0x200 [ 391.428041] [] ? futex_wake+0x1aa/0x450 [ 391.433645] [] ? handle_mm_fault+0x1267/0x28e0 [ 391.439875] [] ? handle_mm_fault+0x220f/0x28e0 [ 391.446105] [] handle_mm_fault+0x221d/0x28e0 [ 391.452157] [] ? vm_insert_mixed+0x200/0x200 [ 391.458211] [] __do_page_fault+0x5af/0xd50 [ 391.464074] [] ? destroy_inode+0xca/0x120 [ 391.469861] [] ? mm_fault_error+0x2c0/0x2c0 [ 391.475820] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.482637] [] do_page_fault+0x27/0x30 [ 391.488150] [] page_fault+0x28/0x30 [ 391.493406] [] ? do_sigaltstack+0x267/0x6f0 [ 391.499367] [] ? do_sigaltstack+0x271/0x6f0 [ 391.505316] [] SyS_sigaltstack+0x6c/0x90 [ 391.511004] [] ? do_sigaction+0x8c0/0x8c0 [ 391.516780] [] do_syscall_64+0x1a6/0x490 [ 391.522478] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:42:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = dup3(r0, r0, 0x80000) write$selinux_create(r1, &(0x7f0000000000)=@objname={'system_u:object_r:klogd_exec_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x80000001, 0x20, './file0\x00'}, 0x64) r2 = socket$inet(0x2, 0x100000000000003, 0x2000000088) sendto$inet(r2, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000280), 0x10) 04:42:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200) r3 = gettid() socket$inet6(0xa, 0x80000, 0x5) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x7cc, 0x2, 0xfffffffffffffffa, 0x80, 0x0, 0xa80, 0x40080, 0x0, 0xfffffffffffffffe, 0x4, 0x8, 0x6, 0x4, 0x3, 0x3, 0x1, 0x101, 0x9, 0x3f, 0x6, 0x6, 0x0, 0x5, 0xfffffffffffeffff, 0x4, 0x8, 0x9, 0xcd4, 0x6, 0x2, 0xb7d, 0x400, 0x5, 0xff, 0x3, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x100, 0x6, 0x1000, 0x3, 0x8, 0xa9, 0x8}, r3, 0xf, r1, 0x1) inotify_rm_watch(r1, r2) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000400)={'mangle\x00', 0xdf, "290e7aeb1a3e487c89edf45ab3c1e10362f430be20c9f4979bf446057b76cd14185bab569766f564d0bf5a817a3fb650be9230713a915dabf34e51aff99869eae9b48a50745ccf1fbdb125d9563ffa5f6613d32504a265687a926404b8fb681e9f2cf2543349cf065b7c45e140a390fe75ce7fc3955a26b53179c912d0b5a7f5109a25269bdad7434440f57ae45e2022a91840d800e1a02a52e3dc7c21939bf6616d0d77512c09a60b86262d38e3dc3971f985178528eae3a7c119f054d812348cc2992e6099f38f86613f1cb9dbd6aff882f0c3b1694c77feb119cdbc6284"}, &(0x7f0000000180)=0x103) r4 = dup(r0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000000000000185989fb46e2209092025aadc435951e0609cf78932b540b0c0f7013090964f73298"], 0x24}}, 0x20048040) recvmsg(r0, &(0x7f0000001ac0)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000001940), 0x0, &(0x7f00000019c0)=""/244, 0xf4}, 0x0) sendto$inet(r0, &(0x7f0000000180), 0xff9c, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 04:42:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) sched_setaffinity(r2, 0xfffffffffffffe96, &(0x7f00000000c0)=0x4) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x40) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0x22d, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x48}}, 0x0) 04:42:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = fcntl$dupfd(r0, 0x406, r0) accept4$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000100)=0x4) 04:42:49 executing program 1: r0 = socket(0x18, 0x0, 0x3) write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2c, 0x58, 0x3, 0x1, 0xfffffffffffff800, 0x2, 0x0, 0x20, 0x3c8, 0x40, 0x5c, 0x3, 0x3, 0x38, 0x1, 0x3, 0xb9, 0x1}, [{0x60000004, 0x100000001, 0x7, 0x2, 0x6, 0x0, 0x100000000, 0x100000000}], "514795102509c0dc", [[], [], [], [], [], [], []]}, 0x780) r1 = open(&(0x7f0000000080)="380d23b51125b9288a2bb2a1086d05c800", 0x8a000, 0x10) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/68) connect$unix(r0, &(0x7f0000006000)=@file={0x0, "380d23b51125b9288a2bb2a1086d05c800"}, 0x6e) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x0) 04:42:49 executing program 6: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') r1 = add_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 391.607043] device lo left promiscuous mode 04:42:49 executing program 7: r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x1, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x2, 0x0) ioctl(r0, 0x2, &(0x7f0000000240)="bd41ec911b73f9add5a6b5f1ff1ae5e5244ef3456189f5c6cd840a8757b27c26b74023826ba760c2fc4687613a0a4fbce7c16ab4d855eb5e8051e65428bfe8c8c6215ad89aca6aa9edb276c3af50badb68fa823793990290683e138b53573de6c7cdc98d375f594e3a8776e207e4f3e55a979a6cdbe7ec29bedc0bb35ec3118f1cde6a05c8d36e7b12509fdea29281afcd2c049e910c65ae9c06e6a2bf7354328135289c") openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r2, 0xa47) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340), 0x0, 0x0, r2) keyctl$search(0xa, r2, &(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, r3) 04:42:49 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000180)=""/127, 0x7f}], 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) fcntl$notify(r1, 0x402, 0x80000004) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000280)=""/176) close(r1) 04:42:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)}], 0x1) [ 391.629840] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 391.640637] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 391.651183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 391.659165] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 391.672925] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready 04:42:49 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000500)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x1000, @local, 0x4}}, 0x0, 0x1c, 0x0, "7e5b877c12f2b7ae336694baa12f77bad402dfb41e6719e0e079658897b27e4cca3ce73011f60f0f8e71a480943fa3dca65164de42c058bf5387e459a6dbc324e3c36003747dae4a61f25f0ee5cbff27"}, 0xfffffffffffffe1b) unshare(0x8008000000201) getsockname$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) bind$inet(r1, &(0x7f0000000540)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$inet6_buf(r1, 0x29, 0xd2, &(0x7f0000000240)=""/236, &(0x7f00000000c0)=0xec) fcntl$getown(r1, 0x9) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)) sendto$inet(r1, &(0x7f0000000440)="a48a8bdba6b5d8623f92605833684684398fef7d942b1d6bda6de49ea9504402d967f417366dd53c3fc4de0e4d9286874418107a5d4ccf470895ff9b7c3a707838092a95585f739da8ea8aa6e2194e410557cca3cd1acee177809044f605b56710a6865c5419f69f9f24c87f716f7dad216659592c", 0x75, 0x10, &(0x7f00000004c0)={0x2, 0x4e20, @rand_addr}, 0x10) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000380)={{0x6b5, 0x8f6}, 'port1\x00', 0x6, 0x810, 0x5, 0x8001, 0x6, 0x8, 0x6, 0x0, 0x5070e8a32da80c1c, 0x24}) [ 391.686493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 391.712952] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready 04:42:49 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1}, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000000), 0x800000bf) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000003c0)="1c21c45841b6e0c1b65b677dd95c01680411223001b5b192d877cc9243b914b51049253c72641dedf13fe27cfea0c8d8d547a996ef0013f065224ec594d76644653347deac2a") write$selinux_create(r2, &(0x7f0000000340)=@access={'system_u:object_r:apt_var_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x7}, 0x4a) ptrace$getregs(0xe, r3, 0x1b, &(0x7f0000000100)=""/73) getsockname(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x80) getsockname(r0, &(0x7f0000000180)=@in={0x2, 0x0, @local}, &(0x7f0000000200)=0x80) [ 391.746165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 391.765774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 391.786438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 04:42:49 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x800, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000380)='/dev/snd/seq\x00') r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getqdisc={0x3c, 0x26, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, r2, {0x7, 0xffff}, {0xf, 0xe}, {0xf, 0xb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4041) [ 391.798810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 391.806618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 391.814808] FAULT_FLAG_ALLOW_RETRY missing 30 [ 391.819808] CPU: 1 PID: 25171 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 391.827521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 391.836874] ffff8801cd677950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 391.844916] ffff8801d71f2d80 ffff8801cd677b20 0000000000000000 ffff8801cd677b48 [ 391.852941] ffffffff81cbab1b 0000000000000dca ffff8801998f5108 ffff8801d71f2e8c [ 391.860969] Call Trace: [ 391.863549] [] dump_stack+0xc1/0x128 [ 391.868902] [] handle_userfault.cold.18+0x3e/0x51 [ 391.875381] [] ? debug_check_no_locks_freed+0x210/0x210 [ 391.882381] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 391.888789] [] ? handle_mm_fault+0x1267/0x28e0 [ 391.895015] [] ? handle_mm_fault+0x220f/0x28e0 [ 391.901246] [] handle_mm_fault+0x221d/0x28e0 [ 391.907284] [] ? vm_insert_mixed+0x200/0x200 [ 391.913324] [] __do_page_fault+0x5af/0xd50 [ 391.919187] [] ? mm_fault_error+0x2c0/0x2c0 [ 391.925144] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 391.931787] [] do_page_fault+0x27/0x30 [ 391.937301] [] page_fault+0x28/0x30 [ 391.942560] [] ? do_sigaltstack+0x267/0x6f0 [ 391.948522] [] ? do_sigaltstack+0x271/0x6f0 [ 391.954490] [] ? security_file_ioctl+0x8f/0xc0 [ 391.960703] [] SyS_sigaltstack+0x6c/0x90 [ 391.966391] [] ? do_sigaction+0x8c0/0x8c0 [ 391.972171] [] do_syscall_64+0x1a6/0x490 [ 391.977876] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:49 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000200)={0x1f9, {{0xa, 0x4e21, 0x3a0f8924, @ipv4={[], [], @local}, 0x2}}, {{0xa, 0x4e22, 0x63f2, @empty, 0x10001}}}, 0x108) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd7aa, 0x7ff, 0xf, 0x9, 0x0, 0x6, 0x2, 0x4, 0x100000001, 0x8, 0x5, 0x10001, 0x5, 0x8, 0x7fff, 0x2, 0xefa, 0x0, 0x8, 0x4, 0x10000, 0x7ff, 0x9, 0x81, 0x8, 0x3, 0x2, 0xff8, 0x8000, 0xa37, 0x982, 0x10000, 0x8, 0x20, 0x40, 0x2a11, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x2}, 0x12001, 0x8, 0x4, 0x0, 0x8, 0x7, 0x7fffffff}, r3, 0x6, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0xa0) listen(r2, 0xfffffffffffffff8) 04:42:49 executing program 6: r0 = add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="6d54f7d0500555f71d571d2b8b6e4bc3a7223f370d40f89d58e13db00ff8947fd97430a05075bd5e0cdcc0ca8cb2e6effdb91dd1a9093ed51ee6d0311426f0568365c52232687b64d73f54be17115cc925366d18e6bdddf5d9f7e4ee31", 0x5d, 0xfffffffffffffffd) request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='cgroup\x00', 0xfffffffffffffffa) r1 = request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='keyring\x00', 0xfffffffffffffffa) keyctl$reject(0xc, r1, 0xfffffffffffffbf5, 0x7, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$reject(0x13, r2, 0x8, 0x0, r3) 04:42:49 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000004c0)={{0x6, @empty, 0x4e21, 0x0, 'none\x00', 0x0, 0x5, 0x12}, {@rand_addr=0x8, 0x4e20, 0x2, 0x5, 0x0, 0x1}}, 0x44) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x1, 0x10000}) socketpair(0x3, 0x5, 0x6, &(0x7f0000000140)) pwritev(r2, &(0x7f0000001400), 0x2a6, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000380)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) keyctl$read(0xb, r3, &(0x7f0000000280)=""/232, 0x63) 04:42:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) read(0xffffffffffffffff, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:42:50 executing program 1: mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000740)=0xe8) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, &(0x7f0000001300)=0xc) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f0000000b00)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x3) getgroups(0x1, &(0x7f0000000440)=[r1]) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)) stat(&(0x7f0000000d40)='./file0/file0\x00', &(0x7f0000000d80)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='reiserfs\x00', 0x0, &(0x7f00000003c0)) 04:42:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x42000000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000080)=0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x25}) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x40000008922, &(0x7f0000000000)={"736974300000000500", @ifru_flags=0x3001}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x6, {{0xa, 0x4e24, 0x0, @loopback, 0x5}}}, 0x88) 04:42:50 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) ioprio_set$uid(0xddcb85fb0b0a0f58, r2, 0xb20) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:42:50 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x9) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000004c0)={{0x6, @empty, 0x4e21, 0x0, 'none\x00', 0x0, 0x5, 0x12}, {@rand_addr=0x8, 0x4e20, 0x2, 0x5, 0x0, 0x1}}, 0x44) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x1, 0x10000}) socketpair(0x3, 0x5, 0x6, &(0x7f0000000140)) pwritev(r2, &(0x7f0000001400), 0x2a6, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000380)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) keyctl$read(0xb, r3, &(0x7f0000000280)=""/232, 0x63) 04:42:50 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000180)=""/127, 0x7f}], 0x4) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) fcntl$notify(r1, 0x402, 0x80000004) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000280)=""/176) close(r1) 04:42:50 executing program 5: pipe(&(0x7f0000000040)) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) getpriority(0x3, r1) r2 = creat(&(0x7f0000000680)='./file0\x00', 0x100) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_GET(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x205, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x4c, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, 0xe8) 04:42:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)}], 0x1) 04:42:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000040)='./file0/file0\x00', 0x4, 0xd00, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@fat=@nocase='nocase'}, {@fat=@time_offset={'time_offset'}}]}) 04:42:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) read(0xffffffffffffffff, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:42:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000008}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000100)=[@enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=[0x0]}, 0x2}}, @acquire={0x40046305, 0x2}], 0x1000, 0x0, &(0x7f00000002c0)="e1dd2729c6dc5848f8d6faea54eb5cf05b23bd0bf4e54e39bdb76a48aa60bdd39c13a1e75ceb14903b93506382c3b685269e954fa48f88f928b170ec209e06c482a03acddbde4012431e71599bd2ebedaca3d817381b6fce946aba26c328a9768014705032103d35e38c52dfdd444c6016bd558237bc17ed683c0e3fc81adf51db493b15251b60389b3161419c96827d9da568d3703f2cfe8362824704521ca19d5a0c16d53209b93b971e199e7fe3bcab9ebe20233394c7725276aeabd307f390b2f6294b3ad3dbea9b7d51a92c756e28b475eb6d284b6123201accbaaf3bb3a9a2be7d53ef34b90c3c5d310e7e061dda503a7f2021f197b132d8e1cabe623e4e7c7760442ca21db3c8c70e9f79b5baaba48c78e4a14552cb306a93ede4549a03e6761448daad1b034befcaa1f99a444a7e1a86db4246ac2ba76f3750ac819390dafd586133ab67632d79445b9bb057636143cd4e8aac6d16e1b07dbe496ff1d44e624c6c6b9ca5f730a6d0ba383fb76cda04c86ce09265d0df92274991b306cbc027b9902ace953e841693340662b68cca0f7828c0edb273954e2540d8ebb4d534ad8241dabb9ac269bec3647b35076f602a0013f117456c06293bfab2daf068b3c2bbdc1f335a4e7b7fe9fe04a817b0d738f08cb919a004523ab81b5a399e23c51bf0afc54a2d884029b681eac3f056873bcde040189a3db1ca9fbc1cb481b01fb33cebabd8fb41276071db937bee3352120d76df2aac7f917746ae67ec772f7c2ccf9ff7d01f0b0ef452021c837001cebd3f90c1c3660d8df8abd3784b8944bf507f8fb188c4abb786cf193c14aae1323660345d8c9a95a762490b62cf92348b8b09aaa7d3a54311cc04691b3aca1591595631baa55a5d62785130770cdccb0dc261b48071cef9204314eb0016d9a56110cb481823f647ae7136313bcbe556c797ea5768d231d0e5efe9f72bc69757ae4be69db1a84f057d9082eb0df1b61bdfb15d105027fad1bee6077f4713f0adbd35f978f40d9c975cba4803dd558460ecec5e0bedf1b5d26593d64e9dd8d7448c998b30dbc4ce8f0b872d089e8c614a629e1000eaf954325bcb681f9fd8601f6f3fd66f80724a4db7d50c44e3870ca0297c5d484abb1448fde3207323d6142ca4679af8eb59f33f25dbae023ecf2c13c04c102ec57acfa36bbf0729da9626da7e3e71a180493af68399508e7b7a622658927a8cd77b3f635cb502c2c01d7b36c1036faaeffa9ed5ada4bae9bdb53db08ba5a231dfd6a8a64c2c1a4bcbbc565be5939da3fa2c9d76685893c16d93a7b3a2ba71fff4808624c1f3ccd1e2932f469a95e67503d5e9138062ad33671d9ae5bafbb8523a569f80ac4d4aba2bc55d9020a81d3da3b5f7da63e62f98324edeb1d577c52347894c21adf0ef4f6694e14f6f65151ef99f654b208ad4af3951ae0bf20fdb65eb7686374eceeca83ea5fbc27563b102182f665b5b96c61af9904113e22a1cf6a3dbc1c5cda0d310edfb38e3d819081661ebbf6682b5fe7badc1fada479517604218e23469dc5d99c52e26b44e8e2d51475fb8816d0a7b23de5b47458eba2a1d797c8a6157f475e30a69aeb53866095ab684fad0daa36369af384cf76391a2677b0f05adc900a7d66c2db70c6dca3663f545e4359ff7009397550115ab65224f2cbed855fc3871cfd51775dae902eece8b8e152d870bfe2fa174c7bad1a33f8d49a819fadf85cbc96d31332b3f112d72f795b301f8fd7ec2c707906a53815c9eaf71ae181d78d12faf0cf33fc1a0bfde473dd1fb92e3212a1a4beba9e75abc7ef02a704a3a0a820075d1a95d57d9ac8c0e3b7b04c8d0bafa9af4c1db73d27401291200254163160d2dea3eff48dca310043f721e8015a3b166725b24d03625f50816bd24fa58039c5485058774d3c6f32411a8edbb97e4fb25277889535f8e174b9c92134dd5291bfc3e7ab685642aab90c4c942376439586a1609d73196ae5315cbccf8b4fb178640c364f15ffd898ec16f4e2b887802e5a6994077597ef9fbdec5e84ff5a621da29bd307f541d06a39866b55cef4cc7ec4a383dce6c648fc64acaf271e38acebf4c1cab89be414e2f87e77dc69f9a6e887eabe2bed1e1420c49a03c002d1349497f1d6276fef02456cb4ce71670b0393ec357bf95f932a0b35ecd6292ee5eb504bd4992853ecdd0bf54d93df1ace83dea1e0fb763580f2be7e2adbb2751128be5bff785e183901017b721ed630b70fb485b0c9b13760e00ea9a50601f0e70640a4648c1cb89e5541e956d62ddafce073ded0290f7964f39b16aab49f7bba73f23a020e9eeec0561a646b1f7eeaa13f023ac3e515ce1a15bcd86528a97e30b752654a3fae1f13aac103ed5314eadb276c5483a9eac87765dcca6a3a3b707e511c713cc4e8f0586cf405b9646555970caff357002be3a7f3a801f23c70c50642fd156f8ee763475be454a449bcc1547f37df898140e1b61a9ca3e8d9447c64671dbb636b85089084537512dd6dbf82da6e09f80330edc21405015a3a2e34fe2800e553831a998e8012b4273fbea9ded8d5778850463297d5a19686dd31d7678b1ab1b513bf6748582237d96afb425d0d552ed5062d862e02ec089653a0bdcdca0ab544f4c5cb435ed47286b4bf203309a7f5531f1a8264563454905b89ce732ce7d0f9760e8d043db47ede6af11c775a1da1761fb5cc060068bb946d73851c0201e0dea3d9a3884b15f0df9710aac87bddc98b0c7ca181630b527fbfa2ca7b14eca4a4ec1127f4d6982de4f905f4eece036ef8c55a2ee949d1adcedaa942b838cc73db0278723642aca44e966ff7189bd9ae85fcf1f0ce2c9d411163d4fc72dce34405d8a730ca5ef6a398db81dc0c82c1775f7ad11ce820324fc3a7ccb811908d09ecf00882be3c4d9b6caff913016ceca4693069e0e27af4cf634e5df746cadd974240fc3a578ade200e63372b7e5013057fd0f0dd8b791cbc3b996ddc76e1a54704fc760c98737fa0c717cabbc151a630314e5468f54e94b148afe3a51b93458c8e7b72f75f605b71e87f76584251cec8dc6fbb8f8fc2abef5a90e0124535b61d29c437fedd178beada7aae2a84d097c2aa8feb3a8386e4bb06d197f7b11910324597b51b06d35c52389d8a9faafef3ccddb465761b9ffd42e27464b068e0f8157d87a42a7503be3ccd3dc55a81ba738058f0d08287e32b11ccf80490ae6b0113ee341c15ab9f307a94365ea023ef2166edf0a11ea6a71960ddd44c002d2903fe4c386b3979ec35fbb4390d63b4c193d41a08d3a076563e4fd7ed750f560e824c334093a14cd6df9919101fb2668e9a57288322a244e42eb6f952efab928c1b766104e98151eefe3f999948e0b6e4fb9d4a45ea38109d74d9daf55cc8d3c24709c35be7d2e91802cbf10759c27de10addecd4be0add00f6d25f2a56edd36d0383dc8bd6f3e7a20a854a55d33d2f9a648b23475a5601c910223e7b286bf49f95ecb7705b2e9967f96b7fb601cb01590e6341601a29714b27fcadb25c0dcc92cfed32dc3179a3d00ecbadd380ec1a86927e353353ba3aedbf529a30b2d15c93ab4224229458cdade3faa8dd92dd0c7c248c105ae59d88a6e1a02a36f0d9c50083c6430f28a5f54ec4fe59e3c93ade3087fcc3a66744835b89f4c65d8bc5ac81357ed6828b09f3230a8ce637e48dab2fbd1849354151ddda17e10cee1c828f49c2a03fcfc3fcf13b97c7828b2eec2e54036ae13211c1b1942ec1e766516a8133eed88d52c898746e28e179d4085e25c076b03a2d4cca5dddd7660a5efe908d4b885d1ed90f1595ab2105458655d53de6628364dd69527cf46e361eb8225a2ec4e169879953e2c98169e74a0926e9cdaadfc72b0bd9407d3e29421b535b2d6e56e59ceec4677989dccd107c240aae6f9b6bac5cee5bb13c5fbf696c8df5c611c093bc426d3230c1c6c889cd386b47b1f45655d21f6d27efb268eadc30d553e61cbe7a23d575ec70e4f91a3db4d6abc8b8cd617aa8754435f281a762bea4322bd656058477c0dc48418847329ba80d8010018e6fa70512ed2e34d774fac892f8ac439b4c554afcf10e54bc176b8e3061a0b0b090d0ee6a941aac75abde9b5c0532525fa34c7b9bade78fe30af4da162c2517f8e150f34efea2be00defed35e5cb81cba00cdde89a13d76e0861a01551f17a2a0e0418b43f9b4622a582521f861496cc3884e6ebb317b33f7df67a8d93f2a622bbf61d174804e5b44dc96c20abc14a4932312eec2688ffa1a496525d91e7924c261accf348a70bf1c4ac301ee0b631f482823e2336336e4f9bf3fbb1560864bb6f3acb333f9e1e8f704f5a45fe747d11dc62d3e068fe91dd890ee0be6acf4800fda4dfef73798d1a6cc99c2a33e98a6003dbc12291444ce2f8af39abec8be448b38d8320bba07942287e56d04912b6235b1040fc2b0d118ddb517d7d50f2d3853f631f2c3a3d2be7ef318355340f566f3bfb976e3a96918f6597519699c9d3f25f60a90fef737dc564086ba869761a3ee7b6c6af662092f9438b38c8e8e19c055ef522fbc63c91e73cea2ac909ee1b7d270a43e7c8f918be4b58701504c64a45e05aa00104f603d1b6e20d23a1d1df2ef8e880a45d2b93fc518d4f4f7cb32c4dec06fed3c904ff604793805a32496c643ab60b254efbb85f49290983fd47df6741591766f37d17d03b1d189e9ea41ffc350578f8cb563c923003bdf61fab70f0c199f7dbb44a93b393bfc0b6a3d92817ec441b778c3f4b95dcad748223eaa34f2ee997d5e88c3ae2aad80c9bc8f5c6a96e87b1903c27281616ae33d1ef8e77134452e2bff7529bbf51e8a6bbde1cda75c296c1e63a89cecfc33d9b3fe0c1e56e1ac34fdacd63b008bb4fda7353fe292b39dc6d6e9407f7f1ee1f8943a9698f01395708f581496d0948f0146752ad1a51cbb2a5f10cab87535df5ce31e315f9258b36f1ed2972c0727c340d31682aec4479a7145be07cf43381038370e5f2516d44071c6f8f880ba1ec3ec3351afd7ecd5acaef98e6a17207c2e8a9d24cac747a68526b4bc1941d5de19c489098931317eb2844cb7da6bd95c6b5abac9044c7daf3531cc1fdb10a8a5c9d2369b76af5a321f0851d63b3ec3749e51d519d36254e32b937631f97300f410dcb553954de26d16d0dce0956dcd5d5a68962a32db136e33abaf02e5ab7996570f432456da0547518334bbe892f25cd31a7118b271cd719a2853560c8a43b985f67cf296a21e94adce6e11e1945a9b7f5fbc6ff3846ddb9bdfc280e0d4a207044efd256608ceb117a54340293d7485bc66d655a253259b4ebdedf2e37937784e14a02413a85342022a42c83ba022509cdcba7fa3b1c4ca423b703ce5e42583cecabede6ff3138240ab7839022824e2c2406ac16b603dcc27cc5b6d57889aff2edb1b2c067299c84ac3a3444d95369b652b24d56e3d8f3728c2a49c280787377d4d84d7d7072bfc273f77aec91ae5b17abeca01ce4b7e1a920c44f21621333cbca404f9b099a5f053ddf865ed8f67a394b90c89c18bb207fe9d3004b202718f3ee452706c229e73b5c3386466bede79c236714ddb65d61ee6cf3e795513cc3e58de84aeab33f081c34191174ab5e81e80de18ab9ccba50d2e1b2ce6e59fbf081c390c4bcc6e1b5646a4d3950372360cea316df61ce73d03df3394c869d52293101814c81349bf5ef76d11968fd0757b420202bc327a9a0f770fd728f34c2bd75e4411ea52467562912924b0bc64f3077c530555676006b902dff"}) splice(r0, &(0x7f00000001c0), r0, &(0x7f0000000200), 0x80b3, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") close(r0) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x1012, r2, 0x0) [ 392.518195] FAULT_FLAG_ALLOW_RETRY missing 30 [ 392.518926] FAULT_FLAG_ALLOW_RETRY missing 30 [ 392.518936] CPU: 0 PID: 25209 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 392.518941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.518955] ffff8801cffb7610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 392.518966] ffff8801c3c3aa80 ffff8801cffb77e0 0000000000000000 ffff8801cffb7808 [ 392.518977] ffffffff81cbab1b 00000000000067c2 ffff8801c1ba2130 ffff8801c3c3ab8c [ 392.518979] Call Trace: [ 392.518993] [] dump_stack+0xc1/0x128 [ 392.519003] [] handle_userfault.cold.18+0x3e/0x51 [ 392.519013] [] ? debug_check_no_locks_freed+0x210/0x210 [ 392.519025] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 392.519035] [] ? check_preemption_disabled+0x3b/0x170 04:42:50 executing program 7: capset(&(0x7f0000000000)={0x400019980330}, &(0x7f0000000080)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73111dc10e74cc542b00000000006ad61b749c8cfb0f8403a01b7c35d81782db295caf30a748c4b550a708b5edcd9e9ad56cce9d1d3a581d313850f54985c08c1e7e"], &(0x7f0000000040)='\x00', 0x1, 0x0) [ 392.519043] [] ? check_preemption_disabled+0x3b/0x170 [ 392.519052] [] ? handle_mm_fault+0x1267/0x28e0 [ 392.519060] [] ? handle_mm_fault+0x220f/0x28e0 [ 392.519068] [] handle_mm_fault+0x221d/0x28e0 04:42:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) read(0xffffffffffffffff, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:42:50 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68), 0x0, 0x0, &(0x7f0000000680)}) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x1, &(0x7f0000000240)="978f310356df10f2a1cd73fffe3320cf9a5cf73f3804d58d2e7173bcbfcf8ee1c055b948b33229458bfee2a02f68138c49fa42980568b98259b3332fff1a1371e657ac5f85e66983e551dacbdc9fcd0a82ad2b323ab4981e8e05378e7cb85c336a75932b406aa41a30cd39973a7408f78540f22bcd06b99d6809a194bc5b421206e8ed3e4a5f96517ca9a5fb17936d1ac4207dcadeba75bff198728c6942a1f985091a7456516d799bb4f87d1ae95145ad8e10119e0fa2c03647a2aba0957915458c6c19660d7470ff4a4e18358ef9152188aa9d1a0cb2e544d6c4af2062d2b86469507de560f2d5435325d8063e78e00e12e554ff0000000000000000f0b0a9203fa096b70889acb58e41c42c35eca52984339899d03a5475ce2da4763cb19379d151f9646855b65a3844948de2a2cc4a9bf6f9bf84cf713ca7cff2cbc4cf1b670fbdbc9c448634bd7ba8dd31aecc6509be387aa7a78a13c6ba38a15fde009aa746e4ef8afac592f51e435a79240058ba588e8dd7262c81cee1dcd0ea56829b3d1da88b1c10768b2c824aae02") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) [ 392.519076] [] ? vm_insert_mixed+0x200/0x200 [ 392.519083] [] ? __lock_is_held+0xa2/0xf0 [ 392.519092] [] __do_page_fault+0x5af/0xd50 [ 392.519100] [] ? mm_fault_error+0x2c0/0x2c0 [ 392.519109] [] ? trace_hardirqs_off_thunk+0x1a/0x1c 04:42:50 executing program 1: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'veth1\x00', {0x2, 0x4e24, @rand_addr=0xff}}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="88d8b99616f9c8c9c3e1b4f24542611fc27b0755f08ed77b1bbc4cde7c1b2ab364f7b790a9e88d0810eb9f17fdf4b181d53e319f884f1687f59c1e9c68ab5f763e0378dc0ee193f8fb43a8196474adfc05034fd8b8e30155496f466cd58f0efa1fc5bb263d96428ab34b17678c08d33567642a9ad7eb909d9d75a995a1800c538764fe5cad6d051bb012de189c11eccc3112dcc6e83e5925be299c01f7f70e159041eef2fc63d3ebdbc765ba7f364eb715a4db46d0755330a8fda371f96588"], 0x1}], 0x1}, 0x0) sendmmsg(r3, &(0x7f0000000040), 0x47, 0x0) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 04:42:50 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303041303030303030303030303030303430301f302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x2001, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0xfffffffffffff716}}, {@blksize={'blksize', 0x3d, 0xe00}}]}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x101}}, 0x30) read$FUSE(r0, &(0x7f0000002000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) 04:42:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x8000000000000001, 0x9, &(0x7f0000479000)="890528e4", 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f000063a000)=0x7fff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000080)) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 04:42:50 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) [ 392.519116] [] do_page_fault+0x27/0x30 [ 392.519125] [] page_fault+0x28/0x30 [ 392.519133] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 392.519142] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 392.519149] [] ? str_to_user+0xa0/0xa0 [ 392.519156] [] ? __lock_acquire+0x654/0x4070 [ 392.519165] [] ? exit_robust_list+0x220/0x220 [ 392.519173] [] evdev_ioctl+0x27/0x30 [ 392.519180] [] ? evdev_ioctl_compat+0x30/0x30 [ 392.519188] [] do_vfs_ioctl+0x1ac/0x11a0 [ 392.519195] [] ? ioctl_preallocate+0x220/0x220 [ 392.519203] [] ? selinux_capable+0x40/0x40 [ 392.519209] [] ? __fget+0x20a/0x3b0 [ 392.519215] [] ? __fget+0x231/0x3b0 [ 392.519221] [] ? __fget+0x47/0x3b0 [ 392.519228] [] ? security_file_ioctl+0x8f/0xc0 [ 392.519235] [] SyS_ioctl+0x8f/0xc0 [ 392.519242] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 392.519248] [] do_syscall_64+0x1a6/0x490 [ 392.519256] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 392.523635] IPVS: Creating netns size=2536 id=54 [ 392.567230] IPVS: Creating netns size=2536 id=55 [ 392.654326] IPVS: Creating netns size=2536 id=56 [ 392.914209] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 392.963039] CPU: 1 PID: 25221 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 392.970739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.980085] ffff8801d4587950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 392.988134] ffff8801c3c3aa80 ffff8801d4587b20 0000000000000000 ffff8801d4587b48 [ 392.996184] ffffffff81cbab1b 0000000000000dca ffff8801b68a0908 ffff8801c3c3ab8c [ 393.004215] Call Trace: [ 393.006791] [] dump_stack+0xc1/0x128 [ 393.012150] [] handle_userfault.cold.18+0x3e/0x51 [ 393.018627] [] ? debug_check_no_locks_freed+0x210/0x210 [ 393.025632] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 393.032030] [] ? handle_mm_fault+0x1267/0x28e0 [ 393.038258] [] ? handle_mm_fault+0x220f/0x28e0 [ 393.044484] [] handle_mm_fault+0x221d/0x28e0 [ 393.050562] [] ? vm_insert_mixed+0x200/0x200 [ 393.056616] [] __do_page_fault+0x5af/0xd50 [ 393.062486] [] ? mm_fault_error+0x2c0/0x2c0 [ 393.068446] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.075100] [] do_page_fault+0x27/0x30 [ 393.080619] [] page_fault+0x28/0x30 [ 393.085875] [] ? do_sigaltstack+0x267/0x6f0 [ 393.091830] [] ? do_sigaltstack+0x271/0x6f0 [ 393.097791] [] ? security_file_ioctl+0x8f/0xc0 [ 393.104008] [] SyS_sigaltstack+0x6c/0x90 [ 393.109705] [] ? do_sigaction+0x8c0/0x8c0 [ 393.115490] [] do_syscall_64+0x1a6/0x490 [ 393.121179] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 393.531738] pktgen: kernel_thread() failed for cpu 0 [ 393.536993] pktgen: Cannot create thread for cpu 0 (-4) [ 393.542447] pktgen: kernel_thread() failed for cpu 1 [ 393.547657] pktgen: Cannot create thread for cpu 1 (-4) [ 393.553225] pktgen: Initialization failed for all threads 04:42:51 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffedc, &(0x7f0000000180)=0x9) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={0x6}, 0x8, 0x80800) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000200)=0x9) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x80800) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x1, @loopback}, 0x1c) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioperm(0x5, 0x70000000000000, 0x5) sendmmsg(r2, &(0x7f00000002c0), 0x4cc, 0x20007ffc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000240)=0x10) 04:42:51 executing program 7: pipe2$9p(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) r2 = openat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x80, 0x5c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'bond0\x00', 0x211}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="b5000000070100ac0065746830e87ddc08962917937426f980b73b7573656df0e81475151e81b825e976ff48f6ea6e2ff178a259fdbc2912411deb78a48a542a591d594e7025f0e5504ffa591de6a5b0f2a28df294edae6c8d8b89e2541a31ac12c41261e9d22c0b2392d998f53e5ace19b58094f78c72298fd7712cd917fd2c7afab2a3538088b07ade479da234c1999ee8794bf8f0318a22e3f5b91da121"], 0x9f) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000380)={0x2, 0x9, 0x100000000, 'queue0\x00', 0x9}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)={{r3, r4/1000+30000}, {0x0, 0x7530}}) write$P9_RFSYNC(r1, &(0x7f0000000300)={0x7, 0x33, 0x1}, 0x7) 04:42:51 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xf25ed287e9d713c5) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0xffffff92, 0xfffffffffffffffd}, {0x400000000000000, 0x800000000000001}, 0x1000, 0x8, 0xfffffffffffffffe}) recvmmsg(r0, &(0x7f0000003840)=[{{&(0x7f0000000200)=@ax25, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000300)=""/37, 0x25}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/254, 0xfe}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/146, 0x92}], 0x6, &(0x7f0000000640)=""/3, 0x3, 0x7}, 0x6}, {{&(0x7f0000000680)=@hci, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)=""/61, 0x3d}], 0x1, &(0x7f0000000780)=""/4, 0x4, 0xc754}, 0x80000001}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000840)=""/255, 0xff}, {&(0x7f0000000940)=""/131, 0x83}, {&(0x7f0000000a00)=""/169, 0xa9}, {&(0x7f0000000ac0)=""/21, 0x15}, {&(0x7f0000000b00)=""/211, 0xd3}], 0x5, &(0x7f0000000c80)=""/4096, 0x1000, 0xc7b}, 0xffffffffffff7fff}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001c80)=""/47, 0x2f}, {&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f0000002cc0)=""/184, 0xb8}, {&(0x7f0000002d80)=""/215, 0xd7}, {&(0x7f0000002e80)=""/182, 0xb6}, {&(0x7f0000002f40)=""/130, 0x82}, {&(0x7f0000003000)=""/58, 0x3a}, {&(0x7f0000003040)=""/136, 0x88}, {&(0x7f0000003100)=""/155, 0x9b}], 0x9, &(0x7f0000003280)=""/133, 0x85, 0xff}, 0x3}, {{&(0x7f0000003340)=@l2, 0x80, &(0x7f0000003600)=[{&(0x7f00000033c0)=""/114, 0x72}, {&(0x7f0000003440)=""/235, 0xeb}, {&(0x7f0000003540)=""/27, 0x1b}, {&(0x7f0000003580)=""/78, 0x4e}], 0x4, 0x0, 0x0, 0x3ff}, 0x9}, {{&(0x7f0000003640)=@ax25, 0x80, &(0x7f0000003740)=[{&(0x7f00000036c0)=""/100, 0x64}], 0x1, &(0x7f0000003780)=""/133, 0x85}, 0x4}], 0x6, 0x40000003, &(0x7f00000039c0)={0x0, 0x989680}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000100), 0x9, 0x1, &(0x7f0000000180)={r1, r2+10000000}, &(0x7f00000001c0)=0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x800, 0x6, 0x5, {0x0, 0x1c9c380}, 0x6, 0x875}) 04:42:51 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 04:42:51 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x26140, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x20}}, 0xc) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000440)={0x1, {{0x2, 0x0, @multicast2}}}, 0x108) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000100)) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) write$FUSE_WRITE(r2, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0x5, {0x4}}, 0x18) 04:42:51 executing program 6: timer_create(0x40000, &(0x7f0000000300)={0x0, 0xfffffffffffffffe, 0x0, @thr={&(0x7f0000000700), &(0x7f00000007c0)}}, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="027e52280000000002000001fbdbdf25"], 0x10}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f00002dfff4), 0xc, &(0x7f0000e2a000)={&(0x7f00000000c0)={0x14, 0x1, 0xa, 0xfffffffffffffffd}, 0x14}}, 0x0) 04:42:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)}], 0x1) 04:42:51 executing program 1: sched_setscheduler(0x0, 0x3, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000040), 0x84000) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) 04:42:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000380)="d76216c623619df1", 0x8, 0x0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@empty, @dev}, &(0x7f0000000040)=0x8) 04:42:51 executing program 6: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x200) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f0000000240)=0x10) sendfile(r0, r1, 0x0, 0x10000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4ee, 0x0, 0x0, 0x0, 0x0, "31047706d306d1a27eb8d75ba2b7494617d0b94944d96963928a8c81642c3b7e016ba8de85085a0215dcc08177d6d8717fcf2b820c7e7300e498a85652ea44de", "cd2a1c7f91d359483eaa76d58740df924b33830717a0f8e6342a7b9aa11a3f77482832c375a5c166a4ec31d4a25aee002b1bd6baba0276cd48b47f3a47917215", "6adcfc30119d8eb798de5e9c1980c8bb785aaf0b748067e1f91ae09be1b0e87e", [0x652, 0x100000001]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80002, 0x0) sendfile(r0, r1, &(0x7f0000002000), 0xffffffff000) [ 393.702109] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹¡! [ 393.729256] FAULT_FLAG_ALLOW_RETRY missing 30 [ 393.729268] CPU: 1 PID: 25314 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 04:42:51 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) [ 393.729280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.729296] ffff8801a455f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 393.729308] ffff8801c3c3ac00 ffff8801a455fb20 0000000000000000 ffff8801a455fb48 [ 393.729320] ffffffff81cbab1b 0000000000000dca ffff88019dc18908 ffff8801c3c3ad0c [ 393.729323] Call Trace: [ 393.729336] [] dump_stack+0xc1/0x128 04:42:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000280)={0x0, 'veth1\x00', 0x3}, 0x18) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r2, &(0x7f0000000400)=""/135, 0x74) close(r2) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000001780)) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000780)=""/4096) accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c, 0x800) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x6, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x0, @loopback, 0x64}}, {{0xa, 0x0, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) accept(r1, &(0x7f0000000700)=@l2, &(0x7f00000003c0)=0x80) 04:42:51 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() sched_setattr(r0, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x101, 0x1, 0x6, 0x0, 0xb898}, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) syz_open_pts(0xffffffffffffffff, 0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000000140)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r2) [ 393.729347] [] handle_userfault.cold.18+0x3e/0x51 [ 393.729359] [] ? debug_check_no_locks_freed+0x210/0x210 [ 393.729371] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 393.729379] [] ? debug_check_no_locks_freed+0x210/0x210 04:42:51 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x0, 0x7ff0000000000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x1, 0x100, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x9b, 0x9bfb, 0xc01, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x91b9}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x5) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8683, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, r0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000700)="76cb858c8084806aba6afb950459282c968e42e2e70bb815515caf2ccb04ba22beca6ccb2d04892a3a46", &(0x7f00000000c0), &(0x7f0000000540), &(0x7f0000000580)) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x46e32c5fc9a7cae7) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) setpgid(r3, r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x2, 0x0) r6 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x101000, 0x0) flock(r1, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) dup3(r9, r8, 0x0) writev(r8, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r9, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r10 = socket$netlink(0x10, 0x3, 0xc) writev(r10, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) ioctl$RTC_ALM_READ(r7, 0x80247008, &(0x7f0000000300)) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000680)) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x5c, 0x0, @scatter={0x0, 0x0, &(0x7f0000000500)}, &(0x7f0000000580)="da845aca5dc25ccfb98985d85fd5545abd013c3b82b5c3e6fee1e1af2b9a0693a7af3aa9db9a0006584e6fc258d2d3d3a626fffaa0bcf6342594ea8e487109202b9d535a907653c8659d3ea8aba8de60717c3140d21db2d8c1a7ec67", &(0x7f0000001740)=""/208, 0x0, 0x0, 0x0, &(0x7f0000000380)}) openat$tun(0xffffffffffffff9c, &(0x7f0000000600)='/dev/net/tun\x00', 0x460000, 0x0) openat$cgroup_procs(r5, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000002c0)={0x2, &(0x7f0000000180)=[{0x13, 0x7, 0x6}, {0x3, 0x401, 0x0, 0x6}]}) 04:42:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80040, 0x0) clock_gettime(0x7, &(0x7f0000000100)) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x6, {0x7, 0x1b, 0x8, 0x1000, 0x6102e961, 0x5, 0x8, 0x101}}, 0x50) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffff05a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe(&(0x7f00000003c0)) [ 393.729389] [] ? handle_mm_fault+0x1267/0x28e0 [ 393.729396] [] ? handle_mm_fault+0x220f/0x28e0 [ 393.729399] FAULT_FLAG_ALLOW_RETRY missing 30 [ 393.729406] [] handle_mm_fault+0x221d/0x28e0 [ 393.729413] [] ? vm_insert_mixed+0x200/0x200 04:42:51 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r3 = gettid() unshare(0x8000000) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x31e, 0x6, 0x10001, 0x0, 0xb6, 0x20, 0x0, 0x0, 0x0, 0x7, 0x6, 0x101, 0x6, 0xb3a, 0xbad4, 0x6, 0xa9f4, 0x0, 0x7, 0x8, 0x1ff, 0x0, 0x2, 0x7fffffff, 0xba7, 0xe2, 0x2f, 0x0, 0xac3c, 0x0, 0x40, 0x9, 0x80, 0x5, 0x0, 0x0, 0x2, 0xc38107c0ffcf990f, @perf_bp={&(0x7f0000000480), 0x4}, 0x100, 0xffff, 0x2, 0x5, 0x7, 0x1f, 0x471}, r3, 0x0, r1, 0x0) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000180), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[], 0x1013a) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x8000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c460006610401000000000000000200030002000000120200000000000040000000000000000c02000000000000a6d10000030038000200ffffffff468051e57464030000000300000000000000bc08000000000000f9ffffffffffffffff7f0000000000000600000000000000000800000000000005000000020000006f000000000000000000000000000000ea2b000000000000080000000000000003000000000000000800000000000000f8d1cf6bc8252c025b5f92a84bb4d5efd7201c0b3858f135eeae2dc7f0e87b4cb7c2ebe8e1bf26d90204e8796ae2234ab4507f89e0a927c56e06ac8486242f23306477b3ced713d9ccd7a0f1572c2cfeceaf21bfb67974157e7a4e10510b1d74ca0f796a92f62c8102c33ef139e0cf2ccd4388e8404194afc7dcb3c0580904a76736e493f5c3e2f26e041f6b30857e8c9b55fe64259328116a71513c065b05319d42f98f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x2f5) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c582beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a4f837d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3a88d0f4a450d86548a1a9b1cc1bee45e6a4e2c4e09cd69a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc6220847666f8f52c4571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18ea3bfacf9662601fc9868329b3524cb8c07850726355bd748f7c51b32e6c4341676cef6af55351e599d196d38d63bf0cd20b85f4bc79a2895b9c5c4d46090b4e1a10394f8ba7201d45d3878dc9b3e7ec3510073424b92a7448f9d8d9c15fff2a1c0e6dde7e6ad83f6243b21c6c14bd1b36e834b9cdc2b09022c0ddad8b5cdedb4a9e401acd96b77825cf6cb459e0c70b310c4d6f7a192c6766e75b4b50e64680b8bbe41065eac33f24c280ae6d89ef5fad05d8a9b635b052176cc3a9c2c9ffd43c0530deafd29079147dd34b5cd866"], 0xc3c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000003c0)={{0x5, 0x10000}, 0x0, 0x8, 0x5, {0x1, 0x1}, 0x3}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/user\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000200)={0x18}, 0x18) 04:42:51 executing program 2: mmap(&(0x7f0000014000/0x2000)=nil, 0x2000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000015000/0x3000)=nil, 0x3000}) close(r0) [ 393.729423] [] __do_page_fault+0x5af/0xd50 [ 393.729431] [] ? mm_fault_error+0x2c0/0x2c0 [ 393.729438] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.729446] [] do_page_fault+0x27/0x30 [ 393.729454] [] page_fault+0x28/0x30 [ 393.729462] [] ? do_sigaltstack+0x267/0x6f0 [ 393.729469] [] ? do_sigaltstack+0x271/0x6f0 [ 393.729477] [] ? security_file_ioctl+0x8f/0xc0 [ 393.729485] [] SyS_sigaltstack+0x6c/0x90 [ 393.729493] [] ? do_sigaction+0x8c0/0x8c0 [ 393.729499] [] do_syscall_64+0x1a6/0x490 [ 393.729507] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 393.729516] CPU: 0 PID: 25305 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 393.729522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.729534] ffff880198bcf610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 393.729545] ffff8801c3c3ac00 ffff880198bcf7e0 0000000000000000 ffff880198bcf808 [ 393.729555] ffffffff81cbab1b 00000000000067c2 ffff8801980cb930 ffff8801c3c3ad0c [ 393.729556] Call Trace: [ 393.729564] [] dump_stack+0xc1/0x128 [ 393.729572] [] handle_userfault.cold.18+0x3e/0x51 [ 393.729582] [] ? debug_check_no_locks_freed+0x210/0x210 [ 393.729590] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 393.729598] [] ? check_preemption_disabled+0x3b/0x170 [ 393.729607] [] ? check_preemption_disabled+0x3b/0x170 [ 393.729616] [] ? handle_mm_fault+0x1267/0x28e0 [ 393.729625] [] ? handle_mm_fault+0x220f/0x28e0 [ 393.729633] [] handle_mm_fault+0x221d/0x28e0 [ 393.729640] [] ? vm_insert_mixed+0x200/0x200 [ 393.729647] [] ? __lock_is_held+0xa2/0xf0 [ 393.729655] [] __do_page_fault+0x5af/0xd50 [ 393.729663] [] ? mm_fault_error+0x2c0/0x2c0 [ 393.729670] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.729678] [] do_page_fault+0x27/0x30 [ 393.729684] [] page_fault+0x28/0x30 [ 393.729692] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 393.729701] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 393.729710] [] ? str_to_user+0xa0/0xa0 [ 393.729717] [] ? __lock_acquire+0x654/0x4070 [ 393.729726] [] ? exit_robust_list+0x220/0x220 [ 393.729734] [] evdev_ioctl+0x27/0x30 [ 393.729741] [] ? evdev_ioctl_compat+0x30/0x30 [ 393.729749] [] do_vfs_ioctl+0x1ac/0x11a0 [ 393.729756] [] ? ioctl_preallocate+0x220/0x220 [ 393.729764] [] ? selinux_capable+0x40/0x40 [ 393.729770] [] ? __fget+0x20a/0x3b0 [ 393.729776] [] ? __fget+0x231/0x3b0 [ 393.729782] [] ? __fget+0x47/0x3b0 [ 393.729791] [] ? security_file_ioctl+0x8f/0xc0 [ 393.729798] [] SyS_ioctl+0x8f/0xc0 [ 393.729805] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 393.729812] [] do_syscall_64+0x1a6/0x490 [ 393.729820] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 393.891772] binder: 25327:25332 transaction failed 29189/-22, size 0-0 line 3013 [ 393.895954] binder: undelivered TRANSACTION_ERROR: 29189 [ 393.971593] FAULT_FLAG_ALLOW_RETRY missing 30 [ 393.971605] CPU: 0 PID: 25340 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 393.971610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.971626] ffff8801ac2a7950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 393.971638] ffff8801c3c3a000 ffff8801ac2a7b20 0000000000000000 ffff8801ac2a7b48 [ 393.971650] ffffffff81cbab1b 0000000000000dca ffff8801a454d108 ffff8801c3c3a10c [ 393.971652] Call Trace: [ 393.971671] [] dump_stack+0xc1/0x128 [ 393.971685] [] handle_userfault.cold.18+0x3e/0x51 [ 393.971697] [] ? debug_check_no_locks_freed+0x210/0x210 [ 393.971708] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 393.971718] [] ? plist_del+0x14f/0x200 [ 393.971729] [] ? futex_wake+0x1aa/0x450 [ 393.971742] [] ? handle_mm_fault+0x1267/0x28e0 [ 393.971751] [] ? handle_mm_fault+0x220f/0x28e0 [ 393.971761] [] handle_mm_fault+0x221d/0x28e0 [ 393.971768] [] ? vm_insert_mixed+0x200/0x200 [ 393.971779] [] __do_page_fault+0x5af/0xd50 [ 393.971787] [] ? mm_fault_error+0x2c0/0x2c0 [ 393.971796] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 393.971804] [] do_page_fault+0x27/0x30 [ 393.971812] [] page_fault+0x28/0x30 [ 393.971821] [] ? do_sigaltstack+0x267/0x6f0 [ 393.971828] [] ? do_sigaltstack+0x271/0x6f0 [ 393.971836] [] ? security_file_ioctl+0x8f/0xc0 [ 393.971845] [] SyS_sigaltstack+0x6c/0x90 [ 393.971852] [] ? do_sigaction+0x8c0/0x8c0 [ 393.971858] [] do_syscall_64+0x1a6/0x490 04:42:52 executing program 7: r0 = dup(0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f00000001c0)='net/netlink\x00') sendto$inet6(r0, &(0x7f00000007c0), 0xfffffffffffffcda, 0x0, &(0x7f00008d4fe4)={0xa, 0x0, 0xfffffffffffffffe, @loopback}, 0xd) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x0, 0x80) sendto$inet(r2, &(0x7f0000000240)="2590e75c", 0x4, 0x4004040, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0), &(0x7f0000000880)=0xffffffffffffffaa) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x3) 04:42:52 executing program 0: r0 = add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x8002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000580)=""/180, &(0x7f0000000640)=0xb4) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000480)={0x1, 0x0, {0x6, 0x36, 0xb, 0x6, 0x0, 0x0, 0x2, 0x169, 0x1}}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000440)) request_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000240)='}\x00', r0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x0, 0xc) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) write(r3, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300", 0x18) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r5, &(0x7f00000003c0), 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000540)={0x0, &(0x7f00000006c0)=[{0x1, 0x8000, 0x8, 0x3}, {0x1ff, 0x8000, 0x4, 0x2}, {0x1, 0xa9, 0x1, 0x7}, {0x8001, 0x1ff, 0x4, 0x9}]}, 0xf1) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'lo\x00', r6}) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) clone(0xbd319029ddd0a11b, &(0x7f00000006c0), &(0x7f0000000200), &(0x7f0000000040), &(0x7f0000000080)) keyctl$read(0xb, 0x0, &(0x7f0000000300)=""/72, 0x48) 04:42:52 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r2) 04:42:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141041, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x5) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x9, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x2, 0x4e21, @remote}, 0x80, 0x2, 0x3, 0x3, 0x52744d7e, &(0x7f0000000000)='dummy0\x00', 0x7, 0x1, 0xffffffffffffff46}) 04:42:52 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:42:52 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r3 = getpgrp(0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0}, &(0x7f0000001300)=0xc) fstat(r1, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f00000013c0)=0x0, &(0x7f0000001400), &(0x7f0000001440)) getresgid(&(0x7f0000001480), &(0x7f00000014c0), &(0x7f0000001500)=0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001540)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000001680)=0xe8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000016c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0}, &(0x7f0000001740)=0xc) r13 = getegid() r14 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001980)={{{@in=@remote, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001a80)=0xe8) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000001b80)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000001cc0)=0xe8) lstat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001dc0)={0x0}, &(0x7f0000001e00)=0xc) getresuid(&(0x7f0000001e40)=0x0, &(0x7f0000001e80), &(0x7f0000001ec0)) getresgid(&(0x7f0000001f00), &(0x7f0000001f40), &(0x7f0000001f80)=0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000001fc0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002000)={0x0, 0x0}, &(0x7f0000002040)=0xc) r25 = getegid() fcntl$getownex(r0, 0x10, &(0x7f0000002080)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000020c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000021c0)=0xe8) stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002500)=0x0) fstat(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000002580)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="a805b9062efedbfe2421100903ae51d310f46a5e0d92768af21b38d8b79c2ca5a9d2f9e752d1fd1c60a80ed3be95e7", 0x2f}, {&(0x7f0000001140)="95d174c16c60328b9fbaf30f2ea9225fcb8b9e886a76374d02046267dd59271f0edda963f5c9af0d6db758cd32e9f31c30c330fa74a76505ff9b221a4e99888a45f155fb4867f08f2d3c469eefcff8080c89e9e82a880872cee045f66db0adadf0c3764dc31c7ed7cbd1288d744830116080a4cb1afbdc9fe77469884ed7f4b26be8c476e814b4163f8f90feb5accebfb55200efc96990c2294157ccb15a7474d5406e095be82c976554012a982c3ff086", 0xb1}, {&(0x7f0000001200)="07692f234c6507e002599c576102c2def3958070932904e5c321e93f0f3353da7b0ca925ddc29a6d66dd1fcc31ab1d2548c6a91f78907c9f4404fe25fc05b5a28b30d61220ad0bb99589d2e1141b0e9546efe194f29757e8e11925b66450c70eadcd918cc19e1ef5", 0x68}], 0x4, &(0x7f0000001780)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, 0xee01}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0]}], 0x98, 0x40}, {&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001940)=[{&(0x7f00000018c0)="69ed22228e8cd4326ea53f7b2a5086abdaa37d580e660d5e6700aedd6b284208a6e2cef016aa7b837307596500ad0aeaaf0f5c65cf28e362479c086a25fe099cecbc0cfd6c91100fea826fed83c8c14035eb68", 0x53}], 0x1, &(0x7f00000027c0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="00faffffff0000edffffffffff0000000200e2bce03b91342670938d0c0000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r31, @ANYBLOB="0000000028000000000000000100000001000000f17eda14492b7dbbc2a93b51c562eb0b3957148bea818db719af2b78feefccca019bae815481310e75c8ac10aaf02e8aab75d07d886d58ace6296b0abbdff84d3d37acdf0e46c2584f08e78c75ab989f1d1fdae39a27dfeb233b982e6144f05a900a11d3a90904663af1", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2], 0x140, 0x1}], 0x2, 0x4084) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 393.971865] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 394.495256] 9pnet: p9_errstr2errno: server reported unknown error eth0è}Ü–)“t&ù€·;usemðèu¸%évÿHöên/ñx¢Yý¼)Aëx¤ŠT*YYNp%ðåPOúY楰ò¢ò”í®l‹‰âT1¬ÄaéÒ, #’Ù˜õ>Zε€”÷Œr)×q,Ùý,zú²£S€ˆ°zÞG¢4Á™žèyKøð1Š"ãõ¹¡! 04:42:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x0, 0x5, 0x3ff, 0xfff}, {0x6, 0x7f, 0x1, 0x1}, {0xc2b9, 0x1, 0x9, 0x20}, {0x8, 0x0, 0x4}, {0x9, 0x52c0d7e7, 0x76a1, 0x4}]}, 0x10) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x10000002}) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) r5 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000000c0)=r5) 04:42:52 executing program 5: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x20000800002, 0x1e, r2, 0x0) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000005900)=0x14, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000009) 04:42:52 executing program 6: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSTATu(r1, &(0x7f0000000340)={0x88, 0x7d, 0x0, {{0x0, 0x71, 0x0, 0x0, {0xae}, 0x0, 0x0, 0x0, 0x0, 0x0, "", 0xf, 'em1+mime_type%,', 0xb, 'vmnet0nodev', 0x24, 'vmnet0^procsystemGPLposix_acl_access'}, 0x2, '%&'}}, 0x88) read(r0, &(0x7f0000000100)=""/134, 0x86) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48440, 0x40) [ 394.915003] FAULT_FLAG_ALLOW_RETRY missing 30 [ 394.922177] FAULT_FLAG_ALLOW_RETRY missing 30 [ 394.922189] CPU: 1 PID: 25397 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 394.922194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.922215] ffff8801b866f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 394.922227] ffff8801c3c3b080 ffff8801b866fb20 0000000000000000 ffff8801b866fb48 [ 394.922239] ffffffff81cbab1b 0000000000000dca ffff8801b8310908 ffff8801c3c3b18c [ 394.922242] Call Trace: [ 394.922256] [] dump_stack+0xc1/0x128 [ 394.922267] [] handle_userfault.cold.18+0x3e/0x51 [ 394.922277] [] ? debug_check_no_locks_freed+0x210/0x210 [ 394.922289] [] ? userfaultfd_ioctl+0x2540/0x2540 04:42:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)=""/88, &(0x7f0000000000)=0x58) sendto$inet6(r0, &(0x7f0000000400)="0401000000c000ddd3460900ffb25bc202938207d9033780398d5375c5f73f2e5506dc5712f29513f06f8f6575efe5eb8f00beff8b307756bdb02262391ff4a728834186520000000000000000000000", 0x50, 0x0, &(0x7f0000000080)={0xa, 0x100200000800, 0x8000000000005, @ipv4={[], [], @broadcast}}, 0x1c) [ 394.922302] [] ? handle_mm_fault+0x1267/0x28e0 [ 394.922310] [] ? handle_mm_fault+0x220f/0x28e0 [ 394.922319] [] handle_mm_fault+0x221d/0x28e0 [ 394.922328] [] ? vm_insert_mixed+0x200/0x200 [ 394.922339] [] __do_page_fault+0x5af/0xd50 [ 394.922347] [] ? mm_fault_error+0x2c0/0x2c0 [ 394.922357] [] ? trace_hardirqs_off_thunk+0x1a/0x1c 04:42:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) r1 = dup(0xffffffffffffff9c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x0, 0x1, 0x0, 0x2, 0x9, 0x0, 0x2}, &(0x7f0000000240)=0x20) r2 = accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80800) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0x200000, 0x0) r4 = syz_open_pts(r0, 0x801) r5 = epoll_create1(0x80000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x20814, r5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ptrace$setregs(0xf, r6, 0xc6, &(0x7f0000000100)="bb79ade8ebe91f881c629ed751a8039850af9aedb0958342a15ef2ff07679df2e4b2ba91911e4576b36d418a7ce9cc0968965419c796dd7be49505d2f0a8fda9f88e28a03d20a7518e9868e3c37fa5bb6a106131f57370d20477e2e3a013b70e8178fd2b42a83cb4f08600e87aa802697516e5de8c1289cfe7fa8bb599c401864de106ccaf3366fd94008d720d3dfd200d2eec99a465f00883a8e2be13e31e2d457e500940") epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000089000)) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r8 = dup3(r1, r5, 0x80000) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in=@rand_addr=0x173e, 0x4e21, 0x0, 0x4e24, 0x9, 0x0, 0x20, 0x20, 0x2c, 0x0, r7}, {0xec5, 0x8d6b, 0x274bc262, 0x9, 0x8, 0x7, 0x4, 0x5}, {0xd6, 0x4, 0x800, 0x5}, 0x10000, 0x6e6bb1, 0x3, 0x1, 0x1, 0x1}, {{@in6, 0x4d6, 0x2b}, 0x2, @in=@local, 0x3506, 0x3, 0x3, 0xfffffffffffffffe, 0x8a1, 0x3}}, 0xe8) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000280)=""/120) writev(r8, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 394.922365] [] do_page_fault+0x27/0x30 [ 394.922374] [] page_fault+0x28/0x30 [ 394.922384] [] ? do_sigaltstack+0x267/0x6f0 [ 394.922392] [] ? do_sigaltstack+0x271/0x6f0 [ 394.922400] [] ? security_file_ioctl+0x8f/0xc0 [ 394.922409] [] SyS_sigaltstack+0x6c/0x90 [ 394.922417] [] ? do_sigaction+0x8c0/0x8c0 04:42:52 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4800, 0x0) linkat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x1000) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") setrlimit(0x2, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xffffffffffffffff) sendto(r2, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0xfffffffffffffca7, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001a80)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000001980)=[{{&(0x7f0000000200)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/186, 0xba}], 0x2, &(0x7f0000000400)=""/157, 0x9d, 0xfffffffffffffffb}, 0x2}, {{&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/140, 0x8c, 0x100}, 0x3}, {{&(0x7f00000007c0)=@nfc, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/4096, 0x1000}, 0x6}], 0x3, 0x40010000, &(0x7f0000001ac0)={r4, r5+10000000}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) connect$packet(r2, &(0x7f0000001b00)={0x11, 0x1f, r6, 0x1, 0x9, 0x6, @remote}, 0x14) [ 394.922425] [] do_syscall_64+0x1a6/0x490 [ 394.922433] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 395.134501] CPU: 1 PID: 25390 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 395.142216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.151561] ffff8801a323f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 395.159616] ffff8801c3c3b080 ffff8801a323f7e0 0000000000000000 ffff8801a323f808 [ 395.167667] ffffffff81cbab1b 00000000000067c2 ffff8801d3b7a130 ffff8801c3c3b18c [ 395.175711] Call Trace: [ 395.178292] [] dump_stack+0xc1/0x128 [ 395.183642] [] handle_userfault.cold.18+0x3e/0x51 [ 395.190128] [] ? debug_check_no_locks_freed+0x210/0x210 [ 395.197131] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 395.203523] [] ? check_preemption_disabled+0x3b/0x170 [ 395.210346] [] ? check_preemption_disabled+0x3b/0x170 [ 395.217166] [] ? handle_mm_fault+0x1267/0x28e0 [ 395.223382] [] ? handle_mm_fault+0x220f/0x28e0 [ 395.229590] [] handle_mm_fault+0x221d/0x28e0 [ 395.235621] [] ? vm_insert_mixed+0x200/0x200 [ 395.241658] [] ? __lock_is_held+0xa2/0xf0 [ 395.247447] [] __do_page_fault+0x5af/0xd50 [ 395.253318] [] ? mm_fault_error+0x2c0/0x2c0 [ 395.259272] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.265923] [] do_page_fault+0x27/0x30 [ 395.271451] [] page_fault+0x28/0x30 [ 395.276713] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 395.283532] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 395.290001] [] ? str_to_user+0xa0/0xa0 [ 395.295514] [] ? __lock_acquire+0x654/0x4070 [ 395.301550] [] ? exit_robust_list+0x220/0x220 [ 395.307671] [] evdev_ioctl+0x27/0x30 [ 395.313010] [] ? evdev_ioctl_compat+0x30/0x30 [ 395.319145] [] do_vfs_ioctl+0x1ac/0x11a0 [ 395.324853] [] ? ioctl_preallocate+0x220/0x220 [ 395.331083] [] ? selinux_capable+0x40/0x40 [ 395.336945] [] ? __fget+0x20a/0x3b0 [ 395.342195] [] ? __fget+0x231/0x3b0 [ 395.347450] [] ? __fget+0x47/0x3b0 [ 395.352623] [] ? security_file_ioctl+0x8f/0xc0 [ 395.358839] [] SyS_ioctl+0x8f/0xc0 04:42:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @broadcast}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x9, &(0x7f0000000140)={0x77359400}, 0x2d9) inotify_init1(0x8d54572d920013ac) 04:42:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x803, 0x3f) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='veth0_to_bridge\x00', 0x10) connect$inet(r1, &(0x7f0000390000)={0x2, 0x100000000, @loopback}, 0x10) r2 = open(&(0x7f0000000000)='./file0\x00', 0x141046, 0x43) ftruncate(r2, 0x10004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_getaddr={0x34, 0x16, 0x0, 0x0, 0x0, {}, [@IFA_FLAGS={0x8, 0x8, 0x10}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendfile(r1, r2, 0x0, 0x72439a6b) [ 395.364008] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 395.369957] [] do_syscall_64+0x1a6/0x490 [ 395.375659] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:53 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0xff, 0x22}, 'port1\x00', 0x9a, 0x1000, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x81, 0xc00000000000000, 0x1, 0x0, 0x1, 0x200}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@dev}}, 0xe8) close(r1) 04:42:53 executing program 6: r0 = memfd_create(&(0x7f0000000100)="885d292b00", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00000) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=@dstopts={0x6c, 0x1, [], [@ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0x8001}]}, 0x10) sendfile(r0, r0, &(0x7f0000000040), 0xff8) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100), &(0x7f00000002c0)) [ 395.552474] binder: BINDER_SET_CONTEXT_MGR already set [ 395.558428] binder: 25439:25450 ioctl 40046207 0 returned -16 [ 395.656208] FAULT_FLAG_ALLOW_RETRY missing 30 [ 395.660886] CPU: 1 PID: 25457 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 395.668583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 395.677928] ffff8801d08af950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 395.685947] ffff8801c3c3b200 ffff8801d08afb20 0000000000000000 ffff8801d08afb48 [ 395.693947] ffffffff81cbab1b 0000000000000dca ffff88019e0b5108 ffff8801c3c3b30c [ 395.701978] Call Trace: [ 395.704544] [] dump_stack+0xc1/0x128 [ 395.709886] [] handle_userfault.cold.18+0x3e/0x51 [ 395.716363] [] ? debug_check_no_locks_freed+0x210/0x210 [ 395.723362] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 395.729742] [] ? plist_del+0x14f/0x200 [ 395.735263] [] ? futex_wake+0x1aa/0x450 [ 395.740875] [] ? handle_mm_fault+0x1267/0x28e0 [ 395.747083] [] ? handle_mm_fault+0x220f/0x28e0 [ 395.753301] [] handle_mm_fault+0x221d/0x28e0 [ 395.759337] [] ? vm_insert_mixed+0x200/0x200 [ 395.765374] [] __do_page_fault+0x5af/0xd50 [ 395.771235] [] ? mm_fault_error+0x2c0/0x2c0 [ 395.777180] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 395.783830] [] do_page_fault+0x27/0x30 [ 395.789346] [] page_fault+0x28/0x30 [ 395.794606] [] ? do_sigaltstack+0x267/0x6f0 [ 395.800570] [] ? do_sigaltstack+0x271/0x6f0 [ 395.806536] [] ? security_file_ioctl+0x8f/0xc0 [ 395.812761] [] SyS_sigaltstack+0x6c/0x90 [ 395.818447] [] ? do_sigaction+0x8c0/0x8c0 [ 395.824220] [] do_syscall_64+0x1a6/0x490 [ 395.829907] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 395.911666] pktgen: kernel_thread() failed for cpu 0 [ 395.916877] pktgen: Cannot create thread for cpu 0 (-4) [ 395.922468] pktgen: kernel_thread() failed for cpu 1 [ 395.927665] pktgen: Cannot create thread for cpu 1 (-4) [ 395.933161] pktgen: Initialization failed for all threads [ 396.224943] pktgen: kernel_thread() failed for cpu 0 [ 396.230296] pktgen: Cannot create thread for cpu 0 (-4) [ 396.235827] pktgen: kernel_thread() failed for cpu 1 [ 396.243052] pktgen: Cannot create thread for cpu 1 (-4) [ 396.248533] pktgen: Initialization failed for all threads 04:42:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() ptrace$poke(0x5, r1, &(0x7f0000000000), 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001400350800000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) 04:42:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') r1 = socket$inet6(0xa, 0x8000a, 0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000400)=""/227, 0xe3}], 0x2, 0x0) vmsplice(r0, &(0x7f0000000240), 0x0, 0x5) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="7d7921d6be5056f2596268aeb069f15b20931f39f555c8406d0a3744f4c62eb26b4884f6e3e82096754e616586ec9351c2e9078e3c76374ce5a29a22f30e251671a69f2f17212d4c94cfd9894e4906b2d1b9df4f54c0dbde0fd3e491c9f3aa", 0x5f}, {&(0x7f00000000c0)="3b24be17eb15b10a0c18b2c0d9133797fa7d697fb848552f15fe35d2d2cc1541d75290a92283ef85467362245b43ec41effa6253f7da2248398f770169c6e7a05e3100197ab24df613593f576ac9c70200a22f47932782b94d2feb91aa7560e5d7a74dde29af9e12a2fd369710c7a201208d431a59467bc2e9ad178b699f84d4282a75f5008545086e1c8bf5f3090c843e8b408064010b48690f7b847aa2bc9c355a35400bb3acfd4324153dc32d8094615062f592114d338558cc075e6b8ee0ee24bebe677b9fbda97e", 0xca}], 0x2, 0x8) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000002c0)={{0x2, 0x1, 0xffffffffffffffff, 0x2, 0x7}, 0x7f, 0x3590, 0x100000000}) 04:42:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x4001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @multicast2, r2}, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 04:42:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xfffffffffffffffe, 0x8, {{0x6, 0x1, 0x4, 0x5, 0xec4, 0x1, {0x3, 0x20, 0x6, 0x7fffffff, 0x401, 0x7fffffff0000, 0x8cc, 0x3ff, 0x5, 0x401, 0x3, r2, r3, 0x1aa, 0x8001}}, {0x0, 0x7}}}, 0xa0) r4 = memfd_create(&(0x7f0000000100)='\x00', 0x3) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 04:42:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x3, r0) sendto$inet(r0, &(0x7f0000000180)="14269c099be6f4173d646f33358b8640fc7c62349db4d2bdf0f37a72c1903ea05709a2da6d8bff6b888fd6be885a51098499c1eaad1a86aa1cf41d48988b8d94bc2ce1e090a2d40901dc2bbda0b361311dc624a588e0d97967299f0ebf083c98795837f846306730bf268f61b8b4a2c9143554c98b1f005be3d215c1d37f8e4716fa867fed9af942c49bace5f7438659de60e671635f227ffa", 0xfffffd02, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x430) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='hybla\x00', 0x6) dup3(r1, r0, 0x80000) shutdown(r1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="53c84c978560ad807aac874c2785021fe96e38fcbf4efd0ef2686f5de50017c408ef7d49eb7632810f93b01928935088a6b5cdf9d771ccb7471e22073a42d20eaa5a388dc53f5ef8b0b9f57f75d43c4bd6046c7e408cf5aa043c21052043384595f1375af98d88de24451e46751a5e73834d543dec27fdf8a935ee597877fb04ed44594e1fec5e25ab50171210ed898fc879639396af40a1e83131f01a6db1956f9b895064c97bdc4e62ddcf418328ce75be96b1a9a36a928d075353824fc93661b0d94d6fd9ef613f2e29ca839077c8c82bc4003d6b521f", 0xd8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @dev}, &(0x7f0000000240)=0xc) socket$key(0xf, 0x3, 0x2) 04:42:54 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:42:54 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mlock(&(0x7f0000013000/0x4000)=nil, 0x4000) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000015000/0x1000)=nil, &(0x7f00000001c0)) r2 = pkey_alloc(0x0, 0x2) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x2, r2) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x3}) personality(0x8) 04:42:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:54 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe51, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000480)=0x301, 0xfffffffffffffe67) ppoll(&(0x7f0000000180)=[{r0}], 0x1, &(0x7f0000000080), &(0x7f0000000100), 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000001c0)={{0x3f, 0x80000001}, 'port1\x00', 0xc3, 0x0, 0x7d4, 0x9, 0xffffffff, 0x9, 0x1, 0x0, 0x0, 0x7}) 04:42:54 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) listen(r1, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) socket$unix(0x1, 0x800000000000002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="2200000003000000000000000000000004000000000000000100000000d15e0d0000002b00"], 0x22) sendfile(r2, r2, &(0x7f0000000000), 0x800000bf) bind$unix(r1, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x40, 0x8) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x100000001, 0x4000) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000100)) 04:42:54 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000, 0x0) close(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$getregset(0x4204, r3, 0x203, &(0x7f0000000140)={&(0x7f0000000240)=""/201, 0xc9}) 04:42:54 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x3, @dev}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000080)=0x50, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="e6e05b0a2885"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @broadcast}, 0x10) 04:42:54 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x802) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f000073a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f000054e000/0x2000)=nil) mprotect(&(0x7f000072d000/0x2000)=nil, 0x2000, 0x1000008) 04:42:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0xfffffffffffffffe) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x23a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000200)={{0xa, 0x4e23, 0xffff, @empty, 0x2}, {0xa, 0x4e22, 0x8, @remote, 0x47}, 0x6, [0x2, 0x4, 0x0, 0x778a, 0x101, 0x3, 0x40, 0x9]}, 0x5c) close(r3) set_robust_list(&(0x7f00000001c0)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) dup3(r1, r2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) [ 396.627069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. 04:42:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:54 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_void(r0, 0x29, 0x24, 0x70fe0000000000, 0xf000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'sit0\x00', 0x1000}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000100)) 04:42:54 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) accept$inet(0xffffffffffffff9c, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @dev, 0x4}, 0x25f) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) creat(&(0x7f0000000200)='./file0\x00', 0x1) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/109) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x150, 0x20048050) [ 396.762006] device bond_slave_1 entered promiscuous mode 04:42:54 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4100, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x4) clock_getres(0x0, &(0x7f0000000280)) 04:42:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x400040, 0x0) 04:42:54 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0xfffffffffffffffa) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000180)={0xd, 0x94, "a85772df1ab36c14c9f58bce1a523c4040b115d0b151e4fd56cc093b5661674321afb7053b29cc4a8772566ff5f4106a127e70f85cd0335104cc19c65364dda5b823d21491da85a5bf215dc9aba8aca53fbcde96d7b4059398442292476511a56c111d0e1b6a99c48315acf7cb9c00453da439051e8d7fced420fb35fbd9fdf161b8a4474879432faa3ee485a69f2a0c38e8a7b5"}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r2, r1, 0x0) write(r1, &(0x7f0000000380)='}', 0x1) [ 396.861290] FAULT_FLAG_ALLOW_RETRY missing 30 [ 396.870580] device bond_slave_1 left promiscuous mode [ 396.897649] CPU: 0 PID: 25535 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 396.905391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.914739] ffff88019a5cf950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 396.922797] ffff8801c3c3b500 ffff88019a5cfb20 0000000000000000 ffff88019a5cfb48 [ 396.930830] ffffffff81cbab1b 0000000000000dca ffff8801b8338908 ffff8801c3c3b60c [ 396.938841] Call Trace: [ 396.941415] [] dump_stack+0xc1/0x128 [ 396.946760] [] handle_userfault.cold.18+0x3e/0x51 [ 396.953239] [] ? debug_check_no_locks_freed+0x210/0x210 [ 396.960232] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 396.966615] [] ? plist_del+0x14f/0x200 [ 396.972136] [] ? futex_wake+0x1aa/0x450 [ 396.977748] [] ? handle_mm_fault+0x1267/0x28e0 [ 396.983955] [] ? handle_mm_fault+0x220f/0x28e0 [ 396.990172] [] handle_mm_fault+0x221d/0x28e0 [ 396.996211] [] ? vm_insert_mixed+0x200/0x200 [ 397.002245] [] __do_page_fault+0x5af/0xd50 [ 397.008113] [] ? check_preemption_disabled+0x3b/0x170 [ 397.014937] [] ? mm_fault_error+0x2c0/0x2c0 [ 397.020888] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.027538] [] do_page_fault+0x27/0x30 [ 397.033056] [] page_fault+0x28/0x30 [ 397.038313] [] ? do_sigaltstack+0x267/0x6f0 [ 397.044264] [] ? do_sigaltstack+0x271/0x6f0 [ 397.050217] [] ? security_file_ioctl+0x8f/0xc0 [ 397.056433] [] SyS_sigaltstack+0x6c/0x90 04:42:54 executing program 1: mkdir(&(0x7f0000000500)='./file0\x00', 0x45) mount(&(0x7f0000000480)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000002c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast2, @in=@remote}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000740)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001c80)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001d80)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002ec0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@loopback}}, &(0x7f0000002e00)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000032c0)={&(0x7f0000000540), 0xc, &(0x7f0000003280)={&(0x7f00000030c0)={0xd4, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x19a2}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='.', &(0x7f00000001c0)='loefs\x00', 0x9004, 0x0) ioprio_get$pid(0x3, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00008a9000/0x3000)=nil, 0x3000, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)) umount2(&(0x7f0000000440)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) [ 397.062118] [] ? do_sigaction+0x8c0/0x8c0 [ 397.067911] [] do_syscall_64+0x1a6/0x490 [ 397.073706] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:55 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:42:55 executing program 6: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000100)={0x7, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8002}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, "79756575651966e0ca000000000001000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000002c0)={0x200, 0x8, 0x0, {0x0, 0x989680}, 0xffffffff}) 04:42:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) close(r0) 04:42:55 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x4, 0x3fffe) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:42:55 executing program 7: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) close(r0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 04:42:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000089000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000040)=""/88) r5 = inotify_add_watch(r4, &(0x7f00000000c0)='./file0\x00', 0x20000200) inotify_rm_watch(r2, r5) 04:42:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x9, [{{0x8, 0x2, 0x4}, 0x2, 0x0, 0x7, './file0'}]}}, 0x2a) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f00003efff0)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8), 0x8, 0x0) read(r3, &(0x7f0000deefe7)=""/128, 0x80) signalfd4(r3, &(0x7f0000a71ff8)={0x64}, 0x8, 0x0) [ 397.686179] FAULT_FLAG_ALLOW_RETRY missing 30 [ 397.722429] CPU: 1 PID: 25592 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 397.730170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 397.739520] ffff880197cdf950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 397.747622] ffff8801d71f3200 ffff880197cdfb20 0000000000000000 ffff880197cdfb48 [ 397.755686] ffffffff81cbab1b ffff880197cdfa78 ffffffff8122e3ea ffff8801d71f330c [ 397.763745] Call Trace: [ 397.766329] [] dump_stack+0xc1/0x128 [ 397.771693] [] handle_userfault.cold.18+0x3e/0x51 [ 397.778181] [] ? perf_trace_lock+0x11a/0x520 [ 397.784240] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 397.790640] [] ? plist_del+0x14f/0x200 [ 397.796177] [] ? futex_wake+0x1aa/0x450 [ 397.801798] [] ? handle_mm_fault+0x1267/0x28e0 [ 397.808025] [] ? handle_mm_fault+0x220f/0x28e0 [ 397.814250] [] handle_mm_fault+0x221d/0x28e0 04:42:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 397.820302] [] ? vm_insert_mixed+0x200/0x200 [ 397.826363] [] __do_page_fault+0x5af/0xd50 [ 397.832249] [] ? mm_fault_error+0x2c0/0x2c0 [ 397.838212] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.844875] [] do_page_fault+0x27/0x30 [ 397.850405] [] page_fault+0x28/0x30 [ 397.855664] [] ? do_sigaltstack+0x267/0x6f0 [ 397.861616] [] ? do_sigaltstack+0x271/0x6f0 [ 397.867562] [] ? __fget_light+0x169/0x1f0 04:42:55 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) write$P9_RRENAMEAT(r1, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r2) 04:42:55 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/246, 0xf6, 0xfffffffffffffff9, &(0x7f0000000380)={0x77359400}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x8000000000009374, &(0x7f00000000c0)="0100000000000000180400000001000000555d040f45426d0270ec78dfd849832f") getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000340)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/urandom\x00', 0x80200, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) write$FUSE_ENTRY(r1, &(0x7f0000000440)={0x90, 0x0, 0x3, {0x5, 0x2, 0x7fff, 0x9, 0x7, 0x3, {0x6, 0x7ca, 0x6, 0x0, 0x1305, 0x7, 0x81, 0x1, 0x10000, 0x45, 0x80, r3, r4, 0x68, 0x3}}}, 0x90) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) [ 397.873344] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 397.879296] [] SyS_sigaltstack+0x6c/0x90 [ 397.884983] [] ? do_sigaction+0x8c0/0x8c0 [ 397.890757] [] do_syscall_64+0x1a6/0x490 [ 397.896445] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:55 executing program 5: unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x3}) lseek(r0, 0x0, 0x2) openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x200000, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe94, &(0x7f0000000680)=0x280000000) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0x101) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x80, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000580)) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000001bc0)=ANY=[], &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r5, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000='version=9p2000'}]}}) write$P9_RREADDIR(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000029010000000000000000000000000000000000000000007bafc5328318fe07193a00000000000007002e2f66696c6530"], 0x34) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) setregid(0x0, r3) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') bind$packet(r1, &(0x7f0000000800)={0x11, 0x0, r2, 0x1, 0xefa3}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) 04:42:55 executing program 1: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) sync() r0 = dup(0xffffffffffffffff) write$eventfd(r0, &(0x7f0000000000)=0x5, 0x8) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) 04:42:55 executing program 7: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000400)=0xc) sched_setparam(r1, &(0x7f0000000480)=0x3) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000280)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x4000000008912, &(0x7f0000000280)) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000540)={'filter\x00'}, &(0x7f00000002c0)=0x54) 04:42:55 executing program 6: r0 = socket$inet6(0xa, 0x2000007, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565b00000000000000000000002000000000000002400000000000000000000000007000000000000003f00f114ba94e0e7040025af95951b86aa6500"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x0, "718b6575653100000000000000000000000000000000000000000700000000000000000000e900"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000003c0)) unshare(0x20000000) unshare(0x20000200) 04:42:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40080, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f00000000c0)) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000089000)) mq_unlink(&(0x7f0000000000)='/dev/ptmx\x00') r4 = dup3(r2, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000040)) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:55 executing program 0: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)={0x0, 0x9, 0xfffffffffffffffc, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xdab15727c85a1301, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 398.083276] FAULT_FLAG_ALLOW_RETRY missing 30 [ 398.087842] FAULT_FLAG_ALLOW_RETRY missing 30 [ 398.087852] CPU: 1 PID: 25613 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 398.087857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.087872] ffff88019a49f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 398.087882] ffff8801d71f3800 ffff88019a49f7e0 0000000000000000 ffff88019a49f808 [ 398.087890] ffffffff81cbab1b 00000000000067c2 ffff8801cd9c2130 ffff8801d71f390c 04:42:56 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:42:56 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r1}}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 04:42:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\fc'], 0x0, 0x0, &(0x7f0000000680)}) signalfd(r2, &(0x7f0000000000)={0x8}, 0x8) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x6800000000000000, &(0x7f00000001c0)="10"}) 04:42:56 executing program 4: readv(0xffffffffffffffff, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x801) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000089000)) r2 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f00000000c0)) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) write$P9_RWALK(r2, &(0x7f0000000000)={0x57, 0x6f, 0x1, {0x6, [{0x2, 0x3, 0x3}, {0x12}, {0x0, 0x1, 0x5}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x4, 0x5}]}}, 0x57) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000080)=0x7) [ 398.087892] Call Trace: [ 398.087905] [] dump_stack+0xc1/0x128 04:42:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000011) write$binfmt_aout(r0, &(0x7f0000000140)={{0xcc, 0x2, 0xffffffffffff054f, 0xfe, 0x16, 0x7fff, 0xa1}, "bb3519599e661f6083f8e24c53a8d133621eacc4736764e37c3a02d1b989de02d3a9795abdc179f6cd9fcea0335f28a5d5cb9b0f39cff6506778f93752aa811dacc4ea3da7617e15818d2adcd31fbe960e5892260328a2bfd7ad52710fe7bb7ec107809dfea1f1422badac79706a6b44a89fc150354696aeba0274b6630287fa53d55b977140d7022790861d67e4817f0991e071a63063e1f8a6b910c7a30ff342af046a901b1daf3cc0ada6fe2b7043f0aae8461d830e6a7e50eddeeb4d11cee2cbb71518cf9738c49fd19a386560dce8a8ef5e033094f924ba8038d6866ac1c303dc5715", [[], [], [], [], [], [], [], [], []]}, 0xa05) fallocate(r0, 0x8, 0x0, 0x10000) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x7) [ 398.087915] [] handle_userfault.cold.18+0x3e/0x51 [ 398.087931] [] ? debug_check_no_locks_freed+0x210/0x210 04:42:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x3, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 398.087943] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 398.087952] [] ? HARDIRQ_verbose+0x10/0x10 [ 398.087962] [] ? __save_stack_trace+0x7d/0xf0 [ 398.087971] [] ? handle_mm_fault+0x1267/0x28e0 [ 398.087979] [] ? handle_mm_fault+0x220f/0x28e0 [ 398.087988] [] handle_mm_fault+0x221d/0x28e0 [ 398.087995] [] ? HARDIRQ_verbose+0x10/0x10 [ 398.088003] [] ? vm_insert_mixed+0x200/0x200 [ 398.088011] [] ? __lock_is_held+0xa2/0xf0 [ 398.088020] [] __do_page_fault+0x5af/0xd50 [ 398.088029] [] ? mm_fault_error+0x2c0/0x2c0 04:42:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0xfffffffffffffffb, 0x4000000000, 0x1}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@mcast1}) 04:42:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/186) r4 = dup3(r1, r0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4000, 0x0) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000140)=""/35) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 398.088037] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.088046] [] do_page_fault+0x27/0x30 [ 398.088054] [] page_fault+0x28/0x30 [ 398.088062] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 398.088072] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 398.088080] [] ? str_to_user+0xa0/0xa0 [ 398.088089] [] ? __lock_acquire+0x654/0x4070 [ 398.088098] [] ? check_preemption_disabled+0x3b/0x170 [ 398.088107] [] evdev_ioctl+0x27/0x30 [ 398.088115] [] ? evdev_ioctl_compat+0x30/0x30 [ 398.088122] [] do_vfs_ioctl+0x1ac/0x11a0 [ 398.088130] [] ? ioctl_preallocate+0x220/0x220 [ 398.088138] [] ? selinux_capable+0x40/0x40 [ 398.088145] [] ? __fget+0x20a/0x3b0 [ 398.088151] [] ? __fget+0x231/0x3b0 [ 398.088158] [] ? __fget+0x47/0x3b0 [ 398.088167] [] ? security_file_ioctl+0x8f/0xc0 [ 398.088173] [] SyS_ioctl+0x8f/0xc0 [ 398.088179] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 398.088185] [] do_syscall_64+0x1a6/0x490 [ 398.088193] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 398.504880] binder: 25656:25660 unknown command 0 [ 398.504891] binder: 25656:25660 ioctl c0306201 20008fd0 returned -22 [ 398.824149] CPU: 0 PID: 25620 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 398.831865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.841208] ffff88019b16f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 398.849242] ffff8801d71f3800 ffff88019b16fb20 0000000000000000 ffff88019b16fb48 [ 398.857299] ffffffff81cbab1b 0000000000000dca ffff8801d43a3908 ffff8801d71f390c [ 398.865350] Call Trace: [ 398.867931] [] dump_stack+0xc1/0x128 [ 398.873290] [] handle_userfault.cold.18+0x3e/0x51 [ 398.879781] [] ? debug_check_no_locks_freed+0x210/0x210 [ 398.887160] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 398.893544] [] ? HARDIRQ_verbose+0x10/0x10 [ 398.899416] [] ? handle_mm_fault+0x1267/0x28e0 [ 398.905640] [] ? handle_mm_fault+0x220f/0x28e0 [ 398.911853] [] handle_mm_fault+0x221d/0x28e0 [ 398.917894] [] ? vm_insert_mixed+0x200/0x200 [ 398.923932] [] __do_page_fault+0x5af/0xd50 [ 398.929810] [] ? mm_fault_error+0x2c0/0x2c0 [ 398.935780] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.942436] [] do_page_fault+0x27/0x30 [ 398.947955] [] page_fault+0x28/0x30 [ 398.953215] [] ? do_sigaltstack+0x267/0x6f0 [ 398.959188] [] ? do_sigaltstack+0x271/0x6f0 [ 398.965157] [] ? security_file_ioctl+0x8f/0xc0 [ 398.971389] [] SyS_sigaltstack+0x6c/0x90 [ 398.977098] [] ? do_sigaction+0x8c0/0x8c0 [ 398.982894] [] do_syscall_64+0x1a6/0x490 [ 398.988594] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 399.032228] FAULT_FLAG_ALLOW_RETRY missing 30 [ 399.036969] CPU: 0 PID: 25613 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 399.044683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.054030] ffff88019a49f610[ 399.056531] FAULT_FLAG_ALLOW_RETRY missing 30 [ 399.061419] ffffffff81eb46a9 0000000000000002 0000000000000000 [ 399.067879] ffff8801c3c3b680 ffff88019a49f7e0 0000000000000000 ffff88019a49f808 [ 399.076025] ffffffff81cbab1b 00000000000067c2 ffff8801cd9c2130 ffff8801c3c3b78c [ 399.084047] Call Trace: [ 399.086621] [] dump_stack+0xc1/0x128 [ 399.091970] [] handle_userfault.cold.18+0x3e/0x51 [ 399.098450] [] ? debug_check_no_locks_freed+0x210/0x210 [ 399.105447] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 399.111835] [] ? HARDIRQ_verbose+0x10/0x10 [ 399.117702] [] ? __save_stack_trace+0x7d/0xf0 [ 399.123839] [] ? handle_mm_fault+0x1267/0x28e0 [ 399.130057] [] ? handle_mm_fault+0x220f/0x28e0 [ 399.136271] [] handle_mm_fault+0x221d/0x28e0 [ 399.142312] [] ? vm_insert_mixed+0x200/0x200 [ 399.148369] [] ? __lock_is_held+0xa2/0xf0 [ 399.154152] [] __do_page_fault+0x5af/0xd50 [ 399.160018] [] ? mm_fault_error+0x2c0/0x2c0 [ 399.165973] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.172622] [] do_page_fault+0x27/0x30 [ 399.178143] [] page_fault+0x28/0x30 [ 399.183402] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 399.190228] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 399.196701] [] ? str_to_user+0xa0/0xa0 [ 399.202228] [] ? __lock_acquire+0x654/0x4070 [ 399.208269] [] ? check_preemption_disabled+0x3b/0x170 [ 399.215088] [] evdev_ioctl+0x27/0x30 [ 399.220433] [] ? evdev_ioctl_compat+0x30/0x30 [ 399.226558] [] do_vfs_ioctl+0x1ac/0x11a0 [ 399.232250] [] ? ioctl_preallocate+0x220/0x220 [ 399.238462] [] ? selinux_capable+0x40/0x40 [ 399.244327] [] ? __fget+0x20a/0x3b0 [ 399.249584] [] ? __fget+0x231/0x3b0 [ 399.254842] [] ? __fget+0x47/0x3b0 [ 399.260018] [] ? security_file_ioctl+0x8f/0xc0 [ 399.266233] [] SyS_ioctl+0x8f/0xc0 [ 399.271406] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 399.277358] [] do_syscall_64+0x1a6/0x490 [ 399.283055] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 399.289967] CPU: 1 PID: 25620 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 399.297678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.302218] binder: 25656:25711 unknown command 536872576 [ 399.302225] binder: 25656:25711 ioctl c0306201 20008fd0 returned -22 [ 399.318999] ffff88019b16f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 399.327034] ffff8801c3c3b680 ffff88019b16fb20 0000000000000000 ffff88019b16fb48 [ 399.335070] ffffffff81cbab1b 0000000000000dca ffff8801d43a3908 ffff8801c3c3b78c [ 399.343105] Call Trace: [ 399.345672] [] dump_stack+0xc1/0x128 [ 399.351015] [] handle_userfault.cold.18+0x3e/0x51 [ 399.357496] [] ? debug_check_no_locks_freed+0x210/0x210 [ 399.364502] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 399.370887] [] ? HARDIRQ_verbose+0x10/0x10 [ 399.376749] [] ? handle_mm_fault+0x1267/0x28e0 [ 399.382975] [] ? handle_mm_fault+0x220f/0x28e0 [ 399.389186] [] handle_mm_fault+0x221d/0x28e0 [ 399.395239] [] ? HARDIRQ_verbose+0x10/0x10 [ 399.401101] [] ? vm_insert_mixed+0x200/0x200 [ 399.407138] [] __do_page_fault+0x5af/0xd50 [ 399.412997] [] ? mm_fault_error+0x2c0/0x2c0 [ 399.418990] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.425632] [] do_page_fault+0x27/0x30 [ 399.431165] [] page_fault+0x28/0x30 [ 399.436436] [] ? do_sigaltstack+0x267/0x6f0 [ 399.442386] [] ? do_sigaltstack+0x271/0x6f0 [ 399.448339] [] ? SyS_read+0x1c0/0x1c0 [ 399.453776] [] SyS_sigaltstack+0x6c/0x90 [ 399.459475] [] ? do_sigaction+0x8c0/0x8c0 [ 399.465255] [] do_syscall_64+0x1a6/0x490 [ 399.470958] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:57 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0x80000000, 0x0, 0x80000000000, 0x100, 0x5, 0x2}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x3000)=nil, 0x3000}, 0x1}) 04:42:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) exit(0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="52177deccdf3540ae7ad9406c5233b512d9c5625d9c83c117549b796b9ea020d555f0df5846b6ab219ba550c320572fbf349eb61543a16b4ef40e4a6b2b022feac9e9f3aab8174e4785279532ad2c48d3cbcceedcf7df369a451414a346033badc56f1f636c61e0ead388375111542671661254852dcd87d82345879edb714c72bff07d2db4d9ad688386e4cd954fba661417680f8a703124661db5decec80acc30d5f3432ade3") 04:42:57 executing program 7: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x755) write(r0, &(0x7f00000001c0)='5', 0x1) r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) 04:42:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x380) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r2, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:57 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x400000, 0x3fffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) gettid() unshare(0x8000000) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r2, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x29f) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) sendto$inet6(r1, &(0x7f0000000180)="cade5aa2717b63eed0f158b0903ef459f285241bf42a3e437f", 0x19, 0x40000, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @mcast1, 0x9}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2fd) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcd2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) 04:42:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = epoll_create1(0x0) flock(r2, 0x2) r3 = epoll_create1(0x0) flock(r3, 0x100000000000001) r4 = gettid() r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$P9_RREADLINK(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6c65a43b8cd9fb883137ec87a64cca4fbbfc78f59d0ab79043ccf0c8f22ec755a60f28f5a7dc553bb14823e96b770f8f5db0464ab5ea1562e56732411d64a3e685e730504bbe5bfe5086cff394670f19d32148ae26de"], 0x10) dup2(r1, r3) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000015) 04:42:57 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:42:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket(0x10, 0x2, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x101000, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000001c0)={0x80a, 0x7, 0x20}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r3 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f00000024c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404018}, 0xc, &(0x7f0000002480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c200000080400002bbd7000fedbdf250c00000a14001f0008000500", @ANYRES32=r3, @ANYBLOB="08008e00", @ANYRES32=r4, @ANYBLOB="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"], 0x208c}, 0x1, 0x0, 0x0, 0x20000800}, 0x880) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000180)="41c8d245ea010010000094f0940315b326dee23f05c0d30a2008cb3135c0b129606431819d5cedc0c4c8c801035144ee6eb3f9b8") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) r5 = getpgid(0xffffffffffffffff) r6 = syz_open_procfs(r5, &(0x7f0000000040)='mountinfo\x00') sendfile(r1, r6, &(0x7f0000000000), 0x80000002) 04:42:57 executing program 6: r0 = eventfd(0x403) close(r0) fcntl$dupfd(r0, 0x0, r0) [ 399.598828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12337 sclass=netlink_route_socket pig=25717 comm=syz-executor5 [ 399.654914] FAULT_FLAG_ALLOW_RETRY missing 30 [ 399.659654] CPU: 0 PID: 25731 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 399.667374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.676722] ffff8801b68cf610[ 399.676867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12337 sclass=netlink_route_socket pig=25746 comm=syz-executor5 [ 399.691939] ffffffff81eb46a9 0000000000000002 0000000000000000 [ 399.698368] ffff8801c3c3b800 ffff8801b68cf7e0 0000000000000000 ffff8801b68cf808 [ 399.706376] ffffffff81cbab1b 00000000000067c2 ffff88019bd82130 ffff8801c3c3b90c [ 399.714381] Call Trace: [ 399.716959] [] dump_stack+0xc1/0x128 [ 399.722313] [] handle_userfault.cold.18+0x3e/0x51 [ 399.728792] [] ? debug_check_no_locks_freed+0x210/0x210 [ 399.735801] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 399.742197] [] ? check_preemption_disabled+0x3b/0x170 [ 399.749021] [] ? check_preemption_disabled+0x3b/0x170 [ 399.755846] [] ? handle_mm_fault+0x1267/0x28e0 [ 399.762062] [] ? handle_mm_fault+0x220f/0x28e0 [ 399.768291] [] handle_mm_fault+0x221d/0x28e0 [ 399.774326] [] ? vm_insert_mixed+0x200/0x200 [ 399.780363] [] ? __lock_is_held+0xa2/0xf0 [ 399.786135] [] __do_page_fault+0x5af/0xd50 [ 399.792000] [] ? mm_fault_error+0x2c0/0x2c0 [ 399.797954] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.804599] [] do_page_fault+0x27/0x30 [ 399.810113] [] page_fault+0x28/0x30 [ 399.815368] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 399.822184] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 399.828680] [] ? str_to_user+0xa0/0xa0 [ 399.834198] [] ? __lock_acquire+0x654/0x4070 [ 399.840250] [] ? exit_robust_list+0x220/0x220 [ 399.846373] [] evdev_ioctl+0x27/0x30 [ 399.851711] [] ? evdev_ioctl_compat+0x30/0x30 [ 399.857834] [] do_vfs_ioctl+0x1ac/0x11a0 [ 399.863523] [] ? ioctl_preallocate+0x220/0x220 [ 399.869732] [] ? selinux_capable+0x40/0x40 [ 399.875593] [] ? __fget+0x20a/0x3b0 [ 399.880845] [] ? __fget+0x231/0x3b0 [ 399.886096] [] ? __fget+0x47/0x3b0 [ 399.891263] [] ? security_file_ioctl+0x8f/0xc0 [ 399.897472] [] SyS_ioctl+0x8f/0xc0 04:42:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf25020000002900020008000900200000f4070005003f000000340003000800010003000000140002006e7230000000000000000000000000001400000000000000080000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x24040054}, 0x4000) 04:42:57 executing program 7: getrlimit(0xe, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$evdev(&(0x7f000004a000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0xfffffffffffffffe, 0x237, &(0x7f000082f000)}) [ 399.902651] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 399.908606] [] do_syscall_64+0x1a6/0x490 [ 399.914309] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:42:57 executing program 6: r0 = socket$inet6(0x10, 0x80000000000003, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x4c00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000540)="5400000020007f00b72c13b2a4a28093020000000303435d0000006925000400070000000000000065c634f128f1c46b7b31afdc1338d54400ecffffff00005ae583de448d4c2527c43ab8220000bf0cec6bab91", 0xffffffffffffffe1}], 0x1, &(0x7f00000001c0)}, 0x0) r1 = memfd_create(&(0x7f0000000040)='eth1*+em0trustedem0-:[vmnet0cgroup\x00', 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000140)=0xfff) 04:42:57 executing program 7: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 04:42:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd0000001001010009081000410400000000fcff", 0x58}], 0x1) 04:42:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00003fefff)=""/1, 0x1) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x3) fcntl$setstatus(r0, 0x4, 0x4000) readv(r0, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) 04:42:57 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r1, &(0x7f0000002300)=[{{&(0x7f0000000280)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000480)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=""/2, 0x2}}, {{&(0x7f0000001e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002200), 0x69, &(0x7f0000000300)=""/79, 0x6}}], 0x1e6, 0x40000122, &(0x7f00000001c0)={0x77359400}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:42:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = socket$inet(0x2, 0x2, 0x6) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f0000000040)=0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@empty, @ipv4={[], [], @multicast2}, @empty, 0x7, 0x2, 0x1, 0x0, 0x0, 0x0, r2}) r3 = fcntl$getown(r0, 0x9) capset(&(0x7f00000002c0)={0x20071026, r3}, &(0x7f0000000300)={0x63247412, 0x3, 0x3f, 0x5, 0xdee, 0x4}) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x3, 0x1, 0x3, 0x0, 0x1ff, 0x100000001}) getsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000bfcffc), &(0x7f0000000040)=0xfffffffffffffcba) fstatfs(r1, &(0x7f0000000080)=""/108) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000240)) 04:42:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000000)={0x5, 0x7, 0x6b, 0x1, 0xea45, 0x4}) 04:42:58 executing program 7: lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000788000)=0x2, 0x4) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r0, &(0x7f0000000300), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)=""/21, 0x15) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x0, 0xffffff03, 0x3, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 04:42:58 executing program 5: syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="1020f5f2010007000921fac8b2d7ebb7dc0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000b5", 0x69, 0x2}], 0x0, &(0x7f00000002c0)) 04:42:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) mq_timedsend(r0, &(0x7f0000000380)="4e44b44de717ad6f7a9db41dec41123ac52676adb7b34a2ac9a6b88919b11bb3a46219f046fb96deec0cbe14d9486ace3bf67c61ac6ae45af2fc74469844a311cc4374199e500c0f13c2a76d264287ade01259f17f3017fb42937b12797e028f3b43987530f3b31b46c0f5554efab0d8227c4f5340f81a98237fff592f1949b1345dbfd5611290d28a695f26e62f09ddb3fd1844ba94f2bd08e9ee2741493a9e8d242d491f99d4739b54b4e3799823930c1c81fe5bdc537199c15500ea48df701f4bd7ecd20e21216983586b4a1fa8fac07cad3563014763c988342a8cf8e573cc4c338d335e85af3cf8457ede9b7334db36140537035af8af1dbd224a3e052c0ad9f9d25bf8ad3233b5d899a87f9b79ff580a9bc213e9148b37eb704ce837daff2b99eb57a7509a89fe98e570bac72fc48cc779d4cea738fc518de3196f7d5b1c13be4a4d9fe1969ffd54a1069678556a203631e8fc0da5a3d98a5219c9d23da41c1e91a20cdfa9954b81ec709d720e561b0ba5b8a66d01a860afda5851b0760f1af2582401ccca335b3a06b50efe3d807c36f65761165b7ca010eb90a070bd337dfa2a8d0aee82af4bda7c52809c8d6f5f3967993ce4e997eda8e013a8462dff349c2d3254a7163e9e95840f0f891f9800ff3a74bf97f92239eec17dd7db91cb125733fea4ca927f2b58be19094a40533ccba36c45a9226ddd8c7a6f21d39e370e97ce0d5c5d2389b5ac5557e335e79f75fc8ce2bf9e5f1bc79fa63111f1c1d8b87bed08667b752722c19b09bf1e44f8cdaa3fbff7bfd70218774ce00f3c201d1e3df076ab8697811ca2f49699444cd38601e8c0366617b3884f0f9e1451c7991e6e1d48966c884257f676932c0398631bc9d645ed37a94f4dd49b9e8b5017706f0b51a14f845a0d66748823c21feb6d8c7b9fc3095cbec7a7a2d24a591fca81f595d44764712a1d240d362d184d51d08c6f795ba50630152b5d53fa5410d8d008d46a5b4d572ba98d43f7dac38069aa4e88dd264decca953df8c59d58c1bd7c58d6604d059221638160d4f187b58f8ee45711c7f161d27c6d529a0853a8d8658085ea3d40b9457622c1051293b5e0bbb90df2ab61cef6e4dfb5979d375354327662cf9b03e007e27432eac5da0bb13d86eedeee50ca44fd5b4c4d94ee33eb902c5ade9d45a7fbd0479656e853431856322474f3d1a435b43f3eed339cc54e26cd585ce06d699acc8b22f88e3a8e501fa3ba303031aaf7c02dc8435fca0702c3fd06217e9687c0a8e833455665bb15a337e9e01f488781ac9b498ef8a01e3bfe2cd6c93ea5a0fcbb1b49a869c3ae8aebb7267ed1550a1503a87627ff0056f26def1e12863a4e9b7c9717cef16c6266f4dcad8d10c94e008b58679b498a3a8f839ca7addff2172026d044aed39c964139b24e2dc263600fc2736df1746144e90c890ee51cb573111d57e9a41ba4e118379fe81f27222951331f02d4ad59c1b41457e6404752770c957a63c5a62656eb5532b1d68f32fd0241d036b0c2a16bd7c495b9ec83b8e3496f561a6657df2f86275cd0c623476715d95cc20677bcf27b27ed0031d150f42eeb619495d0688365c3235a3b1c7fcc85616c31530980fc67089b91c397aca6d11a81c9d2027e0e00d06d3cc6193d6e8ad81f3513559285d933e028608ca6e0099d4e8fe0283cedf1c2ff1497ffa5bc53850b2be7bdba8a48a85ad46e143ede4c6dfa1f09540398ba0d37c564ffbde49ee95132b55a4183d3d6002e4edc95245c6600e18a5e6875a71cff3b6ab63bb1dfc7c8a28e07f2661736cf879692338d7e33d0a99a09c2b315757b026a8a23e6893c7babe4f92b7db2200c09446c7e4dd3de7616dc972dc36b039d350d8d341d0d4a8d3f011e67e4d2432b92fedb21546084a2a527377730fabb1ba781dee48b5fb7c2f122b900b79506ad460d07dd8ddd379a62d5992d9cad3434dfab929f47d90da1f831cd23bcb6dc25f2f53ffc87aff99456f62e15313aedf77a7f1362f0a42d66cf5dc035699f2c2a4cda0bc0393ed26f761d6798abdc0b57551c3130dc9548dc3bc37ced8b13be1a5cf504683f88dea703ba224b0aa9eb638b05a0be369e7a363d7ed45b055cb7145943fa877e8c861c96881b1557270bc0e04e976416d0f8b08ed92b7ca474d4f2c87a0f57386dfa10700c51b67c52cf5d4d59eb9c489126a9f7a99b5fb52104948e89a5d9be6221544a9c515c92718ece9a190dbb7fd82c46126067d1bd4708ab4a1400a55443dd8f3b139db5a91d85925955613b3117d3f1931a897c603c83ca01c43752f6a9b6a1660cc79b19ef34efcc6d2f312ec0fc396e0f2f5be2b1051b7427fd0aacdc5470669e58230f12e88dfc82283cffc9802f44189799ecf5cfa7e4fd38f6ac60fb47cc273cf0bb90fbfcf1702173d5129b9476eeda5914d2ca0c89266d265ec7f6dc720c2bff524e3718567874d1eea0f50ffb0d3a1eb213457d2622b14690501f43083ffce35cd5caf4db7281681157abbc30ec1ba1ef8a0733206df4786db31f8891b616196d6673e989c81fccaabd7826f82ec6dbfe25aca3cb6198c9e9b58b46b34cac3419c259c9f88d478977a8b3540aa4ded52f6971bd1d77ae3118e6d90dd170c8dd79d94644150050b1841b0c801d430504cde0ed0d28eb89efb964e77d8c9cdc3c91d6b886348be71ddc322461856037444d39fc3e3339ec7d040d371316063df2c6e54e3a28015b1b17f76a937285063cf6533d7b8bd8a37c9d846b25567b90c794a7117629c2e2c3566322ec698627f485c23e420af94dae500dacfd69101b76064806aab71cc6b4ff6c68ee0e3f2fe8b62e74290e9574fb80e7344c0629226b58a00abffc3a85a2ebbdb7efa1c9756682880016cee633bba7e4c622da9785c67efae25d4f519ed10db68f5b4b0da4a12c2c81d0de8e315e5589647ce01b79d185ea8937a86b20ce6763ebc9c588a7b290d1d7b20df315c615fec54adc26b935fc3a29520bb5dbc502109668e7fdec6d514ecc0fbe2557881f7f2c7d8c6ff982579c3d3a671488d281e00edf2628fc915e956b4610da64a680fd876efdd6bcc9b5dc08965841f56b5531544a747dd8fb39ce90994e28a6af5ef486a5a70f3baf5a7ce597d0ec13d5937176fe3fdff7f1041772123a6015d86c0c0489f8302240e3bab10ab03a2a7c6f4d471b0d996bfd280b637bd1b526739153ddcf8d67623ffa9ebb71ac36d274c5011678659ec30f612848eebc35313102e6058416ddb930f77e85f286f05909cd42783d10b4f0999948066b84bd78fc9804920267760df7f06345d748525f1ffe4a9860891a392ce4ca67b05a5ab2b11e87a7f408c26b04885bc5b2258f5b261dc1baf536f8c7a8bf046e49bf002d49782198271ffd165ad4c43756d8ddf2024597a525ab534af8a80340099cffdd71870d26c22bd35c1554b75f63d45763dc4e33529113dcabeb322799250e06730d522f3e26ba3d5a51d58012a69a9fda2bcb6b75a4e8ac14089048890e8359dccd397aee029b1c1c88c7bd9da79e227ef10b916e89e930756f7adff8e5449db72f8aa6615d214b8b31e377458c7d2cd03d6bfbe74f5593a45992381947494fb36ff830266df4f56657b7729f71b09ff8879425d36e0a3dd23ef235c090ebd49faa167a3fe24d2b2bf6e1a0f3be874a71776901f2a141975ec326658d536dbd4ee00633969f8aab8692cdee8a64eadffc9e6fd67648bd7e28ee8c88719499584b020be4e3948cbbbf46a3a161be9b5dd13bff087de435c39e4387569415e5093b478baa1385402524d0e2313be975bdce45d573d6eb4ad385ede72b6a6d56e91d79da137e2fb7cc11a7255c79a5dae9cc751ee8972523a7aaaca0a190d0ccf227f9aaf7e80113e22f6ba5ce83f1220b2b5dae485a152b97ad7a1e3203ad8102c8ffef92006c60a5fa2a4c8276502639090d60def0d5dbf946c4ff731094b524db2f32f1a08e5e9043ffd577cfea335d2546e06e2f664debe66a6f2985dad2c577659499aecc9f2c7eb5f8a44071ca15510ff85d964d7bb8295302451bc474aebe02cb46d17f08a4d65962e2d6398a3f3114e21dacfb3d4dbbe8bb15dc46991c11ff85745a8c2676ae1f6c127bf885f36119448321f4487d54588eaa0de57b135a6a3f920ae45a43bb8fa7cc2edd6844293a92240b9da07a52089a4ae29643286eeccc7c68dfadb6d70d48acde8ffcb2103a3a9408b4277f75d0ab94a538a508334497b710b62339027f71d7f868aebef46d914f1d94545edad86fe5d71ff1007db36ad40a85e887ad02327d96d805e5df1632412313480b902c52e5a8845799475b3c9e05ab12364b1b45121aaa338f4fa69aa795893b7399d4475f865344102b5ec1cf71ca826a74ae280cd023fc51b783f7022297fc149cf895f189840e8144dbb559bab79807ea0cca47d199f144ec29fdb3952713acfd68917c291f893daf2a44088ba0f1a3a5725a5b878de692a3a52458e364caf8b5a1552da366cc249e789384666e20737336f982699430ec8bc36c31334c7cb907e1f434209b9ab725306d29c39549270d1ff625aecd7540c6ddc243c4255dd6a46496ba4178e848b51b1e1e299570e6c519720d5241957743324d149b467ac27c89d506eddd72ea068017a5d55dba782ebd0aaace4cdcbf45522741c055586d75942e9deaedc1235eb92ab170dbe059b3b688cb8a836e230e6544d3c42853bde2ebbdd5e3e79c5b89f99e83a9a96c6bde3ea2ca50a95e706ed9a71be49c6130e592e12bba5126c450a615f76f823cf73fe87b0b41b0bd178fa5baa62f96b1dfcce97fdbdc86bdcd741e1b9e41f4b756abd2e061665d7cae849099736fd98bd80e149be0355a535df8373ed225839148aeae46959e6d7c1d3396d529d2e22649c7757b1546dd42eeef57093eb13cf052126ac4ca6eabdbcccb084d192501e3040fc935d36b48e9863f4b521ccfea9c0bf5117611b2c66b4a61fa9f40127212c43f53c47ff2cd55efe282c557f9f68a3551235604e356229b2498a4234375d80c80c907ec4012754bac11ce90206e0b2f7bbd410c2ce79fd15e994e3365985a562a5e4a2e03308ba167a61d5589e862553c53c3b53e91a591c81b48bc18fe0747434d2479ea41a9dc23d9aeb1a1cd240e3217107704bf3705db83e8390bb78ecd2392ce249098490472cb43bf5241ccfcfb11fc9a8510160c740fc6b0287d67512af33166b4aa6da80d465f0b3df143008636216c0432ab0be1f03a616a22982e41439fd019acefc1f9e9f090e16ae9105591bd4cae38222e18ed0a9f65c4e9edbba3e6edeaf8e88bf71010d9ba16a588766a24bd6152db8d2c63a435819ae352ad4b3f19777eeb09c2f47f05ae32e586fa38d62d1423bae1b34fb4f8a475af9117455876a07e0e47cb92c168b88c9de62c77eeb6b9b6523b286f5493b67d44b09311778284152f55ed7db878c8d67e1f6f9c6b9d7099a8cfd4b5bab89b04aadfdf1259b192b07bac11e0c11e19d27636054df7f3c6c601ee2e4b1a6e07f93b99a361b4fb65c5e395bf05345815eb114184ac5d59a7febb586ab69e08e8a5ffafe8b8e7df81226ba0061293705a95e8458fcdbd8210131adc81b46244a79f2228926762dbbd2af7fcb1f6e7aae4a719d817bd4fe180d7c47e66b4901f26924ab5fad56d9ad36c05964d338c4c941d1b95c09b044c4b67a76d1b908480b245eeb49d124a5917b5b0d4c56b36c9b913e39101f3e0dd87f39c1fa0971e51e7d47cadfc764e1d", 0x1000, 0xfdb9, &(0x7f0000000040)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:42:58 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r0, r1) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "dcd50f", 0x8, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x800e]}, @local, {[], @icmpv6=@echo_reply}}}}}, &(0x7f0000000340)) 04:42:58 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:42:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x64ff) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x47ffd) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000089000)) r5 = dup3(r1, r0, 0x0) writev(r5, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:42:58 executing program 1: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000140), 0x8) pipe(&(0x7f0000000000)) [ 400.533211] f2fs_msg: 6 callbacks suppressed [ 400.533220] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 400.548446] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 400.559254] FAULT_FLAG_ALLOW_RETRY missing 30 [ 400.559264] CPU: 1 PID: 25811 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 400.559270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.559286] ffff88019a567610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 400.559298] ffff8801c3c3bc80 ffff88019a5677e0 0000000000000000 ffff88019a567808 [ 400.559311] ffffffff81cbab1b 00000000000067c2 ffff88019c096930 ffff8801c3c3bd8c [ 400.559313] Call Trace: [ 400.559328] [] dump_stack+0xc1/0x128 04:42:58 executing program 7: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x20) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000100)="3fe770cb35a0bc29d7d1eae6e52e8482489ef1496973361dcd0e2005bb635a33a40045fa550f5106757444a3b4a97fbffdd7ac72f87e88f5c8c2634916c49ee9bfe58ee3598b3a70c8cb488befa20c27ea0cfc08", 0x54}, {&(0x7f0000000180)="7ccbd3085679fcd1e58ccc3e540de81ffb7c5284a27fc71e6ec517379e916f412c3e1fb42c89c4748116b3be4fecfb3d5d89677a681961191809ee6d7397e11f6e4fb7c976fe9baa4df65e9d490c4901a17a40996f2f66fccb8f9a5d454f28179f0c6a603da48175a016db393648f457d7a2d7e2ad7962a5a52fe4f52a714b94ef2ab5b4fbd3355ef346b411f366caaa29e94b86e153b74f5f9c58bb732cd1f8c7bee00530484b9e15c72f198e51d4e2798658198cd45837abcff58ae152f2", 0xbf}, {&(0x7f0000000240)="c305d5149bd0d68f6d9f2b00e05fea", 0xf}, {&(0x7f0000000280)="9c175d6ed783a2dde353e58d708a96903090f118d23ac372e9043cd8591d14dd353b7b384b0b45e5d1945d8d280ed49a0c208dfdcb1428def1d88249926cdd9e450b494bed444a1c0394872ebc4c62fdb37d662b8259599e8672e93d8c0479bcd05e090b7ca03ef644ed15a4726866130e47af5c7034b33bb47c3717a3a544d6cb39b4a7c3348b6ccc6d51cd4f53dd943cc584413a0a5427fafed46c262d153193513e30362a7c278f1421ca436d6874b21cfab418", 0xb5}, {&(0x7f0000000340)="cf807f1696397262071993726591090ff8e91644a5d2621694acbb785659e7aa79ac3fdc522a76d7c79cfaae2933ad16c2b77fb8bc75d7b43b03eadc12ab0f948d013dbb5bc0a37d3937297062428f18b846806d321d6318ffacbe7dcb66d4a07fcafe801f6a768b9422e360d8f511b3c588fb365f7548456cb1d922dd93955f84cc425f932de437ac6bf706722c4f97707de222ecbcc98aabac661105af4877ee1d488edc3e0d52d871f8201ad40119567632e4e2bb15f9417e33a71fd01a8afddcd2d06f30add82fdf57d29eff7d5c9e48b08490d6207117de21b3b178a8c157aa217b39ed", 0xe6}, {&(0x7f0000000440)="3018df444c60a8cf6c5f989044ad536c35e5c0da03a5b84130e5de011c08a1f7d0ef1b365bce30ced43df316f8b6a7c11ad190920e10deff6d9532238ea673dc572d1ceade53247644d6f28f0469c9834227da9f2f9ed4c4f1fcedc7ad134c798b1eb1643fb8503f79832caf06efb0cd33ee33fda6c036d5ccc939e638dc474d64868d11351ac570f93a3d2b511832346c9a532cab760ad9e3de164d0b42eecf9e863ead7a153e65550fad95528e3da83d818092d748bbbc379b7ec382d60a7e26c20ad4e98851255b4102d6ff66d49e", 0xd0}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000001540)="464f5a64992f3696f11bee5e0d902e6cd523483f4493268eb4f51b27c3fd08c0d05665276d7569929b8db8e9206756631df20f6cb70043615470c3168fa4ccd70dc8524c81d01bf3121e53304eef5fd9f07d51af06d7c8c5fb2f67b13eec9f74ffa2b5c577cf0e983501fcef357b244b3bfc0021e10880eefa5ad1f1741747c09521ef2d02accaa8c131aabcdc768c6524c607e28fa72b6bf5f2b11de7da8f3cf80f58a55791926c0b53c9964b64fb2af2330e598f428f2547bc2a84c3bb4fb8cdb29d74f98ce972022a08663e409c1f532dbfb6382026c715f90f743a4777", 0xdf}, {&(0x7f0000001640)="c93433e51061f602cb128f3021d79a6e882cd2c0b9cd3e3f1bcd4bd029ff6c12fd107247fbd341e3d0ec4d6251df3d05a0763087cf4e5255fc9662233647ad3f25cc8e4b545ce6bab6b132e74ee9cd5693dd4f342f90eb862beaca4dfd3d", 0x5e}], 0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0xe2a4, 0x2, 0x9, 0x2}, 0x10) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$fiemap(r2, 0x40086602, &(0x7f00000000c0)=ANY=[]) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x6) 04:42:58 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x100000009) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000530407031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="e587b3c620416a159ef65fc6d506f75b92505131e7f04f3f5fc7a8d665579489be37fa606d473ef5a1f5504e973ad99059949980f55e1d2096fd05", 0x3b}, {&(0x7f00000000c0)="778cfa6b04de0127f6f0e5476213f6c8d587366a712095bcbaef50d05a97de614dff0e2b19cf6c6666593cd19f09307d41db2e6eb8f09a8fd0e0795cdf2ed7", 0x3f}, {&(0x7f0000000100)="2509c101fca1c848a656d08f869fba145f8df42e08e86e07c9b4ef65190fe4cc4afd58b4bfe4231cb335ff9f8aa567588c4aa13c74b84ece483b48ccae92ad43e2396304cc863ae90ca64ecf81bca95f8f48de28893bf4ea04405f8c7f2baff401a6de41131a4e7bdc404da68354e28e940d2461df76c0c25d158d5a303a83b21625b95f1da137049b0cf83c56355e6c7dc896a3", 0x94}, {&(0x7f00000001c0)="bdeee038b6d255886cabd1936bcc2047824f694876b1712af4111b7fc765997976eed469d275150ee5a6936b", 0x2c}, {&(0x7f0000000200)="bd3c3fcd0b7091a5e5c11d017f0c9769a6d04353a39d5fb8cd7f3b71744887a0b7b74476bc6306345d1ed9b4225aa59c5aa76f8ef6df5938838bb086d2bca014e8547b87769a8924833eca9d442a73521d1a50050853fdcfbaf6e2aabf", 0x5d}, {&(0x7f0000000280)="12b11653ec58b792dbb32bdec79701137084561ce8bb84cf3805eb8250017ba9a46d08b27289c9741f5218537047bf90780480e94cc9974573a7192b1cd174f747dd3d3f270ceb2ed495b598e6b60a36f0e1621723717e867ebf4e323d300688884fb0681873ee5482b323c0a8ce0a50f7a39d5293813c8e5c54cf4c95a09c29d9477583fd663800cd2d50c37672e8f104c2476329b819006faf4489e7dcdef91dc5d8dea92fdbf13cc565065e9b8022f4b1459d49f48e3de8017f946c3c65944a30c611ad694293be7ea28532cc0799d8d29f", 0xd3}, {&(0x7f0000000380)="b61b2aaf0bc3756e3ee0929ffcc7eeae8498d5a9861bc689172c503995deb299a70d978fc2c3b55797af2f5253441041eb50b611c683cb6ae129b9f4a86dd0433c281129b91478ddd5c21be3ddeabc76248c23d968832d5e7e7033993efcd992ece6a8a2f6adad797909c08c19cdc88fa29927cc12612e8baac6a2ff2f4b4409dcfc5148e37a81e2e40ebef6d5047ecb58711d", 0x93}], 0x7) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 04:42:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$TCSBRKP(r0, 0x5425, 0x400) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:42:58 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) mq_timedsend(r0, &(0x7f0000000380)="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", 0x1000, 0xfdb9, &(0x7f0000000040)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) [ 400.559341] [] handle_userfault.cold.18+0x3e/0x51 [ 400.559353] [] ? debug_check_no_locks_freed+0x210/0x210 [ 400.559363] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 400.559372] [] ? unwind_next_frame+0x86/0xe0 [ 400.559380] [] ? __save_stack_trace+0x7d/0xf0 [ 400.559390] [] ? handle_mm_fault+0x1267/0x28e0 [ 400.559398] [] ? handle_mm_fault+0x220f/0x28e0 [ 400.559407] [] handle_mm_fault+0x221d/0x28e0 [ 400.559415] [] ? vm_insert_mixed+0x200/0x200 [ 400.559423] [] ? __lock_is_held+0xa2/0xf0 [ 400.559433] [] __do_page_fault+0x5af/0xd50 [ 400.559441] [] ? mm_fault_error+0x2c0/0x2c0 [ 400.559450] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.559465] [] do_page_fault+0x27/0x30 [ 400.559475] [] page_fault+0x28/0x30 [ 400.559486] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 400.559500] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 400.559510] [] ? str_to_user+0xa0/0xa0 [ 400.559520] [] ? __lock_acquire+0x654/0x4070 [ 400.559532] [] ? exit_robust_list+0x220/0x220 [ 400.559542] [] evdev_ioctl+0x27/0x30 [ 400.559550] [] ? evdev_ioctl_compat+0x30/0x30 [ 400.559559] [] do_vfs_ioctl+0x1ac/0x11a0 [ 400.559566] [] ? ioctl_preallocate+0x220/0x220 [ 400.559575] [] ? selinux_capable+0x40/0x40 [ 400.559582] [] ? __fget+0x20a/0x3b0 [ 400.559588] [] ? __fget+0x231/0x3b0 [ 400.559594] [] ? __fget+0x47/0x3b0 [ 400.559603] [] ? security_file_ioctl+0x8f/0xc0 [ 400.559610] [] SyS_ioctl+0x8f/0xc0 [ 400.559617] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 400.559625] [] do_syscall_64+0x1a6/0x490 04:42:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000180)='8', 0xfffffffffffffe02}], 0x2f5) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20000, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 04:42:58 executing program 7: socket$inet(0x10, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8935, &(0x7f0000000080)={'lo\x00', @ifru_addrs=@nfc}) 04:42:58 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) mq_timedsend(r0, &(0x7f0000000380)="4e44b44de717ad6f7a9db41dec41123ac52676adb7b34a2ac9a6b88919b11bb3a46219f046fb96deec0cbe14d9486ace3bf67c61ac6ae45af2fc74469844a311cc4374199e500c0f13c2a76d264287ade01259f17f3017fb42937b12797e028f3b43987530f3b31b46c0f5554efab0d8227c4f5340f81a98237fff592f1949b1345dbfd5611290d28a695f26e62f09ddb3fd1844ba94f2bd08e9ee2741493a9e8d242d491f99d4739b54b4e3799823930c1c81fe5bdc537199c15500ea48df701f4bd7ecd20e21216983586b4a1fa8fac07cad3563014763c988342a8cf8e573cc4c338d335e85af3cf8457ede9b7334db36140537035af8af1dbd224a3e052c0ad9f9d25bf8ad3233b5d899a87f9b79ff580a9bc213e9148b37eb704ce837daff2b99eb57a7509a89fe98e570bac72fc48cc779d4cea738fc518de3196f7d5b1c13be4a4d9fe1969ffd54a1069678556a203631e8fc0da5a3d98a5219c9d23da41c1e91a20cdfa9954b81ec709d720e561b0ba5b8a66d01a860afda5851b0760f1af2582401ccca335b3a06b50efe3d807c36f65761165b7ca010eb90a070bd337dfa2a8d0aee82af4bda7c52809c8d6f5f3967993ce4e997eda8e013a8462dff349c2d3254a7163e9e95840f0f891f9800ff3a74bf97f92239eec17dd7db91cb125733fea4ca927f2b58be19094a40533ccba36c45a9226ddd8c7a6f21d39e370e97ce0d5c5d2389b5ac5557e335e79f75fc8ce2bf9e5f1bc79fa63111f1c1d8b87bed08667b752722c19b09bf1e44f8cdaa3fbff7bfd70218774ce00f3c201d1e3df076ab8697811ca2f49699444cd38601e8c0366617b3884f0f9e1451c7991e6e1d48966c884257f676932c0398631bc9d645ed37a94f4dd49b9e8b5017706f0b51a14f845a0d66748823c21feb6d8c7b9fc3095cbec7a7a2d24a591fca81f595d44764712a1d240d362d184d51d08c6f795ba50630152b5d53fa5410d8d008d46a5b4d572ba98d43f7dac38069aa4e88dd264decca953df8c59d58c1bd7c58d6604d059221638160d4f187b58f8ee45711c7f161d27c6d529a0853a8d8658085ea3d40b9457622c1051293b5e0bbb90df2ab61cef6e4dfb5979d375354327662cf9b03e007e27432eac5da0bb13d86eedeee50ca44fd5b4c4d94ee33eb902c5ade9d45a7fbd0479656e853431856322474f3d1a435b43f3eed339cc54e26cd585ce06d699acc8b22f88e3a8e501fa3ba303031aaf7c02dc8435fca0702c3fd06217e9687c0a8e833455665bb15a337e9e01f488781ac9b498ef8a01e3bfe2cd6c93ea5a0fcbb1b49a869c3ae8aebb7267ed1550a1503a87627ff0056f26def1e12863a4e9b7c9717cef16c6266f4dcad8d10c94e008b58679b498a3a8f839ca7addff2172026d044aed39c964139b24e2dc263600fc2736df1746144e90c890ee51cb573111d57e9a41ba4e118379fe81f27222951331f02d4ad59c1b41457e6404752770c957a63c5a62656eb5532b1d68f32fd0241d036b0c2a16bd7c495b9ec83b8e3496f561a6657df2f86275cd0c623476715d95cc20677bcf27b27ed0031d150f42eeb619495d0688365c3235a3b1c7fcc85616c31530980fc67089b91c397aca6d11a81c9d2027e0e00d06d3cc6193d6e8ad81f3513559285d933e028608ca6e0099d4e8fe0283cedf1c2ff1497ffa5bc53850b2be7bdba8a48a85ad46e143ede4c6dfa1f09540398ba0d37c564ffbde49ee95132b55a4183d3d6002e4edc95245c6600e18a5e6875a71cff3b6ab63bb1dfc7c8a28e07f2661736cf879692338d7e33d0a99a09c2b315757b026a8a23e6893c7babe4f92b7db2200c09446c7e4dd3de7616dc972dc36b039d350d8d341d0d4a8d3f011e67e4d2432b92fedb21546084a2a527377730fabb1ba781dee48b5fb7c2f122b900b79506ad460d07dd8ddd379a62d5992d9cad3434dfab929f47d90da1f831cd23bcb6dc25f2f53ffc87aff99456f62e15313aedf77a7f1362f0a42d66cf5dc035699f2c2a4cda0bc0393ed26f761d6798abdc0b57551c3130dc9548dc3bc37ced8b13be1a5cf504683f88dea703ba224b0aa9eb638b05a0be369e7a363d7ed45b055cb7145943fa877e8c861c96881b1557270bc0e04e976416d0f8b08ed92b7ca474d4f2c87a0f57386dfa10700c51b67c52cf5d4d59eb9c489126a9f7a99b5fb52104948e89a5d9be6221544a9c515c92718ece9a190dbb7fd82c46126067d1bd4708ab4a1400a55443dd8f3b139db5a91d85925955613b3117d3f1931a897c603c83ca01c43752f6a9b6a1660cc79b19ef34efcc6d2f312ec0fc396e0f2f5be2b1051b7427fd0aacdc5470669e58230f12e88dfc82283cffc9802f44189799ecf5cfa7e4fd38f6ac60fb47cc273cf0bb90fbfcf1702173d5129b9476eeda5914d2ca0c89266d265ec7f6dc720c2bff524e3718567874d1eea0f50ffb0d3a1eb213457d2622b14690501f43083ffce35cd5caf4db7281681157abbc30ec1ba1ef8a0733206df4786db31f8891b616196d6673e989c81fccaabd7826f82ec6dbfe25aca3cb6198c9e9b58b46b34cac3419c259c9f88d478977a8b3540aa4ded52f6971bd1d77ae3118e6d90dd170c8dd79d94644150050b1841b0c801d430504cde0ed0d28eb89efb964e77d8c9cdc3c91d6b886348be71ddc322461856037444d39fc3e3339ec7d040d371316063df2c6e54e3a28015b1b17f76a937285063cf6533d7b8bd8a37c9d846b25567b90c794a7117629c2e2c3566322ec698627f485c23e420af94dae500dacfd69101b76064806aab71cc6b4ff6c68ee0e3f2fe8b62e74290e9574fb80e7344c0629226b58a00abffc3a85a2ebbdb7efa1c9756682880016cee633bba7e4c622da9785c67efae25d4f519ed10db68f5b4b0da4a12c2c81d0de8e315e5589647ce01b79d185ea8937a86b20ce6763ebc9c588a7b290d1d7b20df315c615fec54adc26b935fc3a29520bb5dbc502109668e7fdec6d514ecc0fbe2557881f7f2c7d8c6ff982579c3d3a671488d281e00edf2628fc915e956b4610da64a680fd876efdd6bcc9b5dc08965841f56b5531544a747dd8fb39ce90994e28a6af5ef486a5a70f3baf5a7ce597d0ec13d5937176fe3fdff7f1041772123a6015d86c0c0489f8302240e3bab10ab03a2a7c6f4d471b0d996bfd280b637bd1b526739153ddcf8d67623ffa9ebb71ac36d274c5011678659ec30f612848eebc35313102e6058416ddb930f77e85f286f05909cd42783d10b4f0999948066b84bd78fc9804920267760df7f06345d748525f1ffe4a9860891a392ce4ca67b05a5ab2b11e87a7f408c26b04885bc5b2258f5b261dc1baf536f8c7a8bf046e49bf002d49782198271ffd165ad4c43756d8ddf2024597a525ab534af8a80340099cffdd71870d26c22bd35c1554b75f63d45763dc4e33529113dcabeb322799250e06730d522f3e26ba3d5a51d58012a69a9fda2bcb6b75a4e8ac14089048890e8359dccd397aee029b1c1c88c7bd9da79e227ef10b916e89e930756f7adff8e5449db72f8aa6615d214b8b31e377458c7d2cd03d6bfbe74f5593a45992381947494fb36ff830266df4f56657b7729f71b09ff8879425d36e0a3dd23ef235c090ebd49faa167a3fe24d2b2bf6e1a0f3be874a71776901f2a141975ec326658d536dbd4ee00633969f8aab8692cdee8a64eadffc9e6fd67648bd7e28ee8c88719499584b020be4e3948cbbbf46a3a161be9b5dd13bff087de435c39e4387569415e5093b478baa1385402524d0e2313be975bdce45d573d6eb4ad385ede72b6a6d56e91d79da137e2fb7cc11a7255c79a5dae9cc751ee8972523a7aaaca0a190d0ccf227f9aaf7e80113e22f6ba5ce83f1220b2b5dae485a152b97ad7a1e3203ad8102c8ffef92006c60a5fa2a4c8276502639090d60def0d5dbf946c4ff731094b524db2f32f1a08e5e9043ffd577cfea335d2546e06e2f664debe66a6f2985dad2c577659499aecc9f2c7eb5f8a44071ca15510ff85d964d7bb8295302451bc474aebe02cb46d17f08a4d65962e2d6398a3f3114e21dacfb3d4dbbe8bb15dc46991c11ff85745a8c2676ae1f6c127bf885f36119448321f4487d54588eaa0de57b135a6a3f920ae45a43bb8fa7cc2edd6844293a92240b9da07a52089a4ae29643286eeccc7c68dfadb6d70d48acde8ffcb2103a3a9408b4277f75d0ab94a538a508334497b710b62339027f71d7f868aebef46d914f1d94545edad86fe5d71ff1007db36ad40a85e887ad02327d96d805e5df1632412313480b902c52e5a8845799475b3c9e05ab12364b1b45121aaa338f4fa69aa795893b7399d4475f865344102b5ec1cf71ca826a74ae280cd023fc51b783f7022297fc149cf895f189840e8144dbb559bab79807ea0cca47d199f144ec29fdb3952713acfd68917c291f893daf2a44088ba0f1a3a5725a5b878de692a3a52458e364caf8b5a1552da366cc249e789384666e20737336f982699430ec8bc36c31334c7cb907e1f434209b9ab725306d29c39549270d1ff625aecd7540c6ddc243c4255dd6a46496ba4178e848b51b1e1e299570e6c519720d5241957743324d149b467ac27c89d506eddd72ea068017a5d55dba782ebd0aaace4cdcbf45522741c055586d75942e9deaedc1235eb92ab170dbe059b3b688cb8a836e230e6544d3c42853bde2ebbdd5e3e79c5b89f99e83a9a96c6bde3ea2ca50a95e706ed9a71be49c6130e592e12bba5126c450a615f76f823cf73fe87b0b41b0bd178fa5baa62f96b1dfcce97fdbdc86bdcd741e1b9e41f4b756abd2e061665d7cae849099736fd98bd80e149be0355a535df8373ed225839148aeae46959e6d7c1d3396d529d2e22649c7757b1546dd42eeef57093eb13cf052126ac4ca6eabdbcccb084d192501e3040fc935d36b48e9863f4b521ccfea9c0bf5117611b2c66b4a61fa9f40127212c43f53c47ff2cd55efe282c557f9f68a3551235604e356229b2498a4234375d80c80c907ec4012754bac11ce90206e0b2f7bbd410c2ce79fd15e994e3365985a562a5e4a2e03308ba167a61d5589e862553c53c3b53e91a591c81b48bc18fe0747434d2479ea41a9dc23d9aeb1a1cd240e3217107704bf3705db83e8390bb78ecd2392ce249098490472cb43bf5241ccfcfb11fc9a8510160c740fc6b0287d67512af33166b4aa6da80d465f0b3df143008636216c0432ab0be1f03a616a22982e41439fd019acefc1f9e9f090e16ae9105591bd4cae38222e18ed0a9f65c4e9edbba3e6edeaf8e88bf71010d9ba16a588766a24bd6152db8d2c63a435819ae352ad4b3f19777eeb09c2f47f05ae32e586fa38d62d1423bae1b34fb4f8a475af9117455876a07e0e47cb92c168b88c9de62c77eeb6b9b6523b286f5493b67d44b09311778284152f55ed7db878c8d67e1f6f9c6b9d7099a8cfd4b5bab89b04aadfdf1259b192b07bac11e0c11e19d27636054df7f3c6c601ee2e4b1a6e07f93b99a361b4fb65c5e395bf05345815eb114184ac5d59a7febb586ab69e08e8a5ffafe8b8e7df81226ba0061293705a95e8458fcdbd8210131adc81b46244a79f2228926762dbbd2af7fcb1f6e7aae4a719d817bd4fe180d7c47e66b4901f26924ab5fad56d9ad36c05964d338c4c941d1b95c09b044c4b67a76d1b908480b245eeb49d124a5917b5b0d4c56b36c9b913e39101f3e0dd87f39c1fa0971e51e7d47cadfc764e1d", 0x1000, 0xfdb9, &(0x7f0000000040)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:42:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x77cfaacd4fff5f7}, 0xc, &(0x7f0000001400)={&(0x7f0000000100)={0x12d8, 0x37, 0x0, 0x70bd27, 0x25dfdbfb, {0x13}, [@generic="e36c48ff319d1f03db2d5bc46855e12098b7b277632acd24bcb0fda2854e8a7969ae9d", @typed={0xc, 0x1d, @u64=0x100000000}, @typed={0x70, 0x6, @binary="c532a4500d04b3169b46763b44f22ca9a06f84322c33d8742843eba3669884dcc44b0bdf21d32e1a3b9f016d333569c562845687bfcfe4a5dab37e76f5d658703691a092863c997f106ff02ba2f4b1d37326ab80d5c81ba9c46b08eab033125881722d385153e7520762"}, @generic="0065ceffa5b6c3436fe91a18d314007bb59b17b92243ed81d1a481e560f13edd0ffbf756c3c47bfd0f973b4b8650291868f626af86859ad6e5a8df29d0725f5de87e28cbf68bf0a00532c27096cd816eaff7a090bb3b1f941ec2dc258adbdc83f233f605b4f7260f72a190e160ee39e1cdef95f6afbb99145fc16be2d8a65cccc759c50b652ddfbbbc4549500f3ba2287249f90a68d285c225beaab9520b35f73cc9b3f74d9dcde84800383817e9be82dbfb6eafd644ae226f", @typed={0x8, 0x2f, @ipv4=@loopback}, @nested={0x10f8, 0x35, [@generic="b24dc57b1b2f2e4a39792c47530f382f441f4ebe544e23d685daed0d916445f10f51ca1b7ae95a07feae645a6ac7791f0e32fcfcb3c19684c4523807404fb0380ce78aa8d546c56e73b01059d21cb9d25fe2b4ead2e4ca199a04f73ea20bac74ee5feb25b7245d97948fb4c3cd756f0c7b9a718d51c79f28bb2e86720357a92b381a61e8107b3bd632ba7e62e1b2cd5a9d756507a8f263113ce4cc3647bd1c2188bf4c7ec5e3a84f2c07f23718184a8fd90d6f4d25e9a94b05432b3d56ca3e539870e30a06461a1dae98c5a8d6b41847b3431bd3f2de3f95494ec47992ff6eee4f1a2035fcf67e3aedec242e94fd803fa0", @generic="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"]}, @typed={0x8, 0x41, @pid=r1}, @generic="b98c5b4117e0396f8b6161b4345e04fa19d877e49114d5c5e64764a00f5b7056c591e1148066448ee67a1e53e8f8e86541f0430510ae0c5af0bacaa25da614b0038bdc8a9d81b194a118406fa81f2472c59e6e7caf23674da683838419aab36a7f17d036"]}, 0x12d8}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mmap(&(0x7f0000a79000/0xc000)=nil, 0xc000, 0x2000000, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, r0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x53a) madvise(&(0x7f0000978000/0x4000)=nil, 0x4000, 0x11) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) 04:42:58 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r0, r2, 0x80000) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f0000000540)=""/219) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2, 0x0) r4 = dup2(r2, r2) sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000640)={0x9, 0x35e2}) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000280)=""/189, 0xbd}, {&(0x7f0000000100)=""/33, 0x21}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000000180)=""/28, 0x1c}], 0x5, &(0x7f0000000440)=""/84, 0xffffffffffffff6b}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x2, 0x62, 0x0) [ 400.559633] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 400.588202] FAULT_FLAG_ALLOW_RETRY missing 30 [ 400.588212] CPU: 1 PID: 25820 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 400.588218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.588232] ffff8801d8fdf610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 400.588244] ffff8801d71f3500 ffff8801d8fdf7e0 0000000000000000 ffff8801d8fdf808 04:42:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x200, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x80, 0x2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt(r0, 0xffffffff, 0xd0, &(0x7f0000000240)=""/228, &(0x7f00000001c0)=0xe4) syz_open_pts(0xffffffffffffffff, 0x2) epoll_wait(r0, &(0x7f00000003c0)=[{}], 0x1, 0x9a0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000380)) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) creat(&(0x7f0000000400)='./file0\x00', 0x40) [ 400.588255] ffffffff81cbab1b 00000000000067c2 ffff8801d3c7d130 ffff8801d71f360c [ 400.588258] Call Trace: [ 400.588271] [] dump_stack+0xc1/0x128 [ 400.588284] [] handle_userfault.cold.18+0x3e/0x51 [ 400.588295] [] ? debug_check_no_locks_freed+0x210/0x210 [ 400.588311] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 400.588321] [] ? check_preemption_disabled+0x3b/0x170 [ 400.588329] [] ? check_preemption_disabled+0x3b/0x170 [ 400.588338] [] ? handle_mm_fault+0x1267/0x28e0 [ 400.588346] [] ? handle_mm_fault+0x220f/0x28e0 [ 400.588354] [] handle_mm_fault+0x221d/0x28e0 [ 400.588362] [] ? vm_insert_mixed+0x200/0x200 [ 400.588369] [] ? __lock_is_held+0xa2/0xf0 [ 400.588379] [] __do_page_fault+0x5af/0xd50 [ 400.588387] [] ? mm_fault_error+0x2c0/0x2c0 [ 400.588395] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.588402] [] do_page_fault+0x27/0x30 [ 400.588410] [] page_fault+0x28/0x30 [ 400.588418] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 400.588427] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 400.588435] [] ? str_to_user+0xa0/0xa0 [ 400.588442] [] ? __lock_acquire+0x654/0x4070 [ 400.588451] [] ? exit_robust_list+0x220/0x220 [ 400.588459] [] evdev_ioctl+0x27/0x30 [ 400.588467] [] ? evdev_ioctl_compat+0x30/0x30 [ 400.588474] [] do_vfs_ioctl+0x1ac/0x11a0 [ 400.588481] [] ? ioctl_preallocate+0x220/0x220 [ 400.588489] [] ? selinux_capable+0x40/0x40 [ 400.588495] [] ? __fget+0x20a/0x3b0 [ 400.588501] [] ? __fget+0x231/0x3b0 [ 400.588507] [] ? __fget+0x47/0x3b0 [ 400.588515] [] ? security_file_ioctl+0x8f/0xc0 [ 400.588522] [] SyS_ioctl+0x8f/0xc0 [ 400.588529] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 400.588536] [] do_syscall_64+0x1a6/0x490 [ 400.588544] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 400.745819] audit: type=1107 audit(2000004178.348:4): pid=25837 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg=' [ 400.745819] ' [ 400.764435] audit: type=1107 audit(2000004178.368:5): pid=25837 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg=' [ 400.764435] ' [ 400.823159] FAULT_FLAG_ALLOW_RETRY missing 30 [ 400.823170] CPU: 1 PID: 25852 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 400.823175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.823190] ffff8801a7b67950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 400.823201] ffff8801b88d8000 ffff8801a7b67b20 0000000000000000 ffff8801a7b67b48 [ 400.823212] ffffffff81cbab1b 0000000000000dca ffff88019c89a108 ffff8801b88d810c [ 400.823215] Call Trace: [ 400.823228] [] dump_stack+0xc1/0x128 [ 400.823238] [] handle_userfault.cold.18+0x3e/0x51 [ 400.823249] [] ? debug_check_no_locks_freed+0x210/0x210 [ 400.823259] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 400.823271] [] ? check_preemption_disabled+0x3b/0x170 [ 400.823281] [] ? handle_mm_fault+0x1267/0x28e0 [ 400.823289] [] ? handle_mm_fault+0x220f/0x28e0 [ 400.823297] [] handle_mm_fault+0x221d/0x28e0 [ 400.823304] [] ? vm_insert_mixed+0x200/0x200 [ 400.823314] [] __do_page_fault+0x5af/0xd50 [ 400.823322] [] ? mm_fault_error+0x2c0/0x2c0 [ 400.823330] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.823338] [] do_page_fault+0x27/0x30 [ 400.823346] [] page_fault+0x28/0x30 [ 400.823355] [] ? do_sigaltstack+0x267/0x6f0 [ 400.823362] [] ? do_sigaltstack+0x271/0x6f0 [ 400.823371] [] ? security_file_ioctl+0x8f/0xc0 [ 400.823379] [] SyS_sigaltstack+0x6c/0x90 [ 400.823387] [] ? do_sigaction+0x8c0/0x8c0 [ 400.823394] [] do_syscall_64+0x1a6/0x490 [ 400.823402] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 400.823426] FAULT_FLAG_ALLOW_RETRY missing 30 [ 400.823433] CPU: 1 PID: 25847 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 400.823436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.823448] ffff8801c70df610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 400.823460] ffff8801b88d8000 ffff8801c70df7e0 0000000000000000 ffff8801c70df808 [ 400.823472] ffffffff81cbab1b 00000000000067c2 ffff8801ac50e930 ffff8801b88d810c [ 400.823474] Call Trace: [ 400.823482] [] dump_stack+0xc1/0x128 [ 400.823492] [] handle_userfault.cold.18+0x3e/0x51 [ 400.823502] [] ? debug_check_no_locks_freed+0x210/0x210 [ 400.823512] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 400.823522] [] ? check_preemption_disabled+0x3b/0x170 [ 400.823530] [] ? check_preemption_disabled+0x3b/0x170 [ 400.823538] [] ? handle_mm_fault+0x1267/0x28e0 [ 400.823546] [] ? handle_mm_fault+0x220f/0x28e0 [ 400.823553] [] handle_mm_fault+0x221d/0x28e0 [ 400.823561] [] ? vm_insert_mixed+0x200/0x200 [ 400.823573] [] ? __lock_is_held+0xa2/0xf0 [ 400.823582] [] __do_page_fault+0x5af/0xd50 [ 400.823590] [] ? mm_fault_error+0x2c0/0x2c0 [ 400.823597] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.823605] [] do_page_fault+0x27/0x30 [ 400.823612] [] page_fault+0x28/0x30 [ 400.823620] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 400.823629] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 400.823637] [] ? str_to_user+0xa0/0xa0 [ 400.823644] [] ? __lock_acquire+0x654/0x4070 [ 400.823653] [] ? exit_robust_list+0x220/0x220 [ 400.823661] [] evdev_ioctl+0x27/0x30 [ 400.823669] [] ? evdev_ioctl_compat+0x30/0x30 [ 400.823676] [] do_vfs_ioctl+0x1ac/0x11a0 [ 400.823683] [] ? ioctl_preallocate+0x220/0x220 [ 400.823690] [] ? selinux_capable+0x40/0x40 [ 400.823696] [] ? __fget+0x20a/0x3b0 [ 400.823702] [] ? __fget+0x231/0x3b0 [ 400.823708] [] ? __fget+0x47/0x3b0 [ 400.823716] [] ? security_file_ioctl+0x8f/0xc0 [ 400.823722] [] SyS_ioctl+0x8f/0xc0 [ 400.823729] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 400.823736] [] do_syscall_64+0x1a6/0x490 [ 400.823743] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 400.996913] FAULT_FLAG_ALLOW_RETRY missing 30 [ 400.996923] CPU: 0 PID: 25860 Comm: syz-executor1 Not tainted 4.9.116-g52be322 #17 [ 400.996929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.996943] ffff8801a7b67610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 400.996955] ffff8801c3c3be00 ffff8801a7b677e0 0000000000000000 ffff8801a7b67808 [ 400.996966] ffffffff81cbab1b 00000000000067c2 ffff88019bffd130 ffff8801c3c3bf0c [ 400.996968] Call Trace: [ 400.996981] [] dump_stack+0xc1/0x128 [ 400.996990] [] handle_userfault.cold.18+0x3e/0x51 [ 400.997001] [] ? debug_check_no_locks_freed+0x210/0x210 [ 400.997013] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 400.997023] [] ? check_preemption_disabled+0x3b/0x170 [ 400.997030] [] ? check_preemption_disabled+0x3b/0x170 [ 400.997040] [] ? handle_mm_fault+0x1267/0x28e0 [ 400.997047] [] ? handle_mm_fault+0x220f/0x28e0 [ 400.997055] [] handle_mm_fault+0x221d/0x28e0 [ 400.997062] [] ? vm_insert_mixed+0x200/0x200 [ 400.997070] [] ? __lock_is_held+0xa2/0xf0 [ 400.997080] [] __do_page_fault+0x5af/0xd50 [ 400.997088] [] ? mm_fault_error+0x2c0/0x2c0 [ 400.997096] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.997103] [] do_page_fault+0x27/0x30 [ 400.997112] [] page_fault+0x28/0x30 [ 400.997120] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 400.997130] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 400.997138] [] ? str_to_user+0xa0/0xa0 [ 400.997145] [] ? __lock_acquire+0x654/0x4070 [ 400.997154] [] ? exit_robust_list+0x220/0x220 [ 400.997162] [] evdev_ioctl+0x27/0x30 [ 400.997169] [] ? evdev_ioctl_compat+0x30/0x30 [ 400.997176] [] do_vfs_ioctl+0x1ac/0x11a0 [ 400.997183] [] ? ioctl_preallocate+0x220/0x220 [ 400.997191] [] ? selinux_capable+0x40/0x40 [ 400.997198] [] ? __fget+0x20a/0x3b0 [ 400.997204] [] ? __fget+0x231/0x3b0 [ 400.997210] [] ? __fget+0x47/0x3b0 [ 400.997218] [] ? security_file_ioctl+0x8f/0xc0 [ 400.997224] [] SyS_ioctl+0x8f/0xc0 [ 400.997231] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 400.997237] [] do_syscall_64+0x1a6/0x490 [ 400.997245] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 401.121216] FAULT_FLAG_ALLOW_RETRY missing 30 [ 401.121227] CPU: 0 PID: 25874 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 401.121232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.121246] ffff8801b5de7610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 401.121258] ffff8801c3c3a300 ffff8801b5de77e0 0000000000000000 ffff8801b5de7808 [ 401.121269] ffffffff81cbab1b 00000000000067c2 ffff88019bbbb930 ffff8801c3c3a40c [ 401.121271] Call Trace: [ 401.121285] [] dump_stack+0xc1/0x128 [ 401.121294] [] handle_userfault.cold.18+0x3e/0x51 [ 401.121304] [] ? debug_check_no_locks_freed+0x210/0x210 [ 401.121316] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 401.121329] [] ? handle_mm_fault+0x1267/0x28e0 [ 401.121338] [] ? handle_mm_fault+0x220f/0x28e0 [ 401.121347] [] handle_mm_fault+0x221d/0x28e0 [ 401.121355] [] ? vm_insert_mixed+0x200/0x200 [ 401.121362] [] ? __lock_is_held+0xa2/0xf0 [ 401.121372] [] __do_page_fault+0x5af/0xd50 [ 401.121380] [] ? mm_fault_error+0x2c0/0x2c0 [ 401.121388] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.121396] [] do_page_fault+0x27/0x30 [ 401.121404] [] page_fault+0x28/0x30 [ 401.121412] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 401.121421] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 401.121428] [] ? str_to_user+0xa0/0xa0 [ 401.121436] [] ? __lock_acquire+0x654/0x4070 [ 401.121445] [] ? exit_robust_list+0x220/0x220 [ 401.121453] [] evdev_ioctl+0x27/0x30 [ 401.121460] [] ? evdev_ioctl_compat+0x30/0x30 [ 401.121467] [] do_vfs_ioctl+0x1ac/0x11a0 [ 401.121474] [] ? ioctl_preallocate+0x220/0x220 [ 401.121482] [] ? selinux_capable+0x40/0x40 [ 401.121488] [] ? __fget+0x20a/0x3b0 [ 401.121494] [] ? __fget+0x231/0x3b0 [ 401.121500] [] ? __fget+0x47/0x3b0 [ 401.121508] [] ? security_file_ioctl+0x8f/0xc0 [ 401.121514] [] SyS_ioctl+0x8f/0xc0 [ 401.121521] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 401.121527] [] do_syscall_64+0x1a6/0x490 [ 401.121542] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 401.121571] FAULT_FLAG_ALLOW_RETRY missing 30 [ 401.121580] CPU: 0 PID: 25877 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 401.121584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.121597] ffff88019c35f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 401.121609] ffff8801c3c3a300 ffff88019c35fb20 0000000000000000 ffff88019c35fb48 [ 401.121620] ffffffff81cbab1b 0000000000000dca ffff8801cd9ea108 ffff8801c3c3a40c [ 401.121621] Call Trace: [ 401.121630] [] dump_stack+0xc1/0x128 [ 401.121638] [] handle_userfault.cold.18+0x3e/0x51 [ 401.121649] [] ? debug_check_no_locks_freed+0x210/0x210 [ 401.121659] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 401.121669] [] ? handle_mm_fault+0x1267/0x28e0 [ 401.121676] [] ? handle_mm_fault+0x220f/0x28e0 [ 401.121684] [] handle_mm_fault+0x221d/0x28e0 [ 401.121692] [] ? vm_insert_mixed+0x200/0x200 [ 401.121701] [] __do_page_fault+0x5af/0xd50 [ 401.121709] [] ? mm_fault_error+0x2c0/0x2c0 [ 401.121716] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 401.121724] [] do_page_fault+0x27/0x30 [ 401.121730] [] page_fault+0x28/0x30 [ 401.121738] [] ? do_sigaltstack+0x267/0x6f0 [ 401.121745] [] ? do_sigaltstack+0x271/0x6f0 [ 401.121753] [] ? security_file_ioctl+0x8f/0xc0 [ 401.121761] [] SyS_sigaltstack+0x6c/0x90 [ 401.121773] [] ? do_sigaction+0x8c0/0x8c0 [ 401.121779] [] do_syscall_64+0x1a6/0x490 [ 401.121787] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 402.315633] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.322653] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 402.330219] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.337296] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 402.344785] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.351836] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 04:43:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400800, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000100)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1, &(0x7f00000017c0)=""/116, 0x74}}], 0x1, 0x0, &(0x7f0000004a40)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='cpuset\x00') syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x400082) preadv(r0, &(0x7f0000000140), 0x391, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2, 0x0) 04:43:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000280)=0xfffffffffffffefe) ioctl(r0, 0x8912, &(0x7f0000000340)="025c3f0a00145f8f7640709510d68370fc9bbba72245a87f455e7b1b6ca340281d333c8d37759ce4bfc836fdbd028962e3de85d6dcb13fcfac9bb854bd94e4d1d27907130e15062e") getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xffffffffffffff08) r1 = open$dir(&(0x7f0000000240)='./file0/../file0\x00', 0x100, 0x80) getresuid(&(0x7f0000000300)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) getresgid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) fchownat(r1, &(0x7f00000002c0)='./file0\x00', r2, r3, 0x100) syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010a020002240af8", 0x16}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='c=relaxed,\x00\x00\x00\x00\x00']) socket(0xe, 0x807, 0xffffffffffffffff) 04:43:00 executing program 7: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x20) socketpair(0x5, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) dup3(r3, r4, 0x80000) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 04:43:00 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="c00003f09787757331c29b27070317c874e508798234c477fe86bb2b6a6550973f3d3afc7d2a26c54ee13aa4ed3d0e69", 0x30, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000400)={'veth1\x00', {0x2, 0x0, @broadcast}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={&(0x7f00000002c0), 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x28, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_XDP={0x8, 0x2b, [@nested={0x4, 0x1}]}]}, 0x28}}, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r3, 0x0) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth1_to_bond\x00', 0x1800}) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 04:43:00 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mknod(&(0x7f0000000240)='./file0\x00', 0x1040, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x26e, 0x0) dup3(r1, r1, 0x80000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x484000, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) close(r1) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000000c0)={0x0, 0xca, "71acece38da7435c6f4793c99b377a5e758a4c79b3557dc5a764180aff1a1e841ceeba83502c750b2be0c04bf1a4ed5cdda76ad2d1e39f69e1c2f50cedd37ed8531683379dc06ed70573c14118e4f87f424cf1ec3a5027a923fca777a83a3075b005f3100979c7da0d1b68d0af6271aa149d672950f67f43b32a441b004fd5c7a2ef54636c746d995a3490c4fbcf53410b67373434bef0847ed1f6cf03247d8a8f89fc9e0e2a143fe84536f0e727d44c83dde87ccb76e4491f6369f58cae5eac4f51fbeb1b2be6ec4238"}) 04:43:00 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:43:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r2, r1, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000000040)='I', 0x1}], 0x1) flistxattr(r3, &(0x7f0000000000)=""/25, 0x19) 04:43:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000013000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:00 executing program 0: r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x100000002}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) 04:43:00 executing program 6: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000500)='net/arp\x00') read(r1, &(0x7f0000000100)=""/252, 0xfc) [ 402.426386] FAT-fs (loop6): Unrecognized mount option "c=relaxed" or missing value 04:43:00 executing program 1: r0 = accept(0xffffffffffffff9c, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f00000000c0)=0x80) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000000)={'veth1_to_team\x00', 0x8}) setsockopt$inet_opts(r1, 0x0, 0x11, &(0x7f0000000000), 0x66) sendmsg(r0, &(0x7f0000001a40)={&(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x80, &(0x7f0000001580)=[{&(0x7f00000002c0)="e37199423452f66ed0b5460d01c48c6cb70e70c6c19a4cff35", 0x19}, {&(0x7f0000000300)="b3dbbbf2f62df8f749714c56b4a909755340290c104cff619df906c3ac1b74d31b4ea37ebe75437cd1873572b0d8c5b4ad64d898a971483b82fe20a033059d488b51c429c39449a220a206c1dd8070ff344781ef55ff84b51924beb4dacaafdd136e9ec6b0787c07b0b4b14c84e3c58ad62941", 0x73}, {&(0x7f0000000380)="8abb1d6307087ade6edf8af6fb61e8f8ae1dcfbcd0e497528b50b32bf3c80593d7656578a41f70708c0d16589f35ed9e7ad8995b40090c4fbc3f79667f478905a0b3da731116be0fe15d28434956155e64392489a141088338cc662e50dd898d90eda9", 0x63}, {&(0x7f0000000400)="c3d997a17667c9285f3f612822dd4b68a5293f66870591a1cc3488ebbebf3419bc8a65bbaa0a42b3620603edafb674d907fb285c2236f35f9ec9512a5fa6da9c104caa856cdb773c00d0a6a0ba256735dbcfe40b20f31518d438e23d45f0a1a2143c4f7eb907f35f85f23555307621f0e38d1265d1e278b2750fd6cc1c2c3b560a44c658475b0f88b585886f6c1892781b521eef7e691eada34690131ea208b765d9b86236e8033670af46f8a3668b37b3add2bb3d636b9dcc6f8b5cc54aa0157e770768c9ace6cb3c9507cdb3d90c98e3a733413763934a104ebeb8f8678434576c022d1ac1696864e6772eb0b0fa405b7ed7769c", 0xf5}, {&(0x7f0000000500)="8fece05964e4f893d73c369f4c61b2d9d4d7bf6a879edfae0c1043b4a9871aaa6ddb79c4c06daef716d3bab607aa08a07c07323ce1eaeb5d9faf4abdba3a67249a43d96faa82e7522b1bf5932e57b93727fb387f346246bb7bb13cb2", 0x5c}, {&(0x7f0000000580)="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", 0x1000}], 0x6, &(0x7f0000001600)=[{0x70, 0x3b, 0x3ff, "cffb9e99519a7c5051906ceda0244d7f601744b03c964f7350d0ff34d71fd32ade7bbd02b491795efbbd90186500df8d0167aef14a3592f84c68193c6a8c9a499a2968c2b83de70c88dc940f11f230acf8f63373ae8675c240955e"}, {0x108, 0x107, 0xc9, "9a259a88d00b2e417c9f56f6468f6ca24ec441eb525999a95d05dcd581ff43678e61f0b73941a2634ac8383a372537193e999b3c5970a316b532ccc12e5cbc1e5a81802aba6be2f157bb8460e0f6cc2bf4754c41d5789b8a3d8637cd646bb5d7a11c4aac18164fd0ac978d60b07236439451d657af6784d371ed45910523d6603ea259dbd67d0866aaf4eac23942a39f671607d6b929d1587ba8f97b9e6be60dd92051670cf2774c895422296d9572330fa0744632c4f24af99e2075c82662aea9d4496d77577ab4d541be657b3e8d045e9c4c4006b28bdd1a87bea42c3a4061928a672cb87ac601fd1e586c95eac379ae5c19375cf9"}, {0x90, 0x1, 0x9, "b5b6b3d1dfdf5fbfeebd10524084644729cf02515f42645cf8735260c69f01afd69a2d86a3c358c4b6e574d084a1e573f4529cab1cc099f78c75399adc55f44c8512d09597c7d74955e23a7cef485987d3c46b8edc64f971d3e0b121ceee8e29711c5ae80679eb3032ec6ca871872eee3b3a4f6c1e994c0421cbcfc1"}, {0x18, 0x10c, 0x3ff, "7ce3c1e707a7"}, {0x80, 0x105, 0x7, "f22607081a94deb756babed517df51d4fa7c6439ace7796aab79cb89e37dd65c36a80faa8ac90bb48430deaeda8499ed95cc0eaf08e26f22397db5909ab0a1b316bb6f70a078f8dde3cd2d5d6e172823cbedeb97391b8ec1e49db5af7d893c726836915dcd1af706e684"}, {0xf0, 0xd2bb13ecf020ddbe, 0x6, "13ab16ddcbcc280784d013b67e93189b8b104339f5c087cac0e178a8643c8674ba0eb7e93641cfe7969fdf2de45eff809d384659225a00da78402cd28c27386d30ce50047ac2485266f408c5299658200c4484a34f22f85ff45fe7923aed7337a7685e5a3077365e453a5f13958e38c9412970ca957d9d2b07a6603baf4ee9030af9cca4ddb8630435406efd1c32168da8350409d508dc4074df404de37dc38d7b74d48481af332158b5ca6f84baea70794ce420821be7d49095edab0755a738eb7a7deac8c4308431340071683efbf499e892f999bc58ea76871fbc7c6664"}, {0x78, 0x1, 0x0, "44d152f424699490b4bafaa8f277d601e5962ee9b4c0e57ff7878d791994e03d461f4a1748188daa55dcd1788c75a07274fb278e6b53d4d700074ed03d535dd30bc69404867fc34518e749f74bc8cc37134f19a62fe27d58ed32220ad2d0b71a11d539ce"}], 0x408, 0x800}, 0x80) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x78) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001a80)='/selinux/checkreqprot\x00', 0x200a40, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000001ac0)={0x6, 0x7ff}) [ 402.498819] FAULT_FLAG_ALLOW_RETRY missing 30 [ 402.512432] CPU: 0 PID: 25913 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 402.520170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.529520] ffff88019a9ef950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 402.537552] ffff8801b88d8300 ffff88019a9efb20 0000000000000000 ffff88019a9efb48 [ 402.545614] ffffffff81cbab1b 0000000000000dca ffff8801b55aa108 ffff8801b88d840c [ 402.553671] Call Trace: [ 402.556252] [] dump_stack+0xc1/0x128 [ 402.561604] [] handle_userfault.cold.18+0x3e/0x51 [ 402.568087] [] ? debug_check_no_locks_freed+0x210/0x210 [ 402.575084] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 402.581475] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 402.588292] [] ? handle_mm_fault+0x1267/0x28e0 [ 402.594523] [] ? handle_mm_fault+0x220f/0x28e0 [ 402.600741] [] handle_mm_fault+0x221d/0x28e0 [ 402.606779] [] ? vm_insert_mixed+0x200/0x200 [ 402.612819] [] __do_page_fault+0x5af/0xd50 [ 402.618695] [] ? mm_fault_error+0x2c0/0x2c0 [ 402.624645] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 402.631287] [] do_page_fault+0x27/0x30 [ 402.636804] [] page_fault+0x28/0x30 [ 402.642057] [] ? do_sigaltstack+0x267/0x6f0 04:43:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f0000000600)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x20000) r2 = epoll_create1(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x140) renameat(r3, &(0x7f0000000580)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00') execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000100)="ce73656375726974792425626465767472757374656400", &(0x7f0000000140)='/dev/ptmx\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/ptmx\x00', &(0x7f0000000200)='/dev/ptmx\x00', &(0x7f0000000240)=')cgroupGPLppp1\x00', &(0x7f0000000280)='&nodev:security{#\x00', &(0x7f00000002c0)='/dev/ptmx\x00', &(0x7f0000000300)='proc:bdev\x00', &(0x7f0000000340)='\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='/dev/ptmx\x00', &(0x7f0000000440)='/dev/ptmx\x00', &(0x7f0000000480)='/dev/ptmx\x00', &(0x7f00000004c0)='/dev/ptmx\x00', &(0x7f0000000500)='eth1\x00'], 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) times(&(0x7f0000000040)) r4 = dup3(r1, r0, 0x0) syz_emit_ethernet(0x124, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaa67914056a671e20f41ed1036551c4a75c805ffffffffffffffffffff0000ffffffff0000000000000000c462acddaf29420000ae2836b9f36e34bb52d25ed9f83d84370dfc62fe6b992cd82922321f263b5e3801221da4a2aa21ebf961da09ac7c05a8e60366b8acd2588f2949b5ebe78e33934a23c3dda6ce9cf55dd8fdb46269d9440604ed7879e4428c3ec17b6300020000000000003db81fd0d36eaa9e5cb9c53e5bb26ceb3d1fb97ec88df120af5c1dea6d30a998649f66bac93b3b2253bfb316adc08d5eb3dc271d8753f072d6f8e10c36329db30334ec466fc73645d1804c5678582354e99ad0bca61b2aa43297c7e33a627772a5e3976a7e0100000000000000000000000000000000000000000000b79577542febaacb2681bbb929816699311bb8fe91a6076d24ba1c7c23e5cb69d1e10ad43d57ba96f81e62b571e43d8dfd2a35e2cfc2f5ebcf6653ac96b40b5e6dee2e197144c1c0beae87da0cabfe818e1f7c85da341764"], &(0x7f0000000840)={0x0, 0x4, [0x35d, 0x26, 0xe63, 0x757]}) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) fcntl$setflags(r4, 0x2, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001008}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa8, r5, 0x704, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1a}}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xa8}}, 0x20000004) 04:43:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r2, r1, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000000040)='I', 0x1}], 0x1) flistxattr(r3, &(0x7f0000000000)=""/25, 0x19) 04:43:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000001400)=""/204, 0xcc}], 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) [ 402.648010] [] ? do_sigaltstack+0x271/0x6f0 [ 402.653977] [] ? security_file_ioctl+0x8f/0xc0 [ 402.660191] [] SyS_sigaltstack+0x6c/0x90 [ 402.665900] [] ? do_sigaction+0x8c0/0x8c0 [ 402.671675] [] do_syscall_64+0x1a6/0x490 [ 402.677373] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0xfffffffffffffffe}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @rand_addr}, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) dup3(r0, r1, 0x0) 04:43:00 executing program 0: set_thread_area(&(0x7f0000000200)={0xffffffffffffdf7f, 0x20000000, 0x4400, 0xfffffffffffffff8, 0x5, 0x1, 0x4, 0x4, 0xc83, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, 0x9) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000001c0)={0xffffffff, 0x1ff, 0x4}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x10000000000009, 0xfffffffffffffff9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x6}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 04:43:00 executing program 6: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000788000)=0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000480)="00eb0c432d0174df5f00", 0x3) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) sendfile(r0, r0, &(0x7f0000000000), 0x2000005) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000380)) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f00000003c0)) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000002d40)={@remote, 0x0}, &(0x7f0000002d80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000840)=""/161) ioprio_get$uid(0x3, r3) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@local, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x10001, 0x2, 0xa0, 0x80, 0x7f, r2, r3}, {0x80, 0x7, 0x0, 0x0, 0x0, 0xa9b, 0x7, 0xffff}, {0xff, 0x761, 0x458, 0x1}, 0x40, 0x6e6bb4, 0x0, 0x0, 0x3, 0x2}, {{@in=@rand_addr, 0x4d5, 0x33}, 0xa, @in=@rand_addr=0x40, 0x34ff, 0x1, 0x3, 0x7ac, 0x2, 0x3a2c, 0x5}}, 0xe8) sendmmsg(r0, &(0x7f0000003340)=[{{&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @loopback}, 0x2, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000400)=ANY=[]}, 0x2}], 0x1, 0x4040000) ioctl$LOOP_CLR_FD(r0, 0x4c01) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974792e2f6465762f66756c6c00df8ea4a00d7939dc71b09658c4d5db1ee41ca05daaa106484f1f8a2cee2946d45f1e7d0a462f33953006c21c2d"]) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000780)={0xfff, {{0xa, 0x4e21, 0x10001, @ipv4, 0x100000000}}}, 0x62c) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="380000001d0000002cbd7000fbdbdf250a000000", @ANYRES32=r2, @ANYBLOB="1000200b1400eea667efb55803009000000008000000f8020000f1fbffff0800050004000000"], 0x38}}, 0x4000000) fanotify_init(0x12, 0x1) modify_ldt$read(0x0, &(0x7f0000000900)=""/209, 0xd1) 04:43:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) inotify_init1(0x80000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:00 executing program 7: clock_settime(0x6f0960c220540ad0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cwroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000080)={@local, @local, 0x0}, &(0x7f0000000200)=0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'ipddp0\x00', 0x3}, 0x18) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={@ipv4={[], [], @loopback}, @remote, @empty, 0x5, 0x7, 0x40, 0x500, 0x6, 0x100000, r1}) 04:43:00 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000000a80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000b00)=0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000b40)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000c40)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000c80)={'gretap0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000dc0)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000f00)={{{@in6=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@rand_addr}}, &(0x7f0000001000)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001080)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f00000010c0)={0x438, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x230, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x8, 0x3, 0x2}]}}}]}}, {{0x8, 0x1, r12}, {0x128, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x86}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}]}}]}, 0x438}, 0x1, 0x0, 0x0, 0x40}, 0x800) r14 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r14, &(0x7f0000e3e000)=""/8, 0x8, 0x100800) 04:43:00 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) readv(r1, &(0x7f0000000000), 0x15b) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) mq_timedsend(r2, &(0x7f0000000040)="11d370f8", 0x4, 0x9, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000200)=0x4) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x1}, {{0x2}}], 0x30) accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000100)={'team0\x00', {0x2, 0x4e23, @multicast1}}) 04:43:00 executing program 0: set_thread_area(&(0x7f0000000200)={0xffffffffffffdf7f, 0x20000000, 0x4400, 0xfffffffffffffff8, 0x5, 0x1, 0x4, 0x4, 0xc83, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}], 0x2, 0x9) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000001c0)={0xffffffff, 0x1ff, 0x4}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x10000000000009, 0xfffffffffffffff9) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x2, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x6}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) 04:43:00 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f0000000080)=""/11, 0x392) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCCONS(r2, 0x541d) 04:43:00 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) userfaultfd(0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:00 executing program 6: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000), 0xc, &(0x7f0000001780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000030000000000000000100000000000000400001003c00000000000c8001006db67272e72597dfe1f9268dce63d8796564000024000200200002000000000000000000f7780000", @ANYRES32=0x0, @ANYBLOB="040006000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000540)=""/246) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000000c0)={0x7a, ""/122}) 04:43:00 executing program 7: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x241, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400200, 0x0) write$eventfd(r0, &(0x7f0000000180)=0x20000100000001, 0xc) 04:43:00 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=@known='security.evm\x00', &(0x7f0000000280)="736563a8726974ffffffff706162696d69747900", 0x14, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=@known='security.evm\x00', &(0x7f0000000100)="0000000201000000000000010400000000000000", 0x14, 0x0) 04:43:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) rmdir(&(0x7f0000000040)='./file0\x00') r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="02c010cc0791bf6ef44070") unshare(0x2000400) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x4, 0x101080) r1 = socket$inet6(0xa, 0x2, 0x0) getegid() connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x5, 0x4) 04:43:01 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:01 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x6cc87a3ca55c853) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl(r2, 0x40, &(0x7f0000000200)="7af31af4301669bd44ae1a511c4db0308b6b71ecc59494be486067eeced269cc835530c5f52cf830c7fe072c000acb9e5a4ca7e574400e81a7e94d103607c32972e859e5934978846d476499cd78f4ac5c9b7f") close(r0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000180), &(0x7f00000001c0), 0x8) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) 04:43:01 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80400, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff0f38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14}, 0x14) 04:43:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x800000000000011, 0x800000002, 0x0) bind(r2, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) tee(r1, r1, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) getsockname$packet(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r3}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) 04:43:01 executing program 0: r0 = creat(&(0x7f00000004c0)='./file0\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000003c0)=0x7, 0x4) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="6f940c0c72656375726974792e6361706162696c7d6adedf"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r2, 0x0, 0x0, 0x1000f4) faccessat(r1, &(0x7f0000000400)='./bus\x00', 0x10, 0x400) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) r4 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000480)='./file0\x00', &(0x7f0000000380)=""/64, 0x3eb) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) sendfile(r0, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 04:43:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f0000000600)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x20000) r2 = epoll_create1(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x140) renameat(r3, &(0x7f0000000580)='./file0\x00', r3, &(0x7f00000005c0)='./file0\x00') execveat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000100)="ce73656375726974792425626465767472757374656400", &(0x7f0000000140)='/dev/ptmx\x00', &(0x7f0000000180)='\x00', &(0x7f00000001c0)='/dev/ptmx\x00', &(0x7f0000000200)='/dev/ptmx\x00', &(0x7f0000000240)=')cgroupGPLppp1\x00', &(0x7f0000000280)='&nodev:security{#\x00', &(0x7f00000002c0)='/dev/ptmx\x00', &(0x7f0000000300)='proc:bdev\x00', &(0x7f0000000340)='\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='/dev/ptmx\x00', &(0x7f0000000440)='/dev/ptmx\x00', &(0x7f0000000480)='/dev/ptmx\x00', &(0x7f00000004c0)='/dev/ptmx\x00', &(0x7f0000000500)='eth1\x00'], 0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) times(&(0x7f0000000040)) r4 = dup3(r1, r0, 0x0) syz_emit_ethernet(0x124, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)={0x0, 0x4, [0x35d, 0x26, 0xe63, 0x757]}) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) fcntl$setflags(r4, 0x2, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001008}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa8, r5, 0x704, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1a}}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0xa8}}, 0x20000004) 04:43:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000180)={0x5, 0xe06f041, 0xffffffffffffbc9e, 0x1, 0x6}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0000058029ab00983654f28e7352700", @ANYRES16=r2, @ANYBLOB="00062dbd7000fbdbdf250900000008000500050000000800040000100000080005000000000038000200080002004e21000008000800090000000800080008000000080006000100000014000100fe8000000000000000000000000000bb08000500ff7fffff44000100080009004900000008000b0073697000080009005e00000008000600666f000008000800080000000800050003000000080004004e2000000800050002000000"], 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 04:43:01 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/mls\x00', 0x0, 0x0) r1 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000600)=r1) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000) sendmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)="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", 0xfa}], 0x1, &(0x7f0000000940)=[{0x48, 0x13f, 0x3f, "43a5609c450757bf07023441300352b650f18dcfa83e70c8d4e7f465dd1d48ff691a977a721dfb88159844cb0e7b9a1fa1c1484e"}, {0x30, 0x10b, 0xfffffffffffffff8, "62bcb5300f05f3316e66715cdf2bf6dbbcaec3142a2c269a1266"}, {0x38, 0x6, 0x1, "a81dc9a669a9bd33cb54376d7b232a2d23982cae57051273ecf3e4602f733c4e349f17366b"}, {0x98, 0x11f, 0x50b, "9308f22d96fbef7c31f54625525e8bbf25d8018909fbaa5bbc6c6ae2cb9c9d401e73d2cb79f1a10e1ae816b265e440fa4a5e751e7acf66a98baa6f679ba009ef5f159c351af92dbfbaaedfb4b5b6d559b4166b0132018e5546e66966bd8888fea4750ca63b39c1ecb3f6ec9eeeeac518d3aa7af8a69a31ae549204e3c8ab8b018e25511719cf4ac3"}], 0x148, 0x1}, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000e9000000000000000000000400000000fe000000bc4f00000007002e2f46696c6530"], 0x2a) r5 = socket$inet6(0xa, 0xfffffffffffe, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@rand_addr=0x7, 0x4e20, 0x401, 0x4e23, 0xffffffffffffffff, 0x2, 0x20, 0xa0, 0xbf, r6, r7}, {0x8001, 0x8, 0x0, 0x7, 0x100000000, 0xffffffff, 0x1000000, 0x8}, {0x7f, 0x18a, 0xfff, 0x3ff}, 0x8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in, 0x4d5, 0x7e}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x3503, 0x7, 0x3, 0xffffffffffff8001, 0x2, 0x4aa, 0xb18}}, 0xe8) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access'}}]}}) vmsplice(r2, &(0x7f0000000440)=[{&(0x7f0000000640)="ad2bb8c0df1f14bae6473b0ff3e8043d3ba2b766d05643f6e2e0b58a7941ac46e012d83c49a70362a4610b88c78ea0fff150245f1656d63a72f8ed4eca", 0x3d}], 0x1, 0x0) mknod$loop(&(0x7f0000000180)='./file0/file0\x00', 0x1ffd, 0xffffffffffffffff) 04:43:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) fcntl$addseals(r0, 0x409, 0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000089000)) r2 = dup3(0xffffffffffffffff, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 403.685763] device lo entered promiscuous mode [ 403.712560] device lo left promiscuous mode [ 403.853870] device lo entered promiscuous mode 04:43:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:01 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000680)={0x6, 0x1}) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000100)=@l2={0x1f, 0x10000, {0x8001, 0x1c000, 0x3f, 0x4, 0x1, 0x2}, 0x73e, 0x40}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="2bb10dbe61a5378500239aa835fa2285ce926bfdcf6295f749602f8124a73cd90693b1295eb851415bacb7bb15fc1732061ebc9031d80b6feec3f3ee57773a1c549091b822c3bcc8ce67f2f7125a84bee78601706f8fb1d80c6c4bfa320275d9b940a72d9b29da4e5c5d01d6ebd3c5147d6de87ee598e2798ba70d6ec5a71e8acf9e6dfc4d6551b6f59d442c7e8aefd8b4f245df73b4f8eac73f89de362246ede8b25c8860a277feaed6f115168a7f8c39853e4ab242fe13457312cc1195906915bf4361941ed8dd4d9a3b7983bf7287aca9b148052959e2248244d14ef51b4a99af4f920686e0a6ac5496685bc4d35d238ff10f45", 0xf5}, {&(0x7f0000000180)="1f6a2e1462667722d36ee1a4acebc3c219602d36625caff4d52cf56a21a2f3a62b66deab8e45549abaa41f7940797c5f0c45666b8693cedff9676bc846f120b42d52", 0x42}, {&(0x7f0000000380)="3307ef4c30deed885821dd886cbb49c3952ce9feb6a8790ee4425c85c6eaf8b1e357a3a9117bb270dd0b2e03e5f46ad61183bd540fe66defcd67972c10659964b5228b187b178201db5ddd98efb3c3ad498072a71b650a7c802503bc3624d78049c3c0b9fd104fe3b521af55c7c528c9bc7e5a21cdf911a3a6849ca5226cd44618c94a46ce5be5f3a027dfd5b25aed37ccbb4f4ac0cf18d10f0fea5f7bbcb43631a9563f0cb89f0b25bc42933fc404fd0ead853fc5be7c1042214b4dd7169fff7fe1d56ae842d858ed7d8b3b34", 0xcd}, {&(0x7f0000000480)="25cd721b2b9d6f30539af261ae8197afb9f922ed74f4a2cde1bb63c7c848ee60692243", 0x23}, {&(0x7f00000004c0)="2be2a4db4b264bbc19ce42bc980cbe6522565995e6c8758596f64de2d83a49d9ad2345ea977d29f45b8b68f59fc596df2a67b638708a7ae286ea84a1e6de792978a3e7af403fa1254c4523ecfbb8bf975aa297964d86b8d888bc1d557ab2", 0x5e}], 0x5, 0x0, 0x0, 0x4001}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000600)={{0x3, 0x3, 0x3ff, 0x1, 0x1}, 0x7, 0x8}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:01 executing program 7: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b3fdc)) write(r1, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x46) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0xff, @empty, 0x4e21, 0x1, 'ovf\x00', 0x8, 0x401, 0x15}, 0x2c) r2 = syz_open_pts(r1, 0x2) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000280)={0x0, 0x6, 0x1000000000000, 0xe87e, 0x57d62658, 0x66, 0x4, 0x8, 0x7, 0x8, 0x8, 0x93c}) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @rand_addr=0xffffffffd5064805}}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast1}}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000140)=0x54) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240), 0x10) 04:43:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='stat\x00') r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/enforce\x00', 0x1, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x141000) sendfile(r1, r0, &(0x7f0000000180), 0x7ffffffe) 04:43:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000440)=""/244, 0xf4) unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x200) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x2710}}) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='gfs2\x00', 0x2010, &(0x7f0000000280)="fc2ceca26f6c101d0ca61fdc6d323c2ad917c4ec4d1a704b113f131b613a453a55acf510f4682530a4823a0a7507f1ea27f5abc0750366590021e8d2629e0f1cf6dad367c34276d7a29f658957fd1f99528b7535406c7727fa0200007fcd61fdd31fb89e8e49f5c1df67f91eb6bec7b0d58d8f42c19aa5f9af2ccd0fbb9cb6000000000000000000000000000000") getdents(r0, &(0x7f0000000040)=""/30, 0x363) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000240)) 04:43:01 executing program 0: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) recvfrom$inet(r0, &(0x7f0000000100)=""/115, 0x73, 0x40002040, &(0x7f0000000180)={0x2, 0x4e23, @rand_addr=0x6}, 0x10) r1 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f0000001500)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001540)="87d791397565a9a6bcbd8f8c1c652ab02921159d8ab86e2f2fb372fa4d4a9106ba86381501a52fb437db6b53ff0d4b2145a3439f45eb7924d11eae40ca283e16ce58a189d19508fd1f53b44ffffe501d21ef884a187fbf3e1226baa5f132bc1a5b3c43c44b8e328bb53d35de361fa7399395a9d3150116ef1df7977b4b9a75e4789ed053762394dbf983d630683156dfb7a6583e3f49b431ae5df1e3bd6f3f0c4f0322fd3e3540a169c258d63740a80975a6e181f226eb236d51110d4c9459d335aeb035b006e36fa7913764f350304dbbbed630cef92aebdada19e62c659e81e05eaf", 0xe3, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f00000016c0)='keyring\x00', &(0x7f0000001700)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000001640)='trusted\x00', &(0x7f0000001680)={0x73, 0x79, 0x7a, 0x0}, r2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) seccomp(0x0, 0x0, &(0x7f00000017c0)={0x9, &(0x7f0000001740)=[{0xfffffffffffff800, 0x200, 0x13e4, 0x9}, {0x4, 0x3, 0x8001, 0x8f}, {0x10001, 0x56, 0x5, 0x4}, {0x2, 0xfff, 0xea, 0x5}, {0x3, 0x0, 0x83b, 0x4}, {0x4, 0xd737, 0x3, 0x4}, {0x20, 0xac4, 0x0, 0x3}, {0x5ed77258, 0x6, 0x7fffffff, 0x6}, {0x10000, 0x1f, 0x1f, 0xffffffff00000000}]}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet(r3, &(0x7f0000000440)=""/4096, 0x1000, 0x40000000, &(0x7f0000001440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000400)=0xe8) setresuid(r4, r5, r6) socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000014c0)={@mcast2, 0x7, 0x2, 0x0, 0xe, 0x0, 0x0, 0x5}, 0x20) 04:43:01 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x8000, 0x48) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="000000000000fd366007d03ae48b9d000100485c48ee04bec604ca68c77221277a9c000b0073697000"], 0x2}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x1, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000280)) getcwd(&(0x7f0000000400)=""/214, 0xd6) pipe2(&(0x7f0000000140), 0x80000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x40000000001) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfff, 0x20800, 0x2, 0x200, 0x5, 0x0, 0x7fff, 0x0, 0x9, 0x3, 0x9948, 0xffffffffffffff2d, 0x0, 0x0, 0x401, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000, 0x7fff, 0x0, 0x0, 0x6, 0x1, 0x0, 0xff, 0x0, 0x7, 0x0, 0x253, 0x6, 0x0, 0x3ff, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x10c8e, 0x100000001, 0x0, 0x7, 0x5, 0x7, 0x684e84f7}, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000540)) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f00000002c0), 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000640)=0x0) sched_setaffinity(r4, 0xfffffffffffffebb, &(0x7f00000000c0)=0x9) [ 404.174985] IPVS: Creating netns size=2536 id=57 04:43:01 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0xffffffffffffffff) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) read(r1, &(0x7f0000000500)=""/50, 0x32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40045402, &(0x7f0000000040)={0x3, 0x200000000}) 04:43:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0]) [ 404.200056] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20001 04:43:01 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x2) r2 = userfaultfd(0x0) dup3(r1, r0, 0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r2) 04:43:01 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) socketpair(0xa, 0xa, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000000c0)=""/116, &(0x7f0000000140)=0x74) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x9) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x3ff, 0x3, 0x2, 0xffffffffffffff1f, 0x8, 0x8000, 0x4, 0x7, 0x2, 0x5, 0x3ff, 0x40}) 04:43:02 executing program 0: keyctl$search(0xa, 0x0, &(0x7f0000000140)="6c7802556a52afd7fe4144896fe4d77e73f47fad5b1352c7962566a7d85572c95fe357be279da60ffcad3f7551849150a0daf2863bf677b5c56e8e9edac8180823ee2dabe0d99d612ac831f7a5b1743327959b1c5a2c343f1081d30ab96273b98ab6cd76bf29e82324cbe82e0ff062f99447751414cda2388a862aa432677fc4f623971ead66dbf402825ae4338abf22822d89af56c425dd931496921c7f5a4bf90cc3710a056518514ecfdec30bd4e04fca5ed4f8bfcee35636b0447ac75ad5b8d8b2a619f20a407ac12e73a26def09f3216511", &(0x7f00000000c0), 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000180)=""/246) 04:43:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x2}) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) epoll_create1(0x80000) close(0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) userfaultfd(0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000200)={0x6, 0x25, 0x0, 0x2, 0x0, 0x7}) r4 = fcntl$dupfd(r3, 0x0, r3) mlockall(0x5) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)) ioctl$RTC_VL_CLR(r4, 0x7014) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x5, 0x90480) fcntl$getownex(r5, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x1000000000, @perf_config_ext={0x9, 0x30000000}}, r6, 0x0, 0xffffffffffffffff, 0x43) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) munlockall() ioctl$TCSETS(r2, 0x40045431, &(0x7f0000fddfff)) r7 = socket$netlink(0x10, 0x3, 0x20000000c) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0xef3) 04:43:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) fsetxattr(r0, &(0x7f0000000100)=@known='trusted.syz\x00', &(0x7f0000000140)='/dev/input/event#\x00', 0x12, 0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x200000}) r1 = syz_open_pts(r0, 0x802) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @link_local}]}, 0x28}}, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) write$P9_RGETLOCK(r4, &(0x7f0000000080)={0x1f, 0x37, 0x1, {0x1, 0x7, 0x80, r5, 0x1, '\''}}, 0x1f) r6 = dup3(r1, r0, 0x0) writev(r6, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 404.603361] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20001 [ 404.610052] IPVS: Creating netns size=2536 id=58 04:43:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:02 executing program 1: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000008050000000000"], 0xb) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) r3 = geteuid() r4 = getuid() setresuid(r2, r3, r4) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r1, &(0x7f00000000c0)={0xa, 0x7, 0x1, {0x1, '\x00'}}, 0xa) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) 04:43:02 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setsig(r0, 0xa, 0xb) fcntl$setlease(r0, 0x400, 0x1) write(r0, &(0x7f0000000040)="ebb10ee666cf0493e03791858bb563b5b2982482ef210d18c7e4578fc10a05203329ce9d7a2331c2ae6451de0cf53c04179abe9c648a055df274281a486755b71c33fdb7c0fcc29972ce493487b80658f7d7d30dd93428e2529458c21ff4504d7846d6ab535143dd27fee348368d7ada373682340be616308b035767ab188410f62a661700a412cfd532afe1d68d197e10414936462a48053f203ded2e19e30053de2f55799abbef57907b74eaae7ff02b5024c1f1f99b6d3429ae34ab66ec49d927dae842c315eadb26c0bbe9b20bd337991e500c", 0xd5) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) truncate(&(0x7f000037eff8)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) 04:43:02 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000000140)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) write$binfmt_misc(r0, &(0x7f0000000100)={'syz0', "ca3efc1bd3283db89475209e5415e6e4bda9ecca3332b8175e26f7db3136e1d106f2686e64aa175ce01b89b14769db9a0b94f0c40bb049505d1d488ec8f1d65a3f425589c2ca524fb96b0b20d1d8da6331a548649512e63b7834ce971d2729bd9ead6ab3b1aa80c998b9fec66add886e3ae62bab8a505c69ff6b9d0c212c34103cd508d0763cdeefc0713775bbdc06fbc8a8b6834efb26374d5afa53f4efcb8147b87bcc0a23a6b814031947fd6fa5d5fc6f509ce423cebe04"}, 0xbd) close(r1) 04:43:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000001c0), 0x1000000000000195) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x4000000003fffa, 0x0) socketpair(0x10, 0x7, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x8000, 0x4, 0x1, r2}) flistxattr(r3, &(0x7f0000000100)=""/173, 0xad) r4 = syz_open_pts(r0, 0x801) r5 = epoll_create1(0x0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000089000)) r6 = dup3(r4, r0, 0x0) writev(r6, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000000)=0x1a9) 04:43:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)="6d6f756e74730006d8a5df7187d0d72095f40f77433292a58040b9b0674bf06e1a64303a98bb12f310c2960d") sendfile(r1, r2, &(0x7f00005d4ff8), 0x2000000000000bf) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000300)={'yam0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc000}, 0x4000840) 04:43:02 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69af40b440e1b9950810bf2c93fd2a26d9e181780aca84f48d19ac75543d591a12c8ea6136d0e14648eedd747c1d27bef0e09f9f54274d9ec66167e0b07656032855958e42d9ba1afadf2edbbafdba24fa53c5591673615b00e2293e6881ff5569e3570dd8136f03433740994d692c54a7524aa79d192afef2467c1f0d02784373ec13ddb490de8d77e553e832098ac9531d451b6447d45838769484bdf") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) ioctl(r0, 0xc0084905, &(0x7f0000000540)) 04:43:02 executing program 6: kexec_load(0x0, 0x5a1, &(0x7f0000000000), 0x0) r0 = dup(0xffffffffffffff9c) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)=""/197) 04:43:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063cc871ed6a46be9a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000faffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b710000000000000000000000000000000000000000000000000000000000000000000000000000be00000000000000000000000000000000000000000000000000000000000000"], 0x2f4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000100)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x129}, 0x100) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000580)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 04:43:02 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x8000000000000001, 0x9, 0xf91, 0x1, 0x80000000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCXONC(r0, 0x540a, 0x8) r2 = syz_open_pts(r1, 0x801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000089000)) writev(0xffffffffffffffff, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 04:43:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000a00)=""/242, 0xfffffffffffffca1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) signalfd4(r1, &(0x7f0000000180)={0x7}, 0x8, 0x0) ioprio_get$uid(0x0, 0x0) fcntl$notify(r0, 0x402, 0x20080000013) rt_sigprocmask(0x2, &(0x7f0000000200), &(0x7f0000000280), 0x8) r4 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r4, 0x40086602, &(0x7f0000000640)=ANY=[@ANYRES64=r2]) creat(&(0x7f0000000000)='./file0\x00', 0x0) r6 = getuid() clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) write$evdev(r5, &(0x7f00000004c0)=[{{r7, r8/1000+30000}, 0x3b, 0x8, 0x9}, {{r9, r10/1000+10000}, 0x200, 0x5, 0x7}, {{}, 0x8001, 0x400, 0x8}], 0x48) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r6, r11) getsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f00000002c0), &(0x7f0000000340)=0x4) close(r4) 04:43:02 executing program 7: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f"], 0x1) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000040)='./bus\x00', 0x100000004000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r0, 0x9000, 0x0, 0x4) 04:43:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x38602, 0x0) fcntl$dupfd(r2, 0x406, r1) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000040)) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f0000000080), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x200000001fffffe}, 0x90) 04:43:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) write$P9_RLERRORu(r0, &(0x7f0000000180)={0x21, 0x7, 0x2, {{0x14, '/vmnet1-}{!mime_type'}, 0x3a1c}}, 0x21) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000001c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x38, 0x1, 0x7}}, 0x14) close(r1) 04:43:03 executing program 7: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "15cfa6c22fec2e63be5ca38e74597a423b3586bcc65b16a6c05645dd5cdcea2f2d73110af87dff1d47230d0b8e7fcf43e72f41b54bc67801a849973e10d15b305eb7e9770d301d6ae5c35e5e6c6d4707797b9c47dfbefdf10f045660931495a52c914c316a2b28d9091a0b0cbcfa2f3dc4b45f53333b68cd7b8e73499b834c13b096ebceca8e18d7ed4ee77aecbc40936e9df32a38f73e3e86"}, 0x9d) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffff9) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000c40)='./file0\x00', &(0x7f00000002c0)="0000f400000000", 0x0, &(0x7f0000000200)="92462e3359fb202c3fd854044ec94d6d642996e7769e39c57dba39e252ccb7d50c95c1dca3072b97edb559748c6d0cb28aeab90679999d73a0399aeff9bb8f5389f1e1f5a86ac105f6cfc516d28e1d7b1eff42c5cbf714d19b62c500bb90ebe64c6c7ce893bf380c93fa15f564c4bb686a9bac5d88cfb77a975ef252a05a5da203c040114005ba29c09d0f6aa8d15de2026dae554a2b0d230d3ad6") 04:43:03 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'erspan0\x00', 0x6}) r1 = memfd_create(&(0x7f00000000c0)="bcf6", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='security.selinux\x00') write$P9_ROPEN(r1, &(0x7f0000000200)={0x18, 0x71, 0x40000, {{0x12, 0x0, 0x5}, 0x100000001}}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mount(&(0x7f0000000000)='./file0/file0/file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) 04:43:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:03 executing program 0: sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xb4, 0x0, 0x0, 0x70bd2c, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000001}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xb4}}, 0x8084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ipddp0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x6, 0x5, &(0x7f0000013ff4)={@dev, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xc) dup3(r2, r3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00000c0ff0)={{}, 0x3000}) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x50000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) mq_timedsend(r4, &(0x7f0000000000)="afb450", 0x3, 0xec, &(0x7f0000000140)={r6, r7+10000000}) unshare(0x2000400) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x400000, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000080)=""/24, 0x18, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) 04:43:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) time(&(0x7f0000000240)) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)="2360e96689d4a3a96f538e813cd45ee03af7dcb0096f7244d121e1ab8015dd630408b72cf5dc212ac63fd6e63f7b34341f03f0a39ba242253072c24f14a301283fd2ad3c2e30ab", 0x47) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000240001000000000000000000000001001c00040000f0000000000000ff020000000000000000000000000001"], 0x30}}, 0x0) setsockopt(r0, 0x8, 0x1f, &(0x7f0000000140)="f7ce504da69e4eedbfa46fdad09b870b400beb5d1b7aed8aca512cef0f6f76addeb725d330a88c740712211de02e1ff84601ce262da282d9a4e9b6fa92b2cc93969bd8813bb472de990b5169bd3fdb2aaa28a7714567a5a8fed51cdafbb965626c595876de3389bea7f21c080bd536cd06e066da5f25430f9ac326f4efd5a922c4130558c5c9fbd37cee7ddc7dffbe5869aa7866f422c06460a958d956406dbd8e510cd5fae3af32c92fa1954341725468744d2f72e33e29f3a3541d5718a8deda3fae885ddbf501930e8045b4ca917624d21e3ad90a6f73229755f17f20811df4b189c40d45017909c015", 0xeb) 04:43:03 executing program 6: r0 = getpgrp(0x0) getpriority(0x2, r0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000000)=""/10) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x4, 0x6e, 0x400}}, 0x30) ioctl$fiemap(r2, 0xc020660b, &(0x7f00000000c0)={0x5, 0x1, 0x0, 0x5, 0x2, [{0x82a6, 0x10000, 0x7, 0x0, 0x0, 0x8}, {0x80000001, 0x6, 0x2, 0x0, 0x0, 0x1004}]}) 04:43:03 executing program 7: r0 = socket(0x2, 0x80000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/117, &(0x7f0000000280)=0x8) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000700)=0x5, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000006c0)={0x29, @loopback, 0x4e24, 0x2, 'sed\x00', 0x20, 0x6, 0x23}, 0x2c) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000100)=""/189) r2 = memfd_create(&(0x7f00000001c0)='/dev/loop-control\x00', 0x3) getresgid(&(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00)) fchownat(r2, &(0x7f0000000300)='./file0\x00', 0x0, r3, 0x1500) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) fcntl$addseals(r2, 0x409, 0x2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") socketpair(0x5, 0x6, 0x6, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r5, &(0x7f00000007c0)=@nfc={0x27, 0x0, 0x2, 0x3}, 0x80) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000380)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0x59) sendto$inet(r6, &(0x7f0000000600)="f2db8eb97da83b4534e25b36b116ffda5a860ff887496f47b6ba8f9980c6438367b237ef6c65c52f69c413e3ed980a4a020181c08b33fdd38c559db9a05ab593ff58975663713aeb60384f21037a179e2089086ab9e3be6ee2a9fc26b508488095e04199cf8aa5256f0e9911b2dd93ba979ec951a40d9fcf2a23030b66a999d41624d21148365c24f7f5d0fcaa65c65588563d877258333ffeb55823c5847a2f13955d6211b21c64", 0xa8, 0x20000041, &(0x7f0000000500)={0x2, 0x4e24, @loopback}, 0x10) fstat(r1, &(0x7f0000000480)) r8 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r7, 0x0, r8}, 0xc) set_thread_area(&(0x7f00000000c0)={0x6171, 0x20000800, 0x400, 0x400, 0x0, 0x8, 0x1000, 0x101, 0xa4ea, 0x10001}) tee(r2, r0, 0x6, 0x1) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000001980)={@remote, @local, @loopback, 0x3, 0x7f, 0x3, 0x100, 0x0, 0x200}) clock_nanosleep(0x1, 0x1, &(0x7f0000000580), &(0x7f00000005c0)) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 04:43:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x3}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) mq_notify(r0, &(0x7f0000000180)={0x0, 0x35, 0x5, @tid=r2}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000001c0)=0x3) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) timer_create(0x7, &(0x7f0000000000)={0x0, 0x1a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000089000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:03 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) write$P9_RLERRORu(r0, &(0x7f0000000180)={0x21, 0x7, 0x2, {{0x14, '/vmnet1-}{!mime_type'}, 0x3a1c}}, 0x21) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000001c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400000, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000140)={0x14, 0x49, 0x1, {0x38, 0x1, 0x7}}, 0x14) close(r1) 04:43:03 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x2e2}, 0x20) fcntl$setstatus(r0, 0x4, 0x4bff) sendfile(r0, r0, &(0x7f0000000040), 0x3) pwrite64(r0, &(0x7f0000002200)='y', 0x1, 0x20000) 04:43:03 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020228bd7000000000000d0000000c0002000864030003000000"], 0x20}}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00'}) dup(0xffffffffffffffff) chmod(&(0x7f0000000300)='./file0\x00', 0x40) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0x7, 0x0, 0x0, 0x2}, 0x10}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) [ 405.965812] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20004 04:43:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x1, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0xe5e2b6265e7d971a, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {{0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x28, 0x28, &(0x7f0000000180)=[@ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1, 0x3, 0x19}], &(0x7f00000001c0)=[0x30, 0x28, 0x20, 0x0, 0x58]}, 0x6}}, @increfs_done={0x40106308, r2, 0x1}], 0x9f, 0x0, &(0x7f0000000480)="2c79f68f3c1ba3106e3324f149c055baf4bc7ff52a2b4b48120934de94f8d034fd37cbdfe70e0a29c01c2ae6060f158500f901792881bcbd8111b8256aada805a27b5fa06eeea05f283491ac83923f99f91a4ffff8d1afe889253ea567617bb180c9612b6a003229685ec58c83ecea9848b8df011602a469faf1122aa8d5d23704bcbd28478ce9e8a91f0af2698158d39a9f45af3a5219898f70d5c99df069"}) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)="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") ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x1ff, 0xff, 0x3, 0x1, 0x40, 0x0, 0x0, 0xffffffffffffff9e, 0x8, 0xaeb, 0xffff, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x404000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040), 0x4) r4 = syz_open_pts(r3, 0x800) fcntl$notify(r4, 0x402, 0x22) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x2000000000000}) r6 = dup3(r0, r0, 0x80000) writev(r6, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:03 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3aa20000f3161b510436f773b690b103", @ANYRES16=r3, @ANYBLOB="00022cbd7000030000000700000008000400a1030000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) [ 406.226732] handle_userfault: 18 callbacks suppressed [ 406.226737] FAULT_FLAG_ALLOW_RETRY missing 30 [ 406.278409] CPU: 1 PID: 26272 Comm: syz-executor5 Not tainted 4.9.116-g52be322 #17 [ 406.286152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.295503] ffff8801cb37f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 406.303597] ffff8801da3a8300 ffff8801cb37fb20 0000000000000000 ffff8801cb37fb48 [ 406.311654] ffffffff81cbab1b 0000000000000dca ffff88019fefe908 ffff8801da3a840c [ 406.319707] Call Trace: [ 406.322286] [] dump_stack+0xc1/0x128 [ 406.327646] [] handle_userfault.cold.18+0x3e/0x51 [ 406.334140] [] ? debug_check_no_locks_freed+0x210/0x210 [ 406.341152] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 406.347556] [] ? plist_del+0x14f/0x200 [ 406.353092] [] ? futex_wake+0x1aa/0x450 [ 406.358714] [] ? handle_mm_fault+0x1267/0x28e0 [ 406.364944] [] ? handle_mm_fault+0x220f/0x28e0 [ 406.371174] [] handle_mm_fault+0x221d/0x28e0 [ 406.377235] [] ? vm_insert_mixed+0x200/0x200 [ 406.383293] [] __do_page_fault+0x5af/0xd50 [ 406.389176] [] ? check_preemption_disabled+0x3b/0x170 [ 406.396013] [] ? mm_fault_error+0x2c0/0x2c0 [ 406.401982] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.408647] [] do_page_fault+0x27/0x30 [ 406.414185] [] page_fault+0x28/0x30 [ 406.419456] [] ? do_sigaltstack+0x267/0x6f0 [ 406.425425] [] ? do_sigaltstack+0x271/0x6f0 [ 406.431389] [] ? __fget_light+0x169/0x1f0 [ 406.437181] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 406.443152] [] SyS_sigaltstack+0x6c/0x90 [ 406.448860] [] ? do_sigaction+0x8c0/0x8c0 [ 406.454649] [] do_syscall_64+0x1a6/0x490 [ 406.460357] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:04 executing program 1: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'bond_slave_1\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="430000000000000000000000000000007b816b228884b1643c34f5c0b52a0666fc475c29916f34f6a28d60c794af3b3225c7ca7e0f92a51041424035a464a8bee490c9a5cbe7d0508aa4c1995c8dd5bfa6e640a913bead31a5096390f69feaff1c4c474b2788f0955893ff4b16d728d778145edb659cba953d357b6f7d7dc09477b7a0b8a67247f42eaf30cbbcf8976c6fde74dc5f4cbbaed5dcfeafb64d491e461285ea5e6757558c4cef01ed05b1716dd0597e42958f9937f8e82c641d9ddc0e43dddd630b2be35d0e5e1fbc745bccc0332d76e0b967f6b82f9895ff85ba9800dfcbcdae0ae6e31551f323c45e3fe42ad7f1def8a15503b5a3aec3c1c1f504b30c314915e871f020a39ba82490ea"]}) socket$inet_udplite(0x2, 0x2, 0x88) [ 406.510053] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20004 04:43:04 executing program 7: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$TCFLSH(r0, 0x540b, 0x3) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7a, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000000000000ffffffffffffffff040000000200000006000000000000000700000000000000020000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000009000000000000000000000000000000000000000000000002010000000000000000000000000000000000800080000008000000000000004e6e0000000000000000000000000000000000000000000000080000000000000000000000000000030000000000000000100000000000000101000000000000000000000000000000000000000000000100000000000000000000000000000040000000000000005378000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003eff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x7a00000000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="000100000008000081000000c9030000f4000204000000000000000000000000002000000020000000010000000000016e5fbe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) 04:43:04 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000380)=0xc) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x8) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4c0, 0x140, 0x0, 0x278, 0x3d8, 0x3d8, 0x3d8, 0x4, &(0x7f0000000180), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @remote, @local, 0xf, 0x1}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x6cf3, 0x1}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffffff, @mac=@random="aeb2efcde530", {[0xff]}, @empty, {[0xff, 0x0, 0x0, 0xff]}, 0x400, 0x926, 0x1, 0x10001, 0x807, 0x1ff, 'lo\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x100}, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x10000, 0xffffffffffff8000, 0x6, 0x1, 0x0, "5afb9c639cc38c36dddec7b61923b12fe2a3b5f0016e78295b973db1638cae5cb794b55a15e223e200535e2c757701aa471fe267a67cdeead292f85d9ccb8599"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x510) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/create\x00', 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x4}) syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x200) unshare(0x40000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) epoll_create1(0x80000) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={'mangle\x00'}, &(0x7f0000000140)=0x58d56019b6cf755e) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$TIOCSBRK(r2, 0x5427) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000003c0)={0x0, {{0xa, 0x4e23, 0x100000000, @mcast2, 0x3ff}}, {{0xa, 0x4e22, 0x6b29, @dev={0xfe, 0x80, [], 0x15}, 0x8}}}, 0x108) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000640)={'filter\x00'}, &(0x7f00000006c0)=0x54) write$P9_RLINK(r2, &(0x7f0000000500)={0x7, 0x47, 0x1}, 0x7) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000200)={'nat\x00'}, &(0x7f00000002c0)=0x54) [ 406.747024] FAULT_FLAG_ALLOW_RETRY missing 30 [ 406.751813] FAULT_FLAG_ALLOW_RETRY missing 30 [ 406.751825] CPU: 1 PID: 26303 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 04:43:04 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(r0, 0x400000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="020025bd7000fd00000000000000010006000080000008000600020000005000030008000800fe000000080001000000000008000800053a3cf598000400090000000800010002000000080003000014000600fe8000000000000000000000000000aa0c000200080007000000000008000400050000000800040064000000b241288e45b1935c5e3cbbdb414fa750bc092b02d037614a3670d048deb8d0b973dc8eab1093"], 0x90}}, 0x4000090) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6}) mq_unlink(&(0x7f00000000c0)='bdev\x00') ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000380)) fchmod(r2, 0x80) getpeername$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) syncfs(0xffffffffffffffff) [ 406.751830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.751845] ffff8801ab27f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 406.751857] ffff8801b88d9980 ffff8801ab27fb20 0000000000000000 ffff8801ab27fb48 [ 406.751868] ffffffff81cbab1b 0000000000000dca ffff88019a7ea108 ffff8801b88d9a8c [ 406.751870] Call Trace: [ 406.751882] [] dump_stack+0xc1/0x128 [ 406.751894] [] handle_userfault.cold.18+0x3e/0x51 [ 406.751906] [] ? debug_check_no_locks_freed+0x210/0x210 [ 406.751915] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 406.751922] [] ? plist_del+0x14f/0x200 [ 406.751930] [] ? futex_wake+0x1aa/0x450 [ 406.751940] [] ? handle_mm_fault+0x1267/0x28e0 [ 406.751947] [] ? handle_mm_fault+0x220f/0x28e0 [ 406.751954] [] handle_mm_fault+0x221d/0x28e0 [ 406.751961] [] ? vm_insert_mixed+0x200/0x200 [ 406.751971] [] __do_page_fault+0x5af/0xd50 [ 406.751979] [] ? mm_fault_error+0x2c0/0x2c0 [ 406.751987] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 406.751995] [] do_page_fault+0x27/0x30 [ 406.752004] [] page_fault+0x28/0x30 [ 406.752012] [] ? do_sigaltstack+0x267/0x6f0 [ 406.752019] [] ? do_sigaltstack+0x271/0x6f0 [ 406.752028] [] ? task_work_run+0x14a/0x180 [ 406.752036] [] SyS_sigaltstack+0x6c/0x90 [ 406.752045] [] ? do_sigaction+0x8c0/0x8c0 [ 406.752052] [] do_syscall_64+0x1a6/0x490 [ 406.752060] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 407.360214] CPU: 1 PID: 26298 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 407.367931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.377278] ffff88019a30f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 407.385325] ffff8801b88d9980 ffff88019a30f7e0 0000000000000000 ffff88019a30f808 [ 407.393344] ffffffff81cbab1b 00000000000067c2 ffff8801b6750930 ffff8801b88d9a8c [ 407.401344] Call Trace: [ 407.403913] [] dump_stack+0xc1/0x128 [ 407.409253] [] handle_userfault.cold.18+0x3e/0x51 [ 407.415721] [] ? debug_check_no_locks_freed+0x210/0x210 [ 407.422718] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 407.429098] [] ? unwind_next_frame+0x86/0xe0 [ 407.435131] [] ? __save_stack_trace+0x7d/0xf0 [ 407.441253] [] ? handle_mm_fault+0x1267/0x28e0 [ 407.447456] [] ? handle_mm_fault+0x220f/0x28e0 [ 407.453669] [] handle_mm_fault+0x221d/0x28e0 [ 407.459708] [] ? vm_insert_mixed+0x200/0x200 [ 407.465753] [] ? __lock_is_held+0xa2/0xf0 [ 407.471529] [] __do_page_fault+0x5af/0xd50 [ 407.477388] [] ? mm_fault_error+0x2c0/0x2c0 [ 407.483336] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 407.489978] [] do_page_fault+0x27/0x30 [ 407.495490] [] page_fault+0x28/0x30 [ 407.500749] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 407.507572] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 407.514042] [] ? str_to_user+0xa0/0xa0 [ 407.519566] [] ? __lock_acquire+0x654/0x4070 [ 407.525606] [] ? exit_robust_list+0x220/0x220 [ 407.531742] [] evdev_ioctl+0x27/0x30 [ 407.537085] [] ? evdev_ioctl_compat+0x30/0x30 [ 407.543207] [] do_vfs_ioctl+0x1ac/0x11a0 [ 407.548891] [] ? ioctl_preallocate+0x220/0x220 [ 407.555099] [] ? selinux_capable+0x40/0x40 [ 407.560956] [] ? __fget+0x20a/0x3b0 [ 407.566206] [] ? __fget+0x231/0x3b0 [ 407.571472] [] ? __fget+0x47/0x3b0 [ 407.576639] [] ? security_file_ioctl+0x8f/0xc0 [ 407.582844] [] SyS_ioctl+0x8f/0xc0 [ 407.588008] [] ? do_vfs_ioctl+0x11a0/0x11a0 04:43:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:05 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xe7, 0x1, 0x1, 0x1, 0x6}, 0xc) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/130, 0x82}, {&(0x7f00000002c0)=""/142, 0x8e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000040)=""/64, 0x40}], 0x5) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4000000000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={@mcast1}) getsockopt$inet6_opts(r1, 0x29, 0x3a, &(0x7f0000000100)=""/39, &(0x7f00000000c0)=0xfffffffffffffc80) 04:43:05 executing program 6: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_delete(0x0) tkill(r0, 0x3) 04:43:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x4, 0x0, 0x1, 0x0, 0x200000000000200}) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x6, 0x20000800, 0xffffffffffffffff, 0x8000, 0x80000000, 0x1, 0xffff, 0x200, 0x5, 0xc9}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x8000) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 407.593965] [] do_syscall_64+0x1a6/0x490 [ 407.599649] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:05 executing program 5: personality(0x1bb2baf3005ac137) r0 = getpgid(0xffffffffffffffff) rt_sigqueueinfo(r0, 0x23, &(0x7f0000001880)={0x24, 0x100, 0x4, 0x80}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x101002, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x11, r1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000180)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/161, 0xa1}, {&(0x7f0000001440)=""/116, 0x74}, {&(0x7f00000014c0)=""/46, 0x2e}, {&(0x7f0000001500)=""/167, 0xa7}, {&(0x7f00000015c0)=""/166, 0xa6}, {&(0x7f0000001680)=""/120, 0x78}, {&(0x7f0000001700)=""/129, 0x81}], 0xa, &(0x7f0000001880), 0x0, 0x200}, 0x101) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)=@ipv6_newroute={0x28, 0x18, 0x109, 0x70bd2a, 0x25dfdbfc, {0xa, 0x94, 0x0, 0x9, 0xff, 0x7, 0xff, 0xf, 0x1000}, [@RTA_MULTIPATH={0xc, 0x9, {0x2c, 0xea, 0x2, r2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44004}, 0x1) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x97f) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) rt_sigqueueinfo(r3, 0x26, &(0x7f0000000100)={0x37, 0x5e5, 0x6, 0x4c}) 04:43:05 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendto$packet(r0, &(0x7f0000000040)="4d74e4b252e386369e0dbe19d2d626a92d47f067376222ec2d53691b55687c90f8cba8d42ea3520fe87563e0823a5a23721dc40f7fa43fbf9bbd96faa34d3de8fd2ec5e2c51d529f55e955def9ed07c2bd53fa2a07f302473ab3855e09e01e8bece9feaec3c702a4867fd7349f1ba9f039413db7396234cd9510b3c1b1ab48f060cc980e8263ac52f51c8e55f77ab6480155c21c061998b5078c662999b804fdd538e4bce3e154fafbe4afa2a7c4315b9419510523b1337407f9fdfd9e52aa4ee494d08c6b86bb3b29f4921ad6c12b49172d1492b785", 0xd6, 0x40010, &(0x7f00000001c0)={0x11, 0xf6, r1, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r2 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)='/dev/zero\x00', 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r2, 0x3) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'tunl0\x00', r1}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000940)=0xe8) sendmsg$netlink(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)={0x78, 0x3c, 0x72a, 0x70bd28, 0x25dfdbfc, "", [@generic="1a75ccc656e247c1c6d41b0ed4664ba6dedf124b2b2136da12f5ad551f2274e5bc0dc5c4030d4912c9a57674ad1e998dbea0bde8beb3da7b88068f04d239775c642299bae904e81196c64bba9b31e330f71f3d6fc6dcc99d536e964c78233f4f5b5be9d3f80a"]}, 0x78}, {&(0x7f0000000440)={0x390, 0x33, 0x1, 0x70bd26, 0x25dfdbfe, "", [@typed={0x4, 0x7f}, @generic="a7467962b3dba9d8d2ee628071bef143119e80363ad78d2568acbc715ab79f00031dc0e9540f1261b83e3e4a3ff5b239fe7a02df7f7a4c87471aa34a75b3580124acfa1be384983bf4f950d1b3f334fa5410593aeb01cc7f5bccef795989d251451c5016bb4840db6c8dc05fb2f06b1c18777f6f18e156fc79975976b449f49efe38f09c76f39ed3aff829f7083c27cf66fc475ba344f7ca0b08b548bd3e94865467f667e93620d158926de536106ab594300bdda5e6ed79", @nested={0x150, 0x2e, [@typed={0x14, 0x38, @str='/selinux/mls\x00'}, @generic="b74139d83dc85cafda78601b713bd3f7fb74ef7705d90c39488f1ff06eaaf562da8d896b91b0b589bf21f5b404d609059e55f179e0164e07c03a89660906211161e141fe7e5f88138e94b5cfb77a6c", @generic="b862b192cff1df2a8c5df0e661b09cfda2706b3739a3e3ed23c5f98569e94454d43c2d2897a7611aff9f51a227fad1b4124d3d58862de1a3a5ac6abe01d37eb59253fd3e00f2f48020967ba79f4c7507d05fc3451137011d09162b1e681c031dc8662ec561717e8c84701e5eb25ac28968131ca67469e03b8afa8f07f73cddde5d4aa0c536e379510df813e6c4f83f5be38c7079e6e0e863fda00c6f9ec33af35f739fbfbdac32efacbf50400f3f23a9cb23187f3fbffec5e734989df83ff695214c2469e99289ec6d0e71905d47dcb781b53b09e6554c113496641cc98ff0982e465450648f"]}, @nested={0xc, 0x1e, [@typed={0x8, 0x43, @ipv4=@broadcast}]}, @generic="4258017e", @generic="52b1e1034c1c2f9dacf2fd41a136aa9da7d76d646abd420d2d895c4762c5285e4b163445a7d9e29569e4437ea289df26b52aad8b50b8d69ddfa117", @nested={0x100, 0xa, [@generic="e41c35c98ed4cb265ba03c92f133469f5092c8bab3d25873ef405b535521d0a21a7e1fa7e5a812e8b99830cee6d1b7b47e6e8484f6a13faf5dda8c5cad823bf291ed389835", @generic="3f454086519db8153d5cacfa48b9bac14d76235d52fddabadbb172ce8b8016b925c94822739934ad3d5b9967990c1e126ef7efde3cd5c5c8a5f2dd7cef6860b39e92a1b6cbaf25e49c43ade89e7229b8aede7e1acd74877f2421a30bec3a3ddd4b46ed81b313939ed7b855a0e7ab06184a31e1c96715f5ef467b313f46caf415ca12fd7487ef269820e174477b42e3e536f65dd315b2a5e7bb12c8d8127ab21e6c0be9497ee3e834bed5bc5eb9d8e6e6f0b4149557"]}, @nested={0x10, 0x16, [@typed={0x4, 0x70}, @typed={0x8, 0x94, @pid=r3}]}, @typed={0x18, 0x4e, @str='posix_acl_access\x00'}]}, 0x390}, {&(0x7f0000000800)={0x3c, 0x34, 0x8, 0x70bd2c, 0x25dfdbff, "", [@typed={0x14, 0x20, @ipv6=@ipv4={[], [], @local}}, @typed={0xc, 0x59, @u64=0x137200000}, @typed={0xc, 0x2d, @u64=0x7f}]}, 0x3c}, {&(0x7f0000000980)={0xbc, 0x2f, 0x0, 0x70bd27, 0x25dfdbfc, "", [@generic="b59c8fa8653f80d01e618552111bac7e8b896b38c172839443cba9e76fcdf7063ec1c252b648a2db6e20266b05dd32667a666055eb8567c855a82f5d7e0238206e05e5370250a196af5062982ff66b8dc2f0df41967fea591c297609b866948fa21f8e644a373560f028d30fff3ef189353a90de2a57c36184f10fdcdd71f701bbec3e37bd4f6d3fb591", @nested={0x14, 0x6d, [@typed={0x8, 0x74, @uid=r7}, @typed={0x8, 0x33, @pid=r3}]}, @typed={0xc, 0x82, @str='tunl0\x00'}]}, 0xbc}], 0x4}, 0x4000) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x40) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r5, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x4c, r8, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000005) connect$l2tp(r0, &(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x861, @dev={0xfe, 0x80, [], 0xa}, 0x4}}}, 0x3a) ioctl$RNDCLEARPOOL(r5, 0x5206, &(0x7f0000000c80)=0x7) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/uinput\x00', 0x0, 0x0) keyctl$assume_authority(0x10, r2) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x7c, r8, 0x900, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008000) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000e80)={0x4, &(0x7f0000000e40)=[{}, {}, {}, {}]}) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000ec0)=""/96) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) setsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000f40)={r6, @loopback, @broadcast}, 0xc) setsockopt$sock_int(r5, 0x1, 0x37313ab72a2e12d1, &(0x7f0000000f80)=0x3ff, 0x4) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001040)=""/254, 0xfe}, {&(0x7f0000001140)=""/223, 0xdf}, {&(0x7f0000001240)=""/222, 0xde}, {&(0x7f0000001340)=""/226, 0xe2}, {&(0x7f0000001440)=""/167, 0xa7}], 0x5, &(0x7f0000001580)=""/139, 0x8b, 0x7}, 0x1) keyctl$read(0xb, r2, &(0x7f0000001680)=""/111, 0x6f) ioctl$EVIOCGID(r9, 0x80084502, &(0x7f0000001700)=""/77) r11 = syz_genetlink_get_family_id$team(&(0x7f00000017c0)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000022c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000002280)={&(0x7f0000001800)={0xa74, r11, 0x30c, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x260, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa1}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r4}, {0xfc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r1}, {0x78, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x300000000000000}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x1e4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xa78d}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r4}, {0x1a8, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1f, 0xd9, 0x64d5, 0x5}, {0x10001, 0x4, 0x10001, 0x5}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2ff4000000000000}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff938}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r4}, {0x1dc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0xd55, 0x100000001, 0x6, 0x40}, {0x2, 0x8001, 0x4, 0xa77}, {0x5c, 0x255, 0x101, 0x1}, {0xfff, 0xfca, 0x0, 0x40000000000000}, {0xb7, 0x1, 0x0, 0x6}, {0x10001, 0x6, 0x7, 0x3ff}, {0x9, 0x3fe, 0x1, 0x8}]}}}]}}, {{0x8, 0x1, r4}, {0xec, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x689}}}]}}]}, 0xa74}}, 0x24000840) [ 407.646074] pktgen: kernel_thread() failed for cpu 1 [ 407.651953] pktgen: Cannot create thread for cpu 1 (-4) [ 407.662350] IPVS: Creating netns size=2536 id=59 04:43:05 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x1, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:05 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3aa20000f3161b510436f773b690b103", @ANYRES16=r3, @ANYBLOB="00022cbd7000030000000700000008000400a1030000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) [ 407.765855] pktgen: kernel_thread() failed for cpu 0 04:43:05 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) lseek(r0, 0x400000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f0000000140)='./bus\x00', 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r3, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="020025bd7000fd00000000000000010006000080000008000600020000005000030008000800fe000000080001000000000008000800053a3cf598000400090000000800010002000000080003000014000600fe8000000000000000000000000000aa0c000200080007000000000008000400050000000800040064000000b241288e45b1935c5e3cbbdb414fa750bc092b02d037614a3670d048deb8d0b973dc8eab1093"], 0x90}}, 0x4000090) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6}) mq_unlink(&(0x7f00000000c0)='bdev\x00') ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000380)) fchmod(r2, 0x80) getpeername$unix(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000200)=0x6e) syncfs(0xffffffffffffffff) [ 407.817809] pktgen: Cannot create thread for cpu 0 (-4) [ 407.881728] pktgen: kernel_thread() failed for cpu 1 04:43:05 executing program 5: r0 = socket(0x10, 0x2, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x10840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x4, 0x2, 0x1, r2}) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30501000b0005000000fbd10200cf", 0x1f) [ 407.958615] pktgen: Cannot create thread for cpu 1 (-4) [ 408.031657] pktgen: Initialization failed for all threads [ 408.078092] FAULT_FLAG_ALLOW_RETRY missing 30 [ 408.083272] CPU: 1 PID: 26460 Comm: syz-executor0 Not tainted 4.9.116-g52be322 #17 [ 408.090979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.091180] FAULT_FLAG_ALLOW_RETRY missing 30 [ 408.097987] FAULT_FLAG_ALLOW_RETRY missing 30 [ 408.109410] ffff88019b48f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 408.117472] ffff8801d71f2300 ffff88019b48fb20 0000000000000000 ffff88019b48fb48 [ 408.125529] ffffffff81cbab1b 0000000000000dca ffff8801a8383908 ffff8801d71f240c [ 408.133600] Call Trace: [ 408.136179] [] dump_stack+0xc1/0x128 [ 408.141540] [] handle_userfault.cold.18+0x3e/0x51 [ 408.148024] [] ? debug_check_no_locks_freed+0x210/0x210 [ 408.155031] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 408.161434] [] ? plist_del+0x14f/0x200 [ 408.166961] [] ? futex_wake+0x1aa/0x450 [ 408.172580] [] ? handle_mm_fault+0x1267/0x28e0 [ 408.178805] [] ? handle_mm_fault+0x220f/0x28e0 [ 408.185067] [] handle_mm_fault+0x221d/0x28e0 [ 408.191119] [] ? vm_insert_mixed+0x200/0x200 [ 408.197179] [] __do_page_fault+0x5af/0xd50 [ 408.203059] [] ? mm_fault_error+0x2c0/0x2c0 [ 408.209025] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.215689] [] do_page_fault+0x27/0x30 [ 408.221218] [] page_fault+0x28/0x30 [ 408.226486] [] ? do_sigaltstack+0x267/0x6f0 [ 408.232450] [] ? do_sigaltstack+0x271/0x6f0 [ 408.238418] [] ? task_work_run+0x14a/0x180 [ 408.240084] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 408.252683] [] SyS_sigaltstack+0x6c/0x90 [ 408.258394] [] ? do_sigaction+0x8c0/0x8c0 [ 408.264195] [] do_syscall_64+0x1a6/0x490 [ 408.269900] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 408.276819] CPU: 0 PID: 26457 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 408.284539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.293885] ffff88019c2a7610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 408.302056] ffff8801da3a8900 ffff88019c2a77e0 0000000000000000 ffff88019c2a7808 [ 408.310099] ffffffff81cbab1b 00000000000067c2 ffff8801aa72a130 ffff8801da3a8a0c [ 408.318146] Call Trace: [ 408.320778] [] dump_stack+0xc1/0x128 [ 408.326139] [] handle_userfault.cold.18+0x3e/0x51 [ 408.332627] [] ? debug_check_no_locks_freed+0x210/0x210 [ 408.339636] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 408.346035] [] ? handle_mm_fault+0x1267/0x28e0 [ 408.352259] [] ? handle_mm_fault+0x220f/0x28e0 [ 408.358553] [] handle_mm_fault+0x221d/0x28e0 [ 408.364602] [] ? vm_insert_mixed+0x200/0x200 [ 408.370655] [] ? __lock_is_held+0xa2/0xf0 [ 408.376446] [] __do_page_fault+0x5af/0xd50 [ 408.382325] [] ? mm_fault_error+0x2c0/0x2c0 [ 408.388287] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.394944] [] do_page_fault+0x27/0x30 [ 408.400470] [] page_fault+0x28/0x30 [ 408.405743] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 408.412576] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 408.419061] [] ? str_to_user+0xa0/0xa0 [ 408.424592] [] ? __lock_acquire+0x654/0x4070 [ 408.430651] [] ? exit_robust_list+0x220/0x220 [ 408.436792] [] evdev_ioctl+0x27/0x30 [ 408.442180] [] ? evdev_ioctl_compat+0x30/0x30 [ 408.448316] [] do_vfs_ioctl+0x1ac/0x11a0 [ 408.454026] [] ? ioctl_preallocate+0x220/0x220 [ 408.460256] [] ? selinux_capable+0x40/0x40 [ 408.466136] [] ? __fget+0x20a/0x3b0 [ 408.471407] [] ? __fget+0x231/0x3b0 [ 408.476676] [] ? __fget+0x47/0x3b0 [ 408.481862] [] ? security_file_ioctl+0x8f/0xc0 [ 408.488088] [] SyS_ioctl+0x8f/0xc0 [ 408.493358] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 408.499320] [] do_syscall_64+0x1a6/0x490 [ 408.505023] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 408.516610] CPU: 0 PID: 26459 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 408.523091] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 408.532711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.542064] ffff880198337950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 408.550065] ffff8801da3a8900 ffff880198337b20 0000000000000000 ffff880198337b48 [ 408.558107] ffffffff81cbab1b 0000000000000dca ffff880199de5108 ffff8801da3a8a0c [ 408.566292] Call Trace: [ 408.568865] [] dump_stack+0xc1/0x128 [ 408.574214] [] handle_userfault.cold.18+0x3e/0x51 [ 408.580687] [] ? debug_check_no_locks_freed+0x210/0x210 [ 408.587680] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 408.594078] [] ? futex_lock_pi_atomic+0x2b0/0x2b0 [ 408.600553] [] ? handle_mm_fault+0x1267/0x28e0 [ 408.606763] [] ? handle_mm_fault+0x220f/0x28e0 [ 408.612974] [] handle_mm_fault+0x221d/0x28e0 [ 408.619035] [] ? vm_insert_mixed+0x200/0x200 [ 408.625086] [] __do_page_fault+0x5af/0xd50 [ 408.630948] [] ? mm_fault_error+0x2c0/0x2c0 [ 408.636900] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.643555] [] do_page_fault+0x27/0x30 [ 408.649088] [] page_fault+0x28/0x30 [ 408.654349] [] ? do_sigaltstack+0x267/0x6f0 [ 408.660298] [] ? do_sigaltstack+0x271/0x6f0 [ 408.666257] [] ? security_file_ioctl+0x8f/0xc0 [ 408.672469] [] SyS_sigaltstack+0x6c/0x90 04:43:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = syz_open_pts(r0, 0x801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000089000)) r4 = dup3(r2, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:06 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x8000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0x7, 0x6c0a0d7d, 0x1, {0x77359400}, 0x1, 0x3}) dup2(r4, r2) [ 408.678171] [] ? do_sigaction+0x8c0/0x8c0 [ 408.683959] [] do_syscall_64+0x1a6/0x490 [ 408.689660] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:06 executing program 5: r0 = gettid() mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='9p\x00', 0x42, &(0x7f0000000800)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@privport='privport'}, {@cache_fscache='cache=fscache'}]}}) rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) alarm(0x401) socket$inet_udp(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x9) rt_sigtimedwait(&(0x7f0000000740)={0xfffffffffffff6b1}, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0x989680}, 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) process_vm_readv(r0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/222, 0xde}], 0x4, &(0x7f0000000700)=[{&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/154, 0x9a}], 0x2, 0x0) 04:43:06 executing program 0: r0 = getpid() pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r0) getpriority(0x1, r0) 04:43:06 executing program 1: openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) 04:43:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) geteuid() [ 409.089819] FAULT_FLAG_ALLOW_RETRY missing 30 [ 409.093149] FAULT_FLAG_ALLOW_RETRY missing 30 [ 409.093160] CPU: 1 PID: 26515 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 409.093165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.093179] ffff88019b48f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 409.093191] ffff8801da3a9b00 ffff88019b48fb20 0000000000000000 ffff88019b48fb48 [ 409.093202] ffffffff81cbab1b 0000000000000dca ffff880198f32108 ffff8801da3a9c0c [ 409.093205] Call Trace: [ 409.093217] [] dump_stack+0xc1/0x128 [ 409.093227] [] handle_userfault.cold.18+0x3e/0x51 [ 409.093237] [] ? debug_check_no_locks_freed+0x210/0x210 [ 409.093247] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 409.093260] [] ? handle_mm_fault+0x1267/0x28e0 [ 409.093269] [] ? handle_mm_fault+0x220f/0x28e0 [ 409.093277] [] handle_mm_fault+0x221d/0x28e0 [ 409.093285] [] ? vm_insert_mixed+0x200/0x200 [ 409.093294] [] __do_page_fault+0x5af/0xd50 04:43:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:06 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) ioctl(r0, 0x1, &(0x7f0000000080)="4ca427583bc7c6b0bbbfcbd7abade91bd0e7a1da182f104a4b2db80cf13b5b30d55e8da4f0d9085e467febf47a5990afff549a7111351d17d155b96bf14277a517baa6d578791a71bde64e96596e7584b661c1e08eba965795a0a7d635a6bf07603866eebc53748908183f11e399aa41311e93fc8294495ed9e5dbbedb2e9cd4f06d39d2799fc9e6dd0d9c868c983f5d369064417ca68e97b67dfd0dc5204d3e1476568c0d9e6bdb1070a6e4f2a7b93faa74c9f025accfce40c1e7dbbf22392253af5f545e433b9b9628561b93a78fed7ad3164c96756fb53ec285cc3f0d3ce55ae4bb74d18c") 04:43:06 executing program 5: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000100)=0x7f, 0x1d3) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) write$selinux_access(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6b6db90863745f723a666f6e74735f743a7330202f7573722f6c69622f74656c6570617468792f6d697373696f6c2d636f6e74726f6c2d35203030303030303030303030303030303030303032003a2b37a47fa9419e5fac"], 0x61) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 04:43:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00000006c0)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) ioctl$TIOCCBRK(r1, 0x5428) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000005c0)) r3 = getpid() process_vm_readv(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/235, 0xeb}], 0x1, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/71, 0x47}, {&(0x7f0000000440)}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000580)=""/10, 0xa}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/44, 0x2c}], 0x8, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000440)={0x3, 0xffff, 0x5, 0x0, 0xff}) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) finit_module(r2, &(0x7f0000000000)='/dev/ptmx\x00', 0x1) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000000c0)="0b98ceac93bbfb20d23cfc7a4cf7278e02086ff792214f67569e52a16c3a9062cdaa2e308c86b73d60321f0e2a968e67a5fba956c22d32f53cfd85dc3517863818893be8e6b6e3dc3ed38dfd79a87e3722417fed3b471b14696fe06b12a9174a51594456c5cc04ee4f721634b36f1d32bffc4b0185c206bf6f3dd89685865fa1b1a1a818a173b78d3e88302c97481b7e8d2021c5a9299e20d138b7ca008286a5f4f2a996b8a65cea850826c7f74dc09be04ef4296a651f5066d1107d800458c78186b60288546b47686d8db1972e05e812a305959b65aa77ca10a24c1ac81f38627ddafa7900a67a645ebebf524d3628e4f784e5120e3b8695ef2b0aa629a8ff") 04:43:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = syz_open_pts(r0, 0x801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000089000)) r4 = dup3(r2, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:06 executing program 1: personality(0x1bb2baf3005ac137) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0xfffffffffffffffe) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:dhcpc_var_run_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x3ff}, 0x58) r1 = open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x101002, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb, 0x11, r1, 0x0) [ 409.093303] [] ? mm_fault_error+0x2c0/0x2c0 [ 409.093311] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.093319] [] do_page_fault+0x27/0x30 [ 409.093335] [] page_fault+0x28/0x30 [ 409.093345] [] ? do_sigaltstack+0x267/0x6f0 [ 409.093353] [] ? do_sigaltstack+0x271/0x6f0 [ 409.093364] [] ? security_file_ioctl+0x8f/0xc0 [ 409.093374] [] SyS_sigaltstack+0x6c/0x90 04:43:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) ioctl$void(r1, 0xc0045c79) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000006c0)='hybla\x00', 0x6) prctl$seccomp(0x16, 0x2, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x4, 0x9, 0xffff, 0x7a4}, {0x1, 0x401, 0xfff, 0x1000}, {0x80, 0x0, 0x0, 0x6}, {0x5, 0x4, 0x3f, 0x7ff}, {0x1, 0x5, 0x3f, 0x8d9}, {0x14a6aa5c, 0x8, 0x9, 0x100}, {0x40, 0x1f, 0x5, 0x5f2}]}) shutdown(r1, 0x0) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7fff) memfd_create(&(0x7f00000001c0)='/dev/keychord\x00', 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x100002000, 0x0) fchdir(r0) write$P9_RFSYNC(r2, &(0x7f0000000000)={0x7, 0x33, 0x2}, 0x7) prctl$seccomp(0x16, 0x2, &(0x7f0000000180)={0x7, &(0x7f0000000140)=[{0x8, 0x0, 0x5, 0x8}, {0x7, 0x8, 0x4}, {0x893, 0x200, 0x7, 0x80000001}, {0x20, 0x1, 0x7}, {0x8, 0x5, 0x0, 0x4}, {0x7fff, 0x7f, 0x1}, {0x1, 0x401, 0x40, 0xa1}]}) 04:43:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = syz_open_pts(r0, 0x801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000089000)) r4 = dup3(r2, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 409.093383] [] ? do_sigaction+0x8c0/0x8c0 [ 409.093391] [] do_syscall_64+0x1a6/0x490 [ 409.093402] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 409.309461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 409.312879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor0'. [ 409.354751] CPU: 1 PID: 26513 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 409.362471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.371813] ffff8801c2aaf610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 409.379839] ffff8801da3a9b00 ffff8801c2aaf7e0 0000000000000000 ffff8801c2aaf808 [ 409.387870] ffffffff81cbab1b 00000000000067c2 ffff880198f36930 ffff8801da3a9c0c [ 409.395885] Call Trace: [ 409.398462] [] dump_stack+0xc1/0x128 [ 409.403803] [] handle_userfault.cold.18+0x3e/0x51 [ 409.410282] [] ? debug_check_no_locks_freed+0x210/0x210 [ 409.417300] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 409.423683] [] ? handle_mm_fault+0x1267/0x28e0 [ 409.429911] [] ? handle_mm_fault+0x220f/0x28e0 [ 409.436129] [] handle_mm_fault+0x221d/0x28e0 [ 409.442162] [] ? vm_insert_mixed+0x200/0x200 [ 409.448197] [] ? __lock_is_held+0xa2/0xf0 [ 409.453972] [] __do_page_fault+0x5af/0xd50 [ 409.459841] [] ? mm_fault_error+0x2c0/0x2c0 [ 409.465798] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 409.472452] [] do_page_fault+0x27/0x30 [ 409.477966] [] page_fault+0x28/0x30 [ 409.483222] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 409.490039] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 409.496513] [] ? str_to_user+0xa0/0xa0 [ 409.502035] [] ? __lock_acquire+0x654/0x4070 [ 409.508075] [] ? exit_robust_list+0x220/0x220 [ 409.514202] [] evdev_ioctl+0x27/0x30 [ 409.519549] [] ? evdev_ioctl_compat+0x30/0x30 [ 409.525669] [] do_vfs_ioctl+0x1ac/0x11a0 [ 409.531355] [] ? ioctl_preallocate+0x220/0x220 [ 409.537568] [] ? selinux_capable+0x40/0x40 04:43:07 executing program 6: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000380)="2e2f66692e65318c", 0x1, 0x8000000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000002c0)=0xe8) mount$9p_xen(&(0x7f0000000080)="ab252300", &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x400, &(0x7f0000000300)={'trans=xen,', {[{@loose='loose'}, {@access_user='access=user'}, {@access_uid={'access', 0x3d, r2}}, {@cache_mmap='cache=mmap'}]}}) fanotify_mark(r1, 0x2, 0x40000029, r0, &(0x7f0000000040)="2e2f66692e65318c00") 04:43:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x1fffffd) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) read(r0, &(0x7f0000000040)=""/25, 0x19) r3 = dup3(r1, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5, 0x80) ioctl(r2, 0x7fffffff, &(0x7f0000000140)="7637fafbb0c48656d9d48496a3a8237265b31e5971b4c60cb6e34bfe1b9ee1271a10c4384a8b849e9f960295ef54072775088961f003e94c8ada55ee1eaa4841810d464da702f0e076f3c8ba813998e69ab10d2f3bfdbe053f9dbfb5f7669db7e94f74eda99218f201cfab5098914dfdc6efebe9a5a7a5d507226105cb70f01a258deb32bf175588c60a57d79328") writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:07 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4aa31b5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9166332001c2e7eb626b922cb39b5481c8c7b944ffe03573aa459d44c40a02ca36edff0000"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f0000000300)=0x10, 0x800) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000240)) sendto$inet6(r2, &(0x7f0000000000), 0xfdb0, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) [ 409.543438] [] ? __fget+0x20a/0x3b0 [ 409.548700] [] ? __fget+0x231/0x3b0 [ 409.553959] [] ? __fget+0x47/0x3b0 [ 409.559126] [] ? security_file_ioctl+0x8f/0xc0 [ 409.565335] [] SyS_ioctl+0x8f/0xc0 [ 409.570500] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 409.576456] [] do_syscall_64+0x1a6/0x490 [ 409.582143] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) r2 = syz_open_pts(r0, 0x801) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000089000)) r4 = dup3(r2, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0xaaaaaaaaaaaac11, &(0x7f0000000080)=[{&(0x7f0000000000)="800000000002000019000000e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xfea9, 0x400}], 0x1014001, &(0x7f0000000200)) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) 04:43:07 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000380)={0x41, 0x6, 0x0, {0x5, 0x0, 0x18, 0x0, '/selinux/avc/hash_stats\x00'}}, 0x41) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x2) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KDSETLED(r2, 0x4b32, 0x2) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x78}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000340)) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ftruncate(r3, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getattr(r5, &(0x7f0000000180), 0x30, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x5, 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)) close(r1) [ 409.681528] FAT-fs (loop6): bogus number of reserved sectors [ 409.696949] 9pnet: Could not find request transport: xen [ 409.814083] FAT-fs (loop6): Can't find a valid FAT filesystem 04:43:07 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000140)="a65935c1205b1e8d11a67ee88cf837127a4aa71e108a555f33bee1a5b3b4e84f396b41a8bfaaaa3c8a964a6221c873617a28882971252ae5d695056fb0f55be7ab043955e1bdc76c8c230d77ec021a8a83a7568a60ae13ed3f1fcf4e54edac1ce3893b356bce1ba216582748474b35228056514bb15bf2e76dd7c05a0c511679a029e020ef4c32df37049f6bc07895cebd789f54eda1bb2fa03224ec8aeb2a3e16ded436195c29d2aff405b2dd42b8d7ff22c058b0b34093ff430a0342d3cb11afcec1a2307a6f3380e0c7df1743796b33e83e2ce50ce48be26650070a72b1cdd0329a9f9d734af46125") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x189442, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) fcntl$addseals(r1, 0x409, 0x8) [ 409.947081] FAT-fs (loop6): bogus number of reserved sectors [ 409.999146] 9pnet: Could not find request transport: xen 04:43:07 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x4, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x80a, 0x0) ioctl(r2, 0x100008912, &(0x7f0000000680)="025cc80700145f8f764070") r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r0, 0x4c00, r3) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 410.058196] FAT-fs (loop6): Can't find a valid FAT filesystem 04:43:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:07 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0xfffffffffffffffd) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x2) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr}, &(0x7f0000000140)=0x10, 0x80800) r2 = userfaultfd(0x0) getegid() ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xffffffffffffffff}) ioctl$sock_proto_private(r2, 0x89e6, &(0x7f0000000200)="58316fe994c6e4736d60b81a778da89ec1f049f77fc14c3b2ee251061db9b9061caa7a5e64de28592869eeb20d360128ba11b9d081e1a3ce0af6eba2d08357a06a8496beb8f90178fd2f2fa690623465ad002253bd1949f40d8202fc277d20ec84a9617bef39f02aca1de1233b897b6f521659df65b8b2c2c60145cf6c436f3c5ed4") ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x7, 0x2, 0x1, 0x1, 0x8a47, 0x4, 0x4}, 0x20) close(r3) 04:43:07 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0xf, 0x2}}) 04:43:07 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x80) getsockopt$inet6_int(r0, 0x3a, 0x1, &(0x7f0000000280), &(0x7f0000000000)=0xfffffffffffffd2d) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xf8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) ioprio_set$uid(0x3, r1, 0x74973d43) 04:43:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = timerfd_create(0x6, 0x80800) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = geteuid() getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f00000002c0)) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)={0x150, 0x0, 0x8, [{{0x2, 0x3, 0x2, 0x0, 0x9, 0x3f, {0x2, 0x6, 0x8, 0x1, 0xd9, 0x4, 0x7, 0x0, 0x3f, 0x3514649a, 0x5, r3, r4, 0x80000001, 0x81}}, {0x3, 0x0, 0x2, 0xfa8, ')$'}}, {{0x1, 0x2, 0x40, 0x7, 0x0, 0xfff, {0x1, 0x662d, 0xc2, 0x8000, 0x0, 0xd98, 0x100000001, 0x4c84, 0xee, 0x9, 0x81, r5, r6, 0xd6, 0x7}}, {0x6, 0x4, 0x7, 0x0, '*cgroup'}}]}, 0x150) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) read(r1, &(0x7f0000a16000)=""/71, 0x47) 04:43:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) 04:43:07 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000100)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000500)={@loopback, 0x20000000000007f, r3}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000240)=""/246) dup3(r1, r0, 0x0) 04:43:08 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@rand_addr, @in=@multicast2}}, {{@in6=@local}}}, &(0x7f0000000140)=0xe8) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000440)={0x0, 0x0, 0x800000000000077, 0x0, 0x0, [{}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x0, 0x1}, &(0x7f0000000340)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) 04:43:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_pts(r1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x80, 0x6}) dup2(r0, r2) 04:43:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x3, 0x7, 0x53e) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@local, 0x1d, r2}) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x802) dup3(r0, r0, 0x80000) r4 = epoll_create1(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1c, 0x7, 0x1e, 0x2, 0x100000000}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000089000)) r5 = dup3(r3, r0, 0x0) writev(r5, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/213, 0xd5}], 0x3, 0x0) ioctl(r0, 0x6, &(0x7f0000000cc0)="025cc843f46010503f001a2ce281838d2631c84640a820a0ed66914700000000120000049e63038e7c448548060000005d5632e1c8ef80ba4fd117c6316701e06519eaf357eb1dd52f56e9984e0c1a2718e46368ae6ca8118242f0597d75f6e1a05b7e91f221b25b929cd156681a5fa5e08976de28019781e7ade1f4a62aa2ec683849ba2d0f9a67ae1befa2cff5cdaad60c4900324451ff8d41da6dd82247b49f889ef12b738bae8e82af59c9124dc05b9697fd2eee736c0fc0c792d28cff7875bb0e8da1a54eab99") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x5, &(0x7f0000501000)=""/95, &(0x7f00000000c0)=0xffffffffffffffb8) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x1, @ipv4, 0x80000000}, {0xa, 0x4e21, 0x7, @mcast1, 0xf55}, 0xc818, [0x10000, 0x5, 0x8, 0x5000, 0x75f, 0x7, 0x800, 0x4]}, 0x5c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) 04:43:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) socketpair(0x9, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2011}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000a00)=""/4096) mmap(&(0x7f0000955000/0x4000)=nil, 0x4000, 0x4, 0x8114, r0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {}, {}, @rumble}) 04:43:08 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x800000000080000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:08 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f000000c540)='/dev/null\x00', 0x100, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000c580)={{{@in6=@ipv4={[], [], @dev}, @in6=@local}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f000000c680)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0xcf, 0x8, &(0x7f0000003500)=[{&(0x7f0000000440)="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", 0x1000, 0x5b3}, {&(0x7f0000000100)="a8a42e0093818cb3d49a0254f7057145722069eecdc960aa1cba7dea14cc2c36c3671a0779134c5b9fad2fa8dccde907f82e6541d44e401d8efd1a6f9d34bdfe4a3358a39f3165d109893ed3c7aefc682c08577fcabdf1425cf286639f8c162e7720122d", 0x64, 0x3}, {&(0x7f0000001440)="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", 0x1000, 0x9}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000000200)="9fefe97e8c858ea294462fc4b79f3319225e6cb987eff75fd4521756e0a0a176c31c33e03c667ebb1ca10ae688a77bd26142a6aebf5104e59edaae44c4c0ad181be287b18d7cdba640cdc9bffc994fc54dd080ab16b252d083b200d94f1bfbc64234f3082526113b18a0c60921bd030d667c90", 0x73, 0xe2d}, {&(0x7f0000000180)="7f2e1e9691b23983e9c3", 0xa, 0x6}, {&(0x7f0000000280)="8e4b1e4deb47b7c8cda96e679c", 0xd, 0x80}, {&(0x7f0000003440)="d2ee456988e9a8548fe2745f4b314cd81c9e33fe18c958a0c51000ec1b315cd98e6bf66ee0193111dbb089a9247702cda03718ab37b994b75ea72f6551855cad90926c83ce7fced7fe06b012dd85d3c59005ad39c0305a3bebd5d1181628b01f3f40490846ef9e25c22902409bc57dcfa143e4eee62c8bc17cc1db1f530c14c82c4be74c6cee1f1ca6ba3a288069fc5c2da18d703717", 0x96, 0x6}], 0x1004000, &(0x7f00000035c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@prjquota='prjquota'}, {@init_itable='init_itable'}, {@nouser_xattr='nouser_xattr'}, {@nodiscard='nodiscard'}]}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000300)="000100000200000000000000c9030000ec000000010000000000000000000000002000000020000001010f88496eecee690abe5a0000030053ef5f55f4c6cf1350060e567c5d3fb019b7ebb3ee9a3aa2fae358ee56e78287a60e5257b9bd7f15db6b2c7c22890a479cb8ff43637d421baaa9c0f06c02c4ca971696dec732d5ea9e78a347f997ddd64e6ae5eaaa6d16db009428001ce2525601c95ff51e8f03ed3b6467f4caae5ffdbeb25365d50cdfae0aaa88efc627ff76320c3cff722f46ce1ff44f14ad9a3bc14de52c441396ab513e9b40a8acb49ae2a54ae4027650ae866d7c26cccb3c096cc9c3bec253662e4d306aae9146e21bec5af6f692c5361d67dd", 0x101, 0x400}], 0x0, &(0x7f0000003640)=ANY=[@ANYBLOB="00526400332ddce1ae850442921a6d2327cf1cc42f0ceeafd2e809006ce551afff7c57f6094094fc975c1fdfce13c118b0157b35fd8d5b47dd0cde147a7d8f2ecba810e55e92c6c45f5574028ebbcd8f69fe8326e31beff24ff44140c9dc163b021912a6006baae7"]) 04:43:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") syz_read_part_table(0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="000000000000000000000000000000008128b14700000000d59863d2000000000207a62020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x800, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) write$binfmt_elf32(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x77f) 04:43:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x7}) r1 = syz_open_pts(r0, 0x801) epoll_create1(0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x40001, 0x0) r2 = dup3(r1, r0, 0x0) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 411.017787] EXT2-fs (loop1): error: can't find an ext2 filesystem on dev loop1. [ 411.026376] FAULT_FLAG_ALLOW_RETRY missing 30 [ 411.026389] CPU: 1 PID: 26663 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 04:43:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:08 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'ip_vti0\x00', r1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', r1}) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@remote, 0x1, r2}) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/213, 0xd5}], 0x1) timerfd_gettime(r4, &(0x7f0000000580)) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x0, 0x5, 0x2, 0xed, 0x3d1, 0x3, 0x2ab, 0x2}, "16530b8ba2d6f1d716c97fd6a9dd1060d4"}, 0x31) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r4, 0xc0a85322, &(0x7f00000003c0)) ioctl$VT_DISALLOCATE(r4, 0x5608) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/netfilter\x00') ioctl$TUNSETLINK(r5, 0x400454cd, 0xfffe) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@dev, 0x0, r2}) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r6, r5, 0x80000) getpeername$inet6(r4, &(0x7f0000000040), &(0x7f0000000700)=0x1c) dup3(r6, r7, 0x0) ppoll(&(0x7f00000001c0)=[{r6}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/validatetrans\x00', 0x1, 0x0) 04:43:08 executing program 7: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(0xffffffffffffff9c, &(0x7f0000001280)={&(0x7f0000000a40)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ac0)=""/161, 0xa1}, {&(0x7f0000000b80)=""/144, 0x90}, {&(0x7f0000000c40)=""/255, 0xff}, {&(0x7f0000000d40)=""/78, 0x4e}, {&(0x7f0000000dc0)=""/161, 0xa1}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000f80)=""/132, 0x84}, {&(0x7f0000001040)=""/96, 0x60}, {&(0x7f00000010c0)=""/34, 0x22}, {&(0x7f0000001100)=""/186, 0xba}], 0xa, 0x0, 0x0, 0x3}, 0x40010000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000600)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001400)={{{@in=@multicast1, @in=@multicast2, 0x4e22, 0x66, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x2e, r1, r2}, {0x1, 0xfffffffffffffffd, 0x0, 0x3ff, 0x0, 0xc2, 0x6, 0x10001}, {0x1000, 0x5, 0x0, 0x8001}, 0x5, 0x6e6bb4, 0x2, 0x1, 0x2}, {{@in=@multicast1, 0x4d2, 0xff}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x6, 0xffff, 0x10000, 0x50000000000}}, 0xe8) unshare(0x60000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_ifreq(r3, 0x0, &(0x7f0000000000)={"73797a6b04436c6564391f8eacf1978d", @ifru_map}) r4 = socket$inet(0x2, 0x3, 0x2) r5 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$inet_int(r6, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x4) fchmod(r4, 0x40) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000280)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x28, 0x0, &(0x7f0000000140)=[@release, @release, @release={0x40046306, 0x4}, @register_looper, @free_buffer={0x40086303, r8}], 0x0, 0x0, &(0x7f0000000280)}) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000380)=""/242, 0xf2}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0xfffffffffffffffd) timer_create(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000013c0)}}, &(0x7f0000000180)) [ 411.026395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:43:08 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000100)={0x7, 0x4, 0x2, 0x3, 0x9}) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) [ 411.026409] ffff88019a717610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 411.026423] ffff8801d71f2600 ffff88019a7177e0 0000000000000000 ffff88019a717808 [ 411.026434] ffffffff81cbab1b 00000000000067c2 ffff880198af2130 ffff8801d71f270c 04:43:09 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="e6840faaaaaaaaaaaaaaaaaaaaaa0086dd6050a09c00080000fe800017000000000000000000000001"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff00000000000000000000000000000000000002"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) getpgrp(r1) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 04:43:09 executing program 6: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @dev}, 0x10) dup2(r0, r1) [ 411.026436] Call Trace: [ 411.026448] [] dump_stack+0xc1/0x128 [ 411.026458] [] handle_userfault.cold.18+0x3e/0x51 [ 411.026471] [] ? debug_check_no_locks_freed+0x210/0x210 04:43:09 executing program 7: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000380)=""/4096) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0x71) 04:43:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0x44}, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x2) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r4 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r5, 0x302, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdc9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x84) close(r2) 04:43:09 executing program 5: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}}, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f000078b000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x88801, 0x0) sendto(r0, &(0x7f0000000340)="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", 0x1000, 0x1, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x3, @remote, 'ipddp0\x00'}}, 0x80) r1 = gettid() process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/178, 0x364}], 0x20000000000000c8, &(0x7f0000000300)=[{&(0x7f0000000040)=""/83, 0x7fffffff}], 0xd7, 0x0) [ 411.026481] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 411.026489] [] ? unwind_next_frame+0x86/0xe0 04:43:09 executing program 6: r0 = socket$inet(0x2, 0x200000000000003, 0x9) r1 = fcntl$getown(r0, 0x9) ptrace$pokeuser(0x6, r1, 0x48, 0x7fff) setsockopt(r0, 0xff, 0x1, &(0x7f0000000000), 0x0) [ 411.026497] [] ? __save_stack_trace+0x7d/0xf0 04:43:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) write$binfmt_elf32(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xc48, 0x1, 0x9, 0x8, 0x200, 0x3, 0x3e, 0x4, 0xeb, 0x38, 0x3bf, 0x9, 0x3b55, 0x20, 0x1, 0xb5f, 0x7f, 0xdf90}, [{0x7, 0x0, 0xf62, 0x3, 0x81, 0x2, 0x3b00000000000, 0x40}, {0x7, 0x3, 0x72, 0x1ff, 0x20, 0x2, 0x3ff, 0x20000000}], "8ce59359d18a5d8c8d4725a4b9fa7a314fce385aaf69118be7d67fe907c62276ae04668418380d72c1b0dab9697bbc01c78fae73df69e636a81000e522269f8884f9751642f0e775733d0cb93fc0544a47796a07e080c6c68cb467f4f2ec1298585781d8d514d0efbbabc4f3a43848ee37e74baba3556af9b17947bd03750d5d53470ccc7a24227522a4331897285892ad5e1a1a4e5ba9b0e7a0e6de9f74faeb48d9295af57ebfa90d3d7e6c1e64d3e5006d06c1e66c16f4369afea9da02e36b86854ec6cc1356ccd14bfee9d29d048cdf9cc9233cfeb4dc4049", [[], []]}, 0x352) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x0, 0x2, 0x10001, 0x9, 0x0, 0x2, 0x0, 0x5, 0x4, 0x3, 0x1054, 0x6, 0x3f, 0x1, 0x1f, 0xfffffffffffffff7, 0x0, 0x6, 0xa2b6, 0x0, 0x8, 0x5, 0x300, 0xffff, 0xc0, 0x6, 0x81, 0x7ff, 0xa015, 0x8000, 0x401, 0xf0, 0x7fff, 0x1, 0x6, 0x8, 0x0, 0xffff, 0x1, @perf_config_ext={0x796, 0xf5}, 0x8, 0x9, 0x9, 0x0, 0xfffffffffffff801, 0x100, 0x5}, r4, 0xf, r3, 0x96e18f3158b64d79) [ 411.026507] [] ? handle_mm_fault+0x1267/0x28e0 04:43:09 executing program 0: socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) pkey_alloc(0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040), &(0x7f0000000080)="ae", 0x1, 0xfffffffffffffffb) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, r0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000500)=""/134) munmap(&(0x7f0000624000/0x1000)=nil, 0x1000) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x8, 0x8000, 0xfffffffffffffffa}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2000, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) [ 411.026516] [] ? handle_mm_fault+0x220f/0x28e0 04:43:09 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) fcntl$setlease(r1, 0x400, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000140)=""/238) [ 411.026524] [] handle_mm_fault+0x221d/0x28e0 [ 411.026532] [] ? vm_insert_mixed+0x200/0x200 [ 411.026540] [] ? __lock_is_held+0xa2/0xf0 [ 411.026550] [] __do_page_fault+0x5af/0xd50 [ 411.026558] [] ? mm_fault_error+0x2c0/0x2c0 [ 411.026567] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.026575] [] do_page_fault+0x27/0x30 [ 411.026584] [] page_fault+0x28/0x30 [ 411.026593] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 411.026603] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 411.026610] [] ? str_to_user+0xa0/0xa0 [ 411.026619] [] ? __lock_acquire+0x654/0x4070 [ 411.026625] [] ? __fget+0x20a/0x3b0 [ 411.026635] [] ? exit_robust_list+0x220/0x220 [ 411.026641] [] ? __fget+0x47/0x3b0 [ 411.026649] [] evdev_ioctl+0x27/0x30 [ 411.026657] [] ? evdev_ioctl_compat+0x30/0x30 [ 411.026665] [] do_vfs_ioctl+0x1ac/0x11a0 [ 411.026672] [] ? ioctl_preallocate+0x220/0x220 [ 411.026681] [] ? selinux_capable+0x40/0x40 [ 411.026687] [] ? __fget+0x20a/0x3b0 [ 411.026694] [] ? __fget+0x231/0x3b0 [ 411.026699] [] ? __fget+0x47/0x3b0 [ 411.026707] [] ? security_file_ioctl+0x8f/0xc0 [ 411.026714] [] SyS_ioctl+0x8f/0xc0 [ 411.026719] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 411.026725] [] do_syscall_64+0x1a6/0x490 [ 411.026733] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 411.027890] FAULT_FLAG_ALLOW_RETRY missing 30 [ 411.027899] CPU: 1 PID: 26671 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 411.027904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.027917] ffff880198347950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 411.027933] ffff8801d71f2600 ffff880198347b20 0000000000000000 ffff880198347b48 [ 411.027944] ffffffff81cbab1b 0000000000000dca ffff880197e36908 ffff8801d71f270c [ 411.027947] Call Trace: [ 411.027956] [] dump_stack+0xc1/0x128 [ 411.027967] [] handle_userfault.cold.18+0x3e/0x51 [ 411.027978] [] ? debug_check_no_locks_freed+0x210/0x210 [ 411.027987] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 411.027997] [] ? handle_mm_fault+0x1267/0x28e0 [ 411.028005] [] ? handle_mm_fault+0x220f/0x28e0 [ 411.028013] [] handle_mm_fault+0x221d/0x28e0 [ 411.028021] [] ? vm_insert_mixed+0x200/0x200 [ 411.028032] [] __do_page_fault+0x5af/0xd50 [ 411.028040] [] ? mm_fault_error+0x2c0/0x2c0 [ 411.028048] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.028056] [] do_page_fault+0x27/0x30 [ 411.028064] [] page_fault+0x28/0x30 [ 411.028072] [] ? do_sigaltstack+0x267/0x6f0 [ 411.028080] [] ? do_sigaltstack+0x271/0x6f0 [ 411.028088] [] ? security_file_ioctl+0x8f/0xc0 [ 411.028097] [] SyS_sigaltstack+0x6c/0x90 [ 411.028105] [] ? do_sigaction+0x8c0/0x8c0 [ 411.028112] [] do_syscall_64+0x1a6/0x490 [ 411.028121] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 411.367325] FAT-fs (loop6): bogus number of reserved sectors [ 411.367383] FAT-fs (loop6): Can't find a valid FAT filesystem [ 411.530441] IPVS: Creating netns size=2536 id=60 [ 411.553076] handle_userfault: 2 callbacks suppressed [ 411.553139] FAULT_FLAG_ALLOW_RETRY missing 30 [ 411.553150] CPU: 0 PID: 26698 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 411.553155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.553170] ffff8801a8b2f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 411.553182] ffff8801d86fb680 ffff8801a8b2fb20 0000000000000000 ffff8801a8b2fb48 [ 411.553194] ffffffff81cbab1b ffff8801a8b2fa78 ffffffff8122e3ea ffff8801d86fb78c [ 411.553196] Call Trace: [ 411.553211] [] dump_stack+0xc1/0x128 [ 411.553221] [] handle_userfault.cold.18+0x3e/0x51 [ 411.553233] [] ? perf_trace_lock+0x11a/0x520 [ 411.553246] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 411.553254] [] ? HARDIRQ_verbose+0x10/0x10 [ 411.553264] [] ? handle_mm_fault+0x1267/0x28e0 [ 411.553273] [] ? handle_mm_fault+0x220f/0x28e0 [ 411.553281] [] handle_mm_fault+0x221d/0x28e0 [ 411.553289] [] ? vm_insert_mixed+0x200/0x200 [ 411.553300] [] __do_page_fault+0x5af/0xd50 [ 411.553308] [] ? HARDIRQ_verbose+0x10/0x10 [ 411.553316] [] ? mm_fault_error+0x2c0/0x2c0 [ 411.553324] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.553332] [] do_page_fault+0x27/0x30 [ 411.553340] [] page_fault+0x28/0x30 [ 411.553349] [] ? do_sigaltstack+0x267/0x6f0 [ 411.553357] [] ? do_sigaltstack+0x271/0x6f0 [ 411.553365] [] ? security_file_ioctl+0x8f/0xc0 [ 411.553374] [] SyS_sigaltstack+0x6c/0x90 [ 411.553383] [] ? do_sigaction+0x8c0/0x8c0 [ 411.553390] [] do_syscall_64+0x1a6/0x490 [ 411.553398] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 412.060558] tmpfs: No value for mount option 'security.capability' [ 412.099328] FAULT_FLAG_ALLOW_RETRY missing 30 [ 412.099339] CPU: 1 PID: 26734 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 412.099344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.099359] ffff8801a627f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 412.099372] ffff8801d71f2780 ffff8801a627fb20 0000000000000000 ffff8801a627fb48 [ 412.099383] ffffffff81cbab1b 0000000000000dca ffff8801d90c3908 ffff8801d71f288c [ 412.099385] Call Trace: [ 412.099398] [] dump_stack+0xc1/0x128 [ 412.099410] [] handle_userfault.cold.18+0x3e/0x51 [ 412.099423] [] ? debug_check_no_locks_freed+0x210/0x210 [ 412.099432] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 412.099440] [] ? plist_del+0x14f/0x200 [ 412.099450] [] ? futex_wake+0x1aa/0x450 [ 412.099461] [] ? handle_mm_fault+0x1267/0x28e0 [ 412.099469] [] ? handle_mm_fault+0x220f/0x28e0 [ 412.099477] [] handle_mm_fault+0x221d/0x28e0 [ 412.099485] [] ? vm_insert_mixed+0x200/0x200 [ 412.099495] [] __do_page_fault+0x5af/0xd50 [ 412.099503] [] ? mm_fault_error+0x2c0/0x2c0 [ 412.099511] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.099519] [] do_page_fault+0x27/0x30 [ 412.099526] [] page_fault+0x28/0x30 [ 412.099535] [] ? do_sigaltstack+0x267/0x6f0 [ 412.099544] [] ? do_sigaltstack+0x271/0x6f0 [ 412.099553] [] ? __fget_light+0x169/0x1f0 [ 412.099562] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 412.099571] [] SyS_sigaltstack+0x6c/0x90 [ 412.099580] [] ? do_sigaction+0x8c0/0x8c0 [ 412.099589] [] do_syscall_64+0x1a6/0x490 [ 412.099598] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:10 executing program 6: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e23, @multicast1}, 0xfd9d) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000440)=0x40, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x65, 0x0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000280)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000480)=""/106, 0x6a}], 0x2, &(0x7f0000000500)=""/2, 0x2}}, {{&(0x7f0000001e00)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002200), 0x0, &(0x7f0000000300)=""/79, 0x6}}], 0x1e6, 0x40000122, &(0x7f00000001c0)={0x77359400}) 04:43:10 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1163484001"], 0x0, 0x0, &(0x7f0000000480)}) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000001c0)}) 04:43:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x400000000007, &(0x7f0000000080)="ef5cf4d594a71216bee24ce705") socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x4000000000000001, 0x800) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x10) 04:43:10 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f000000a000)) r0 = dup(0xffffffffffffffff) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1000000000000, 0x5) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00005f7ffa), 0x80000, &(0x7f000002f000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) umount2(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000780)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0xa000, 0x0) 04:43:10 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xc0000, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x2400, 0x1b) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:43:10 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x2) r2 = userfaultfd(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000100)=0x8) fsetxattr(r1, &(0x7f00000003c0)=@known='system.posix_acl_default\x00', &(0x7f0000000400)='\x00', 0x1, 0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x134d}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3067}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x14}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20040001}, 0x8004) ioctl$EVIOCGMTSLOTS(r5, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000014000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r2) 04:43:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000089000)) r2 = dup3(r1, r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) setresuid(r3, r4, r5) writev(r2, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x7ff, 0x4) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000100)) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r1, 0x0) recvmmsg(r1, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x387, &(0x7f0000000600)=""/84, 0x27}}, {{&(0x7f0000000680)=@l2, 0x40d, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x8e}}], 0x4000000000002ce, 0x62, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000180)={0x0, 0x0, 0x7}, 0xc) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x4002000, 0x1009f8, 0x80000ffe, 0x7fffffff}, 0x14) shutdown(r0, 0x1) 04:43:10 executing program 0: socket(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000d36ff4)={0xfc147812c6696267}) timerfd_settime(r2, 0x1, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000080)) lseek(r1, 0x25, 0x7) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000021ff4)) epoll_pwait(0xffffffffffffffff, &(0x7f0000a1efac)=[{}], 0x1, 0x10, &(0x7f0000bbfff8), 0x8) mount$9p_virtio(&(0x7f00000000c0)='%\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4040, &(0x7f0000000180)={'trans=virtio,'}) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x44002) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)) 04:43:10 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xfbbe) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000100)=0x4) readv(r2, &(0x7f00000042c0)=[{&(0x7f0000004000)=""/233, 0x25e}, {&(0x7f0000001ac0)=""/21, 0x15}, {&(0x7f0000000000)=""/61, 0xfffffde5}], 0x3) 04:43:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) r4 = dup3(r1, r0, 0x0) renameat2(r4, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x1) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 413.103718] FAULT_FLAG_ALLOW_RETRY missing 30 [ 413.108894] CPU: 0 PID: 26773 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 413.116612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.125952] ffff8801cb697610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 413.134007] ffff8801d86faf00 ffff8801cb6977e0 0000000000000000 ffff8801cb697808 [ 413.142028] ffffffff81cbab1b 00000000000067c2 ffff8801c93b2130 ffff8801d86fb00c [ 413.150037] Call Trace: [ 413.152643] [] dump_stack+0xc1/0x128 [ 413.158002] [] handle_userfault.cold.18+0x3e/0x51 [ 413.164516] [] ? debug_check_no_locks_freed+0x210/0x210 [ 413.171534] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 413.177939] [] ? unwind_next_frame+0x86/0xe0 [ 413.183984] [] ? __save_stack_trace+0x7d/0xf0 [ 413.190130] [] ? handle_mm_fault+0x1267/0x28e0 [ 413.196341] [] ? handle_mm_fault+0x220f/0x28e0 [ 413.202549] [] handle_mm_fault+0x221d/0x28e0 [ 413.208586] [] ? vm_insert_mixed+0x200/0x200 [ 413.214623] [] ? __lock_is_held+0xa2/0xf0 [ 413.220400] [] __do_page_fault+0x5af/0xd50 [ 413.226279] [] ? mm_fault_error+0x2c0/0x2c0 [ 413.232226] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.238872] [] do_page_fault+0x27/0x30 [ 413.244386] [] page_fault+0x28/0x30 [ 413.249651] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 413.256475] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 413.262955] [] ? str_to_user+0xa0/0xa0 [ 413.268484] [] ? __lock_acquire+0x654/0x4070 [ 413.274529] [] ? exit_robust_list+0x220/0x220 [ 413.280661] [] evdev_ioctl+0x27/0x30 [ 413.286007] [] ? evdev_ioctl_compat+0x30/0x30 [ 413.292129] [] do_vfs_ioctl+0x1ac/0x11a0 [ 413.297818] [] ? ioctl_preallocate+0x220/0x220 [ 413.304037] [] ? selinux_capable+0x40/0x40 [ 413.309898] [] ? __fget+0x20a/0x3b0 [ 413.315150] [] ? __fget+0x231/0x3b0 [ 413.320410] [] ? __fget+0x47/0x3b0 [ 413.325588] [] ? security_file_ioctl+0x8f/0xc0 [ 413.331798] [] SyS_ioctl+0x8f/0xc0 [ 413.336964] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 413.342914] [] do_syscall_64+0x1a6/0x490 [ 413.348606] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 413.373663] FAULT_FLAG_ALLOW_RETRY missing 30 [ 413.378392] CPU: 1 PID: 26785 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 413.386104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.395458] ffff88019ce0f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 413.403539] ffff8801d71f2180 ffff88019ce0f7e0 0000000000000000 ffff88019ce0f808 [ 413.411766] ffffffff81cbab1b 00000000000067c2 ffff880197400930 ffff8801d71f228c [ 413.419844] Call Trace: [ 413.422433] [] dump_stack+0xc1/0x128 [ 413.427796] [] handle_userfault.cold.18+0x3e/0x51 [ 413.434288] [] ? debug_check_no_locks_freed+0x210/0x210 [ 413.441298] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 413.447700] [] ? check_preemption_disabled+0x3b/0x170 04:43:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="5ebb409aca87d060cf6d4e5c0897cb79f72122c292c42a2695ae42dfd2dbfed53e2e6a6e2eca1f697fb72384044f4757c26cca8c657bdef84a0a15bec22a209097d869fbdfb8d1c513c0a8c36160e69bbbb513ecb754cc726e52480312c9c24f5d8f52930e27165be298aedf4bfb19055f9fc6a86ffda5a2672c9e186bb1c3673eab9f72ca2e6f234d4a9ca173768fb2f2a17d2b84afc915db66317cce22f677013e96751cbacec3d42fd49e49873b582ea9dcea6db920af98", 0xb9, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r2) keyctl$revoke(0x3, r1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000440)={'filter\x00'}, &(0x7f00000004c0)=0x54) keyctl$read(0xb, r1, &(0x7f0000000000)=""/13, 0xd) [ 413.454527] [] ? handle_mm_fault+0x1267/0x28e0 [ 413.460748] [] ? handle_mm_fault+0x220f/0x28e0 [ 413.466985] [] handle_mm_fault+0x221d/0x28e0 [ 413.473033] [] ? vm_insert_mixed+0x200/0x200 [ 413.479084] [] ? __lock_is_held+0xa2/0xf0 [ 413.484887] [] __do_page_fault+0x5af/0xd50 [ 413.490764] [] ? mm_fault_error+0x2c0/0x2c0 [ 413.496715] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.503372] [] do_page_fault+0x27/0x30 [ 413.508892] [] page_fault+0x28/0x30 [ 413.514159] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 413.520982] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 413.527455] [] ? str_to_user+0xa0/0xa0 [ 413.532972] [] ? __lock_acquire+0x654/0x4070 [ 413.539022] [] ? exit_robust_list+0x220/0x220 [ 413.545162] [] evdev_ioctl+0x27/0x30 [ 413.550502] [] ? evdev_ioctl_compat+0x30/0x30 [ 413.556632] [] do_vfs_ioctl+0x1ac/0x11a0 [ 413.562332] [] ? ioctl_preallocate+0x220/0x220 [ 413.568551] [] ? selinux_capable+0x40/0x40 [ 413.574415] [] ? __fget+0x20a/0x3b0 [ 413.579679] [] ? __fget+0x231/0x3b0 [ 413.584945] [] ? __fget+0x47/0x3b0 [ 413.590123] [] ? security_file_ioctl+0x8f/0xc0 [ 413.596332] [] SyS_ioctl+0x8f/0xc0 04:43:11 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@mpls_getroute={0x1c, 0x1a, 0x101}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @rand_addr, @dev}, &(0x7f00000007c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004580)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000004680)=0xe8) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004a00)={{{@in6=@remote, @in=@local}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000004b00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000ca80)={{{@in=@local, @in6}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f000000cb80)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f000000cdc0), &(0x7f000000ce00)=0x14) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000100)) [ 413.601508] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 413.607459] [] do_syscall_64+0x1a6/0x490 [ 413.613149] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x345000, 0x0) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0xfbe9, 0x22, 0x1, r3}) 04:43:11 executing program 0: socket$inet6(0xa, 0x1000000002002, 0xf43) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000028c0)=ANY=[@ANYBLOB, @ANYRES32], 0x4}}, 0x1) unshare(0x40000000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x9, &(0x7f0000000140)=[{0x8, 0x2, 0x3, 0x40}, {0x293, 0x10001, 0x80000001, 0x5}, {0x9, 0xb0, 0x9, 0x6}, {0x6, 0x7fff, 0x8, 0x1}, {0xff, 0x0, 0x1000, 0xff}, {0xac, 0x4, 0x0, 0xfffffffffffff001}, {0x1, 0x931, 0x5, 0x6}, {0x2, 0x2, 0x100000001, 0x2}, {0xffff, 0xffffffffffff0922, 0xfffffffffffffffb, 0xb7c}]}, 0x10) [ 413.785079] IPVS: Creating netns size=2536 id=61 [ 413.816123] IPVS: Creating netns size=2536 id=62 04:43:11 executing program 6: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="2a0000002901000004000000000000001d0000000000000000000000000000000007002e2f66696c6530"], 0x2a) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) write$P9_RGETATTR(r1, &(0x7f00000003c0)={0xa0, 0x19, 0x1, {0x4c, {0x20, 0x4, 0x8}, 0x100, r2, r3, 0x0, 0xf3e, 0x5, 0x1, 0xc342, 0xafa, 0x3f, 0x7f, 0xfffffffffffffc01, 0x6dc, 0x7, 0xe0f0, 0x9, 0x5, 0x8}}, 0xa0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}]}}) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f00000000c0)="025cc80700145f8f764070") umount2(&(0x7f0000000500)='./file0\x00', 0x0) 04:43:11 executing program 5: r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680), 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="5ebb409aca87d060cf6d4e5c0897cb79f72122c292c42a2695ae42dfd2dbfed53e2e6a6e2eca1f697fb72384044f4757c26cca8c657bdef84a0a15bec22a209097d869fbdfb8d1c513c0a8c36160e69bbbb513ecb754cc726e52480312c9c24f5d8f52930e27165be298aedf4bfb19055f9fc6a86ffda5a2672c9e186bb1c3673eab9f72ca2e6f234d4a9ca173768fb2f2a17d2b84afc915db66317cce22f677013e96751cbacec3d42fd49e49873b582ea9dcea6db920af98", 0xb9, r0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r2) keyctl$revoke(0x3, r1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000440)={'filter\x00'}, &(0x7f00000004c0)=0x54) keyctl$read(0xb, r1, &(0x7f0000000000)=""/13, 0xd) 04:43:11 executing program 7: ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000000c0)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='omfs\x00', 0x4000, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x303000, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f00000001c0)=',') 04:43:11 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) fcntl$getflags(r0, 0x40b) 04:43:11 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000040), 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000080)) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1c3) setresuid(r3, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000ea23000000000000000000000000000000e3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f0081dcaff212d66dc5b95835c79fcc1151c1fb72632a01e4049cfa2c4e65999279349ee5e8028142e61823b69f7b942eae7d95a1c5498b6167af6cf6c43393e8939754d8df670515306fdab337ee9991c1cffd942e06f44aa7b758fd98dae05e43d9b3db63844fd2bebdc411ffc8556a6818dc7da95a920"], 0x320) ioprio_set$uid(0x3, r3, 0x0) 04:43:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:11 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x480403, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e2800", 0x26}], 0x1}, 0x0) setregid(0x0, r3) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) r6 = fcntl$getown(r5, 0x9) sendmmsg$unix(r4, &(0x7f0000000dc0)=[{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000180)="29e7997d4d2c227e8b0e1f45cc74e7bcdf166f1b9b2b8f704749a2e523db52", 0x1f}, {&(0x7f0000000480)="22afddbdb8dd94eb5020eda586eee848e3325a0f2091aeda266f919605529e2ca07e0cf6fb8ef07223bbdb90f39c5b36bac830567f338b8fac11af41578235173e04397e1916fd571d", 0x49}, {&(0x7f00000006c0)="df319ba05a040076a9cfa66ab817b1385c647a3b0b520897064ef27a9f15db366e7be685f9d0ad010ef7fbf4f86d99ce9b59c24dd3efd2911ff285faf5bc040f44b25d750677a78da965767749e8c224742e53ea5eedbf3b352af1cfd754cfc374e47790baf1f1b04312b4ad498d8b86676f67c4ea0f318aace5e9d64b221ce81f4f2f648b0e9b12a6675ffbb71073987a07313859986745443669d4ecccd96b42741ae9652063f28c2150a9f8853b597227f422d751cfcdd7dcc559f718a9725372", 0xc2}, {&(0x7f00000005c0)="58159ba6fee07b6f591576b59be765c0c347b870897a8fbf79f98fef48b98a56ee73f84078c188f36b501b06e5a6b25e86574b5f09bf7a13436072246fe91be396fed9bfee9206cd51239003142734ae691d545e05fc62b592cf", 0x5a}, {&(0x7f0000000880)="d00a44c63724586837cdf6617844b743630d935136bc38ecadad6ac5236891e61837fa35c363a2c5329c1e0aa9bfd2e076752e2b97fceea8cc3fda933117ab975348cd9d719a46eee512155e89f70468a33aa3fb65322f1e389d1c8f9af78de1e17c07d98cbaa621c3af75c175ec66dd9e5d6e5c56f5faaa25dd6d026791a625382bddf1c688e2289e42b1f4ea81c886abc2fa72", 0x94}, {&(0x7f0000000a40)="12291fd21d668fd3d8979b301e33ea2e3330c434908dadb79a0dd1458e6babc7c56f71f56184a491bbfee5a03a840d781f3a589d9b53d30cdc8d8039d9b33d87f1456d9b3f13028b96e87acd629175f673e68b992fc25ce64695ffc1aa640545db9778cc26f11e72103589020f7d919b77637e97ab3ddb02600a9923a97066b5304e64c5bd6985331f4837ff69ca0cfeed8e6be039f9713417d23d9a6d1274c79c20df489a75283e81b111111589309872987872aa93abe34f07", 0xba}, {&(0x7f0000000b00)="84d8f07a324c3cd78cb573652e72e48ac09ccb13343e16349115fc33c5293aa3c9dbc85f4bc51349aa6b7e79fbaa90fbd274d3fd83a30f9b54b6ea2ab51b548c153bdf86c3175390128949b9443c6b2353b4633f6b563cd38066f41b5a400602f508421bb9e015ae0bdbb0ca9fb95c00aa1a7a47d96bd6d0f01994172a360516d8941c75bd6370c171871fad781e029a233fd4a17a7e66bd4537983de5090f6eef3ae344c44ac251f327db05589907371c027aa0ecda78f33b7f079528ac1defc3d3c44a0c00dd0e5724366bf2a9", 0xce}], 0x7, &(0x7f0000000340)=[@cred={0x20, 0x1, 0x2, r6, r2, r3}], 0x20, 0x4890}, {&(0x7f0000000c00), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000c80)="84f67894da273c621e7720123f94bbfd48e2691a333805f92ba8927f77dbf65803ffe1ec80f9b57d8d19de6035d98d3e6b247e623253532a505a711fbe276a71c2a64fe2ea2f86cd96c10964212986d62574a82969ee9c804d21e8770e1eb8e7935ea3f358621a5e81fd3bbc0edc81c2e93c7d8f8b7080c716a73d17cb5c000f74f1ff4944d358aa3b3d6361e2089f1cfe9e5ca522b65b09e73423e1fc0d71fae7cb99508324", 0xa6}, {&(0x7f0000000500)="71d580392da2d9691674", 0xa}], 0x2, &(0x7f0000000d40)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r5, r1, r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r6, r2, r3}, @cred={0x20, 0x1, 0x2, r6, r2, r3}], 0x80, 0x4000000}], 0x2, 0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 04:43:11 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000400)={0xfffffff0, 0x7, 0x2, {{0x154, "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"}, 0xf88}}, 0x161) fcntl$notify(r0, 0x402, 0x800000000080000d) [ 413.901943] overlayfs: missing 'lowerdir' 04:43:11 executing program 7: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='coredump_filter\x00') sendfile(r1, r1, &(0x7f0000000140), 0xd7) memfd_create(&(0x7f0000000100)='em0procsystemmd5sumbdev\x00', 0x1) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)={0x101, 0x3, {0x2, 0x3, 0x5, 0x0, 0x3f}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)}], 0x10, &(0x7f0000000240)=ANY=[]) r2 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r3, 0x1) lseek(r3, 0x0, 0x2) fsync(r3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x5a2) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f00000002c0)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r3, r5, &(0x7f0000002780), 0x8000fffffffe) dup(r1) ftruncate(r4, 0x4) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) 04:43:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000280)}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000140), 0xc, &(0x7f00000005c0)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x721, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c}]}, 0x5c}}, 0x0) [ 413.957741] FAULT_FLAG_ALLOW_RETRY missing 30 [ 413.962427] FAULT_FLAG_ALLOW_RETRY missing 30 [ 413.962439] CPU: 0 PID: 26846 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 04:43:11 executing program 6: timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x5}}, &(0x7f00000001c0)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r1, @ANYBLOB="00042bbd7000fbdbdf25100000005000030014000600ff0200000000000000001200000000011400020000000000000000000000000000db00a6dadd2999192100000800040000080000140002006c6f00000000000000000000000000000800060006000000340002000800090007000000080003000000000008000500001000000800050001000000080002004e200000080003000100000008000400040000000800050001000000080004000104080008000400810000001800010014000300fe800000000000000000000000000021"], 0xd8}, 0x1, 0x0, 0x0, 0x4000}, 0x4c010) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000009) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0xa010, r0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/244, 0xf4) [ 413.962444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.962457] ffff8801c017f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 413.962468] ffff8801d71f2c00 ffff8801c017f7e0 0000000000000000 ffff8801c017f808 04:43:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r0, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20}, 0x10) eventfd(0x7fffffff) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) listen(r2, 0x0) listen(r1, 0x0) [ 413.962478] ffffffff81cbab1b 00000000000067c2 ffff88019b6c5130 ffff8801d71f2d0c 04:43:11 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00003fe000)={0xffffffffffffffff}) tee(r1, r0, 0x80000001, 0x0) tee(r1, r0, 0x0, 0x0) fadvise64(r1, 0x0, 0xff, 0x5) [ 413.962480] Call Trace: [ 413.962493] [] dump_stack+0xc1/0x128 [ 413.962505] [] handle_userfault.cold.18+0x3e/0x51 [ 413.962517] [] ? debug_check_no_locks_freed+0x210/0x210 04:43:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005e40)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)=""/212, 0xd4}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000000240)=""/7, 0x7}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000300)=""/241, 0xf1}], 0x5, &(0x7f0000000480)=""/32, 0x20, 0x4}, 0xfffffffffffffff9}, {{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000700)=""/59, 0x3b}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/87, 0x57}, {&(0x7f0000000840)=""/95, 0x5f}], 0x6, &(0x7f0000000940)=""/34, 0x22, 0xbdb}, 0x4c3b}, {{&(0x7f0000000980)=@nfc_llcp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/215, 0xd7}, {&(0x7f0000000b00)=""/174, 0xae}], 0x2, &(0x7f0000000c00)=""/4096, 0x1000, 0x5}, 0x3}, {{&(0x7f0000001c00)=@ax25, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001c80)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=""/24, 0x18, 0x4}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000004240)=[{&(0x7f0000001dc0)=""/222, 0xde}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/190, 0xbe}, {&(0x7f0000002f80)=""/167, 0xa7}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/201, 0xc9}, {&(0x7f0000004140)=""/202, 0xca}], 0x7, &(0x7f00000042c0)=""/163, 0xa3, 0xc}, 0x1}, {{&(0x7f0000004380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004400)=""/220, 0xdc}, {&(0x7f0000004500)=""/172, 0xac}, {&(0x7f00000045c0)=""/251, 0xfb}, {&(0x7f00000046c0)=""/226, 0xe2}, {&(0x7f00000047c0)=""/83, 0x53}, {&(0x7f0000004840)=""/39, 0x27}], 0x6, &(0x7f0000004900)=""/4096, 0x1000, 0xd1b}, 0x9}, {{&(0x7f0000005900)=@xdp, 0x80, &(0x7f0000005a80)=[{&(0x7f0000005980)=""/10, 0xa}, {&(0x7f00000059c0)=""/70, 0x46}, {&(0x7f0000005a40)=""/44, 0x2c}], 0x3, 0x0, 0x0, 0x5}, 0x3}, {{&(0x7f0000005ac0)=@nfc_llcp, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000005b40)=""/70, 0x46}], 0x1, &(0x7f0000005c00)=""/179, 0xb3, 0xffff}, 0xfffffffffffffffd}, {{&(0x7f0000005cc0)=@sco, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d40)=""/28, 0x1c}, {&(0x7f0000006500)=""/4096, 0x1000}, {&(0x7f0000007500)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/104, 0x68}], 0x4, 0x0, 0x0, 0x5}, 0x8000}], 0x9, 0x40000040, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000006080)={'filter\x00', 0x4}, 0x68) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x24, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) [ 413.962526] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 413.962536] [] ? check_preemption_disabled+0x3b/0x170 [ 413.962544] [] ? check_preemption_disabled+0x3b/0x170 [ 413.962554] [] ? handle_mm_fault+0x1267/0x28e0 [ 413.962562] [] ? handle_mm_fault+0x220f/0x28e0 [ 413.962570] [] handle_mm_fault+0x221d/0x28e0 [ 413.962577] [] ? vm_insert_mixed+0x200/0x200 [ 413.962585] [] ? __lock_is_held+0xa2/0xf0 [ 413.962595] [] __do_page_fault+0x5af/0xd50 [ 413.962604] [] ? mm_fault_error+0x2c0/0x2c0 [ 413.962612] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 413.962620] [] do_page_fault+0x27/0x30 04:43:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2000000801) r2 = epoll_create1(0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x202080, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:12 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000280), 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 04:43:12 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffef8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x10000000000007) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=@fragment, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000140), 0x7b, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000240)={{}, 'port1\x00'}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000300)) 04:43:12 executing program 7: r0 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x200, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f00000000c0)=ANY=[]) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0xfffffdb9) ioctl$TCSBRK(r1, 0x5409, 0x2) fcntl$getown(r1, 0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getgroups(0x0, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000002c0)) fallocate(r1, 0x3, 0x2, 0x9) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000001c0)={'yam0\x00', @ifru_settings={0x9, 0x3ff, @fr_pvc=&(0x7f0000000140)={0xc6}}}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000200)={0x10000, {{0xa, 0x4e21, 0xdf, @mcast1, 0xf3}}}, 0x88) close(r1) 04:43:12 executing program 5: mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) r0 = open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000540)="b3eedcf85ceef9eacae0f8e13db1fc6ca4f762e3728de4b8bc178daa413f7d4e2e03eecbfdbef5d13aebec66020b6db8142810068c1183198d213e5435e0f66053b1f2", 0x43, r1) r2 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4, 0x1a5}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r4 = request_key(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)='\x00', 0xfffffffffffffffb) add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)="83a38455bc39818f6469382434c65df39357deca87550aba5dbb889c261ec48366644e6e326cec34bc55945a67d6a533e902565e721d63c9f0d865", 0x3b, r4) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, r3, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd82}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x33}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe71e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3c}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080), &(0x7f0000000140), 0x0, 0xfffffffffffffffc) fcntl$getflags(r0, 0x408) [ 413.962628] [] page_fault+0x28/0x30 [ 413.962637] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 413.962646] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 413.962654] [] ? str_to_user+0xa0/0xa0 [ 413.962661] [] ? __lock_acquire+0x654/0x4070 [ 413.962670] [] ? exit_robust_list+0x220/0x220 [ 413.962677] [] evdev_ioctl+0x27/0x30 [ 413.962685] [] ? evdev_ioctl_compat+0x30/0x30 [ 413.962692] [] do_vfs_ioctl+0x1ac/0x11a0 [ 413.962699] [] ? ioctl_preallocate+0x220/0x220 [ 413.962706] [] ? selinux_capable+0x40/0x40 [ 413.962712] [] ? __fget+0x20a/0x3b0 [ 413.962718] [] ? __fget+0x231/0x3b0 [ 413.962723] [] ? __fget+0x47/0x3b0 [ 413.962732] [] ? security_file_ioctl+0x8f/0xc0 [ 413.962738] [] SyS_ioctl+0x8f/0xc0 [ 413.962745] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 413.962752] [] do_syscall_64+0x1a6/0x490 [ 413.962761] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 414.119535] netlink: 56 bytes leftover after parsing attributes in process `syz-executor0'. [ 414.737430] CPU: 0 PID: 26854 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 414.745173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.754522] ffff8801cc927950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 414.762557] ffff8801d71f2c00 ffff8801cc927b20 0000000000000000 ffff8801cc927b48 [ 414.770577] ffffffff81cbab1b 0000000000000dca ffff8801d9266908 ffff8801d71f2d0c [ 414.778579] Call Trace: [ 414.781149] [] dump_stack+0xc1/0x128 [ 414.786498] [] handle_userfault.cold.18+0x3e/0x51 [ 414.792983] [] ? debug_check_no_locks_freed+0x210/0x210 [ 414.799989] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 414.806376] [] ? handle_mm_fault+0x1267/0x28e0 [ 414.812586] [] ? handle_mm_fault+0x220f/0x28e0 [ 414.818794] [] handle_mm_fault+0x221d/0x28e0 [ 414.824837] [] ? vm_insert_mixed+0x200/0x200 [ 414.830876] [] __do_page_fault+0x5af/0xd50 [ 414.836736] [] ? mm_fault_error+0x2c0/0x2c0 [ 414.842686] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 414.849335] [] do_page_fault+0x27/0x30 [ 414.854850] [] page_fault+0x28/0x30 [ 414.860104] [] ? do_sigaltstack+0x267/0x6f0 [ 414.866055] [] ? do_sigaltstack+0x271/0x6f0 [ 414.872006] [] ? security_file_ioctl+0x8f/0xc0 [ 414.878220] [] SyS_sigaltstack+0x6c/0x90 [ 414.883921] [] ? do_sigaction+0x8c0/0x8c0 [ 414.890108] [] do_syscall_64+0x1a6/0x490 [ 414.895801] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:12 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000280)={0x10, 0x0, 0x3}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x1f0, 0xd, 0x9, 0x100, 0x70bd27, 0x25dfdbfc, {0xd, 0x0, 0x5}, [@nested={0x1dc, 0x54, [@typed={0xc, 0x90, @u64=0x9f}, @typed={0x4, 0x2a}, @generic="c1ed2ed5d21dc78da5024113714c1f7fa4e30aff53bf5e5578c8788bfe162f1db33a799d58e33f65d527a2700367343f2be8dfcc0ba3795275b02c23710141d0e9a812863573fe4ebee1acb74c1eca1df1c464ba86bc02ec7f1f5664482a6cb50c7098b849f5743b99ca7f738164f99ece1961d172eea21ef48d28bdffc51889c507f8133acf9bd82e8bbf8f3fdf69986f837cc4e0eb2ea04a76ddb1fff3", @typed={0x54, 0x8b, @binary="96682d8793d37195adb05d1fea4af7ce15900495cf5cac6d4f63a2b96802f73f7ea6521eab063ea28999f6db59f2cb75e790226fa1061c0a27ad7783b4c93df5e64e9cb1c4e9f278cf3c2ec714b5"}, @generic="cd49f82b69e55fa679cff5531528f5cf72b5e454a0db41ea6c64441573b79a43418aaadbbf3118103aee889320f117ef36214a808f21bbfb7dbf30a6f8904909feb28b331c79c9b8f56b0c3d34a81148d31005bca53e984006812ed6c5ead1e940f0c4721ec28bd532ffdb24cfb1c768e3a04da7e13445b3bb8f8bcde3adbbbacf446a386d79889e366c5288fd620e7babbbbbc170db97ca357b695e3c407efa93be6ade7fbeab450d8a19746b379277faa60f44c17a0c68826173a5357588f5337246b8d47abcdfe9fc159e9af267a59dd6f35a"]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020307031dfffd946fa283000a200a0009000500040000000c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) r3 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) r5 = getegid() setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r3, r4, r5}, 0xc) 04:43:12 executing program 6: sched_setaffinity(0x0, 0xffffffffffffff42, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000100)=0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 04:43:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_acct\x00') openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) epoll_create(0xffffffffffff3ef2) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000180)="edd97cc9c4dc5e631c1d", 0xa}], 0x1, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$inet6_tcp(0xa, 0x1, 0x0) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="736563762f662b286c00df8ea4a00d794b1ca05daaa106a2f42a485fb0f8ce32a08715a70bf5a512bb463a4f1f8a000000000000000000"]) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000240), 0x800) read(r0, &(0x7f00000000c0)=""/174, 0xae) 04:43:12 executing program 0: sched_setaffinity(0x0, 0xfffffffffffffc8d, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000240)=""/62) r2 = socket$inet6(0xa, 0x400002, 0xffffffffffffffff) sendfile(r0, r1, 0x0, 0xa) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r8 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840)={r8, r5, r9}, 0xc) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000006c0)={@dev, @remote, 0x0}, &(0x7f0000000700)=0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'eql\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'bpq0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000940)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000a40)=0xe8) getsockname$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000880)={@remote, 0x6, r13}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b00)={'syz_tun\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000b40)={0x400, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x1ac, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfd8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r12}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x18c, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x3ff, 0x1, 0x3, 0xffff}, {0xc4, 0x1, 0xfffffffffffffffe}, {0xffff, 0x4, 0x401, 0x59f}, {0x9, 0xcaa5, 0x8db, 0x7fff}, {0x2, 0x5, 0xd2e8, 0x800}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x400}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x94b, 0x4) connect$netlink(r1, &(0x7f00000001c0)=@unspec, 0xc) fcntl$setstatus(r2, 0x4, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000174, 0x0) ioprio_set$pid(0x0, 0x0, 0x3) 04:43:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, r1, 0xce98) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x801) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x200000, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000180)=0x8000) ioctl$SG_NEXT_CMD_LEN(r3, 0x2283, &(0x7f0000000140)=0xef) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x100000000, @remote, 0x40}, {0xa, 0x4e22, 0x2, @ipv4={[], [], @remote}, 0xcee}, 0x2c28, [0x3, 0x2, 0x8, 0x80, 0x3, 0x5, 0x2, 0x1]}, 0x5c) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000089000)) r6 = dup3(r2, r0, 0x0) writev(r6, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:12 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) ioctl$TIOCCONS(r1, 0x541d) ioctl$TIOCCONS(r0, 0x541d) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000100)={0x6, 0x10000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) fcntl$getflags(r2, 0x409) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000000c0)=0x9) socket$inet_udplite(0x2, 0x2, 0x88) 04:43:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) r1 = gettid() gettid() r2 = fcntl$dupfd(r0, 0x406, r0) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x44, 0x85, 0x81, 0x7, 0x0, 0x6, 0x1010, 0x7, 0x2, 0x7, 0x80000001, 0x1, 0x81, 0x0, 0xffffffffffffcad7, 0x7ff, 0x100000001, 0xff, 0x7fff, 0x3, 0x5, 0x8e, 0x4, 0x1, 0x8000, 0x7fff, 0xfff, 0xe171, 0x93, 0x0, 0x8, 0x6, 0x100000001, 0x5, 0x56e4, 0x7ff, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x9}, 0x2840, 0x5, 0x2, 0x2, 0x8001, 0x0, 0x4}, r1, 0x3, r2, 0x9) clone(0x20000000, &(0x7f0000000080), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080)) socket$inet6(0xa, 0x0, 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, &(0x7f00000012c0)) recvmmsg(r0, &(0x7f0000009140)=[{{&(0x7f00000012c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000001400)=""/220, 0xdc}, {&(0x7f0000001500)=""/249, 0xf9}, {&(0x7f0000001600)=""/239, 0xef}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/136, 0x88}, {&(0x7f00000027c0)=""/227, 0xe3}, {&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f0000001340)=""/51, 0x33}, {&(0x7f0000001380)=""/14, 0xe}, {&(0x7f00000038c0)=""/252, 0xfc}], 0xa, &(0x7f0000003a80)=""/59, 0x3b, 0xc09f}, 0x164}, {{&(0x7f0000003ac0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003b40)=""/114, 0x72}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/230, 0xe6}], 0x3, &(0x7f0000004d00)=""/101, 0x65, 0x1c2d}, 0x4}, {{&(0x7f0000004d80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004e00)=""/36, 0x24}, {&(0x7f0000004e40)=""/202, 0xca}, {&(0x7f0000004f40)=""/3, 0x3}, {&(0x7f0000004f80)=""/170, 0xaa}, {&(0x7f0000005040)=""/152, 0x98}, {&(0x7f0000005100)=""/72, 0x48}, {&(0x7f0000005180)=""/125, 0x7d}, {&(0x7f0000005200)=""/189, 0xbd}], 0x8, &(0x7f0000005340)=""/247, 0xf7, 0xb89}, 0xffffffffffff4251}, {{&(0x7f0000005440)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000006780)=[{&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/221, 0xdd}, {&(0x7f00000065c0)=""/200, 0xc8}, {&(0x7f00000066c0)=""/182, 0xb6}], 0x4, &(0x7f00000067c0)=""/132, 0x84, 0xfffffffffffff801}, 0x2}, {{&(0x7f0000006880)=@ipx, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006900)=""/115, 0x73}, {&(0x7f0000006980)}, {&(0x7f00000069c0)=""/250, 0xfa}, {&(0x7f0000006ac0)=""/255, 0xff}, {&(0x7f0000006bc0)=""/217, 0xd9}, {&(0x7f0000006cc0)=""/140, 0x8c}, {&(0x7f0000006d80)=""/194, 0xc2}, {&(0x7f0000006e80)=""/177, 0xb1}], 0x8, &(0x7f0000006fc0)=""/222, 0xde, 0x100}, 0x7}, {{0x0, 0x0, &(0x7f0000008640)=[{&(0x7f00000070c0)=""/178, 0xb2}, {&(0x7f0000007180)=""/20, 0x14}, {&(0x7f00000071c0)=""/204, 0xcc}, {&(0x7f00000072c0)=""/124, 0x7c}, {&(0x7f0000007340)=""/128, 0x80}, {&(0x7f00000073c0)=""/173, 0xad}, {&(0x7f0000007480)=""/244, 0xf4}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/94, 0x5e}, {&(0x7f0000008600)=""/12, 0xc}], 0xa, &(0x7f0000008700)=""/173, 0xad, 0x4}, 0x1}, {{&(0x7f00000087c0)=@in6, 0x80, &(0x7f0000008940)=[{&(0x7f0000008840)=""/213, 0xd5}], 0x1, 0x0, 0x0, 0x7f}, 0x100000000}, {{&(0x7f0000008980)=@alg, 0x80, &(0x7f0000008d80)=[{&(0x7f0000008a00)=""/101, 0x65}, {&(0x7f0000008a80)=""/232, 0xe8}, {&(0x7f0000008b80)=""/33, 0x21}, {&(0x7f0000008bc0)=""/154, 0x9a}, {&(0x7f0000008c80)=""/246, 0xf6}], 0x5, &(0x7f0000008e00)=""/243, 0xf3, 0x1}}, {{&(0x7f0000008f00)=@rc, 0x80, &(0x7f0000008fc0)=[{&(0x7f0000008f80)}], 0x1, &(0x7f0000009000)=""/12, 0xc, 0x5}, 0x6}, {{&(0x7f0000009040)=@sco, 0x80, &(0x7f0000009100)=[{&(0x7f00000090c0)=""/28, 0x1c}], 0x1, 0x0, 0x0, 0x1f}, 0x2}], 0xa, 0x40, &(0x7f00000093c0)) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) getdents64(r3, &(0x7f00000002c0)=""/4096, 0x1000) wait4(0x0, &(0x7f0000000100), 0x40000000, &(0x7f00000001c0)) 04:43:12 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0xfffffffffffffeb3) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b80)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xe8) quotactl(0x9f, &(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000400)="9c82378e8570182732e4895a9e32222212f1bd056ba44f1c641b9890ba1967d7d865b6eca476b126ff48fe0bb1ce30a7f075d23b452b50a6181411a821cd4edbe96988ad929f9f4ea2d637bae4a445a7b342462c96ae1385634af2a07634b6d22e50aec78d6818e00c372cfbbe8eb25247d8b1f027a7ce003adbbf3a02b31efc85") r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='./file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000004c0)="72616d667300372e2163920c7bcc421ba118f455ed470700b2ef61ae54133bba647fd9caf2b53f7be2ac0ef3d12b5b5ee2a5ac2f918bbc1b1f4af7ce491143eb61082816504692bd0030872c16a66cc163bc1e9336f1f9e8018108bdc0db140732f1861360cee13d7295582fab5f9e3f9096276a0d0566ae249a64d76f91092021ba1c468e05c5ce5493b9dbdef8", 0x40000000000000, &(0x7f0000000580)="887ef97f42d58c0c45af2b1268804f7b1d116f59d91dab441c322639d42db5949b62ae80fdd6b9f72647fadd0d9456b6ae92fae051e0876039282b3b8fea3810103f3c1117c319144dfd18aa38a11c855719c8787300d9c6aa0619ba9f58f5e7a225ee8043ef7f6f03bf754c622c08bed99ad495ec48bc53f09a2f533938367fa7672404be6ba67f7f6fb20b3264c1") mount(&(0x7f0000377ff8)='.', &(0x7f0000000280)='./file1\x00', &(0x7f0000000180)='mslos\x00', 0x5010, &(0x7f0000000380)="8f7260a5884bfebd7c515c8d88adf7d408bb67bd766f9da3a31a288fbf813a61755e1ee3c40464e66936c05afefac9087df8e7d2d48d1b367a2a128e652dfe300cd668b4981497ad743b") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x80000002) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780)=0x8000000000000, 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000300)=[{0x6, 0x4000000, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) setpriority(0x0, 0x0, 0xffe) unshare(0x8000000) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) fstatfs(r3, &(0x7f0000000640)=""/34) mq_timedreceive(r4, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedsend(r4, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x28e) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000780)=""/228, &(0x7f0000000880)=0xe4) write$binfmt_elf64(r0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x418) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcd9) [ 415.023465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 04:43:12 executing program 6: unshare(0x8000400) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x800000, &(0x7f0000000100)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000240)=@random={'os2.', '\x00'}) 04:43:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80}) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x8) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) setsockopt$inet_opts(r0, 0x0, 0x31, &(0x7f0000000000), 0x0) [ 415.235084] FAULT_FLAG_ALLOW_RETRY missing 30 [ 415.239970] CPU: 1 PID: 26971 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 415.247678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.257033] ffff8801d7a87610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 415.265113] ffff8801d86fad80 ffff8801d7a877e0 0000000000000000 ffff8801d7a87808 [ 415.273179] ffffffff81cbab1b 00000000000067c2 ffff88019fc22130 ffff8801d86fae8c [ 415.281243] Call Trace: 04:43:12 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000002500)='net/protocols\x00') ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000000c0)=0x1) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000080)={0x2, 0x1, 0xfffffffffffffe61, 0x590, 0x62b, 0x1}) readv(r2, &(0x7f0000002480)=[{&(0x7f0000000280)=""/188, 0xbc}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x2, {0x2, 0x3, 0x5}, 0x0, r3, r4, 0x6, 0x5, 0x9, 0x0, 0x7ff, 0x5, 0x2, 0x3ff, 0x2, 0x100000000, 0x10001, 0xffffffffffff0001, 0x1000, 0x200, 0x2d}}, 0xa0) [ 415.283828] [] dump_stack+0xc1/0x128 [ 415.289196] [] handle_userfault.cold.18+0x3e/0x51 [ 415.295686] [] ? debug_check_no_locks_freed+0x210/0x210 [ 415.302697] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 415.309113] [] ? check_preemption_disabled+0x3b/0x170 [ 415.315951] [] ? check_preemption_disabled+0x3b/0x170 [ 415.322789] [] ? handle_mm_fault+0x1267/0x28e0 [ 415.329009] [] ? handle_mm_fault+0x220f/0x28e0 [ 415.335233] [] handle_mm_fault+0x221d/0x28e0 [ 415.341290] [] ? vm_insert_mixed+0x200/0x200 [ 415.347352] [] ? __lock_is_held+0xa2/0xf0 [ 415.353132] [] __do_page_fault+0x5af/0xd50 [ 415.358995] [] ? mm_fault_error+0x2c0/0x2c0 [ 415.364945] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 415.371601] [] do_page_fault+0x27/0x30 [ 415.377115] [] page_fault+0x28/0x30 [ 415.382370] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 415.389193] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 415.395667] [] ? str_to_user+0xa0/0xa0 [ 415.401185] [] ? __lock_acquire+0x654/0x4070 [ 415.407222] [] ? exit_robust_list+0x220/0x220 [ 415.413360] [] evdev_ioctl+0x27/0x30 [ 415.418700] [] ? evdev_ioctl_compat+0x30/0x30 [ 415.424821] [] do_vfs_ioctl+0x1ac/0x11a0 [ 415.430508] [] ? ioctl_preallocate+0x220/0x220 [ 415.436719] [] ? selinux_capable+0x40/0x40 [ 415.442590] [] ? __fget+0x20a/0x3b0 [ 415.447852] [] ? __fget+0x231/0x3b0 [ 415.453107] [] ? __fget+0x47/0x3b0 [ 415.458276] [] ? security_file_ioctl+0x8f/0xc0 [ 415.464489] [] SyS_ioctl+0x8f/0xc0 [ 415.469655] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 415.475606] [] do_syscall_64+0x1a6/0x490 [ 415.481304] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 415.505362] blk_update_request: 120 callbacks suppressed [ 415.505371] blk_update_request: I/O error, dev loop0, sector 776 [ 415.517041] blk_update_request: I/O error, dev loop0, sector 1031 [ 415.523218] blk_update_request: I/O error, dev loop0, sector 0 [ 415.523225] buffer_io_error: 120 callbacks suppressed 04:43:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0xa) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f00000000c0)={0x2000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cgroup}system@{em1^)\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x20000000000001, 0x31, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000000), 0x8) [ 415.523231] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 415.523259] blk_update_request: I/O error, dev loop0, sector 8 [ 415.523281] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 415.523297] blk_update_request: I/O error, dev loop0, sector 16 [ 415.523303] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 415.523318] blk_update_request: I/O error, dev loop0, sector 24 [ 415.523324] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 415.523339] blk_update_request: I/O error, dev loop0, sector 32 [ 415.523346] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 415.523361] blk_update_request: I/O error, dev loop0, sector 40 [ 415.523366] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 415.523381] blk_update_request: I/O error, dev loop0, sector 48 [ 415.523386] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 415.523400] blk_update_request: I/O error, dev loop0, sector 56 [ 415.523405] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 415.523420] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 415.523435] Buffer I/O error on dev loop0, logical block 9, lost async page write 04:43:13 executing program 6: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mq_unlink(&(0x7f00000008c0)='\x00') mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x80010, r0, 0x0) 04:43:13 executing program 2: mmap(&(0x7f0000013000/0x2000)=nil, 0x2000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:13 executing program 7: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x3) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400, 0x0) recvmmsg(r1, &(0x7f00000068c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/114, 0x72}], 0x1, &(0x7f0000000240)=""/215, 0xd7, 0x2}, 0x10001}, {{&(0x7f0000000340)=@sco, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/239, 0xef}], 0x1, &(0x7f0000000500)=""/218, 0xda, 0x4}, 0x5}, {{&(0x7f0000000600)=@generic, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/40, 0x28}, {&(0x7f00000006c0)=""/149, 0x95}], 0x2, &(0x7f00000007c0), 0x0, 0x100000001}, 0xc745}, {{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000000880)=""/75, 0x4b}, {&(0x7f0000000900)=""/91, 0x5b}, {&(0x7f0000000980)=""/181, 0xb5}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/236, 0xec}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/160, 0xa0}], 0x9, 0x0, 0x0, 0x7}, 0x4}, {{&(0x7f0000003d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003d80)=""/83, 0x53}, {&(0x7f0000003e00)=""/219, 0xdb}, {&(0x7f0000003f00)=""/246, 0xf6}], 0x3, &(0x7f0000004040)=""/245, 0xf5, 0x400}, 0x3ff}, {{&(0x7f0000004140)=@nfc, 0x80, &(0x7f00000053c0)=[{&(0x7f00000041c0)=""/47, 0x2f}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/89, 0x59}, {&(0x7f0000005280)=""/44, 0x2c}, {&(0x7f00000052c0)=""/196, 0xc4}], 0x5, &(0x7f0000005440)=""/4096, 0x1000, 0x1000}, 0x1}, {{&(0x7f0000006440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006840)=[{&(0x7f00000064c0)=""/227, 0xe3}, {&(0x7f00000065c0)=""/163, 0xa3}, {&(0x7f0000006680)=""/211, 0xd3}, {&(0x7f0000006780)=""/145, 0x91}], 0x4, &(0x7f0000006880)=""/21, 0x15, 0x8}, 0x44653345}], 0x7, 0x1, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x440, 0x0) 04:43:13 executing program 1: syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000002640)=[{&(0x7f0000000200)="f66b84aedc4fb9298c18fec6d987b87933a8857257127e49a1069abec9c2ad9b5380d8e028f211fb00007d7b0d077d9020f8919fd1b889d9ccedd9e792641d85f2abe56ea632dbf51efc890c8065ab1cf13ba95ba9e6b056dfff584266948a713cfd12920b09545859efa1661939fbf9cad19ff8fc603fbab6097b79f0d340c723ce7616b05307c4c75eab7041e3659242f6c2b4dcfe338a51102a94ba5a7d80f0414e65b78292e9ed522894e0d1a2ddf1ae165dec33fed1bcc69fc42d73b43bc10df24487092576e1f922b3ee670410cb23a2f35e3eecb409f975", 0xdb, 0x100}, {&(0x7f0000000300)="120fe62914b27447a600370d2fb654dfc816f2e9c48022d67dfdcaaf99441e65d79b1c45b8fec89167ef6582d517afd30a5be527e314edc86aab61fabc425c8fa250bcdae4aeabe1", 0x48, 0x5}, {&(0x7f0000000440)="c8d85e72d56471208bca017e4eb2c128b1413a1cbf7664e3c4c08ab34c0037fc8b2793d3f3f66deec1be6c98f21d3143cf9271785f986cdbfdc337cca9fc72d52862245b46bae20df483154419def662caba79f38939026968e90d58c9c2d6a26889cd1cf35d4d962111d28567b0680e5e77a462aaf350c05e6e7ea12fb22a8e19c8f52f3ed0b5ab9aa3438b58a776e9214ab220c2dc1460803dc0bfc5253c321a73822cc82b1b11f1ef715ce2da61b50bde81b0d1a092250fceb048ec62061369418bb4efaf3799f09025b14c1152a3243d84677a442bdf13b20b6165a9c5b3e1d378", 0xe3, 0x4}, {&(0x7f0000000180)="68467d04fedc23087c46f7c35892e890d1", 0x11, 0x7}, {&(0x7f0000000540)="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", 0x1000, 0x6}, {&(0x7f0000001540)="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", 0x1000, 0x4}, {&(0x7f0000002700)="d17fe03a27475e723871667438f2fa07cd72a0d08a30b189a96f68edd40ab2db0e404051876922c87b66a2c2061e2bb308433998416364a92edef8858badb29d862d4e3b252eaeb4c002376ab4b2df3c60560148a9af1ee6e8bd9571fdf8674ad99ad39b42575215e349ecd143289e4d03553545dab675487f5eb8b9a8418ffe678494f6590ecafe7d63f02e0b112000458d368b1ac980fc0576d05c9b2f02fcad223ec9beba449bc2ff8dfaced2f6bf3d3ab84955abadc0f0afa5d6da9a6042c06f718b0da21fde216febf2ae15e5dce351", 0xd2, 0x20}], 0x0, &(0x7f00000001c0)={[{@mode={'mode'}}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, &(0x7f00000001c0)) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000002600)={0x8a, 0x2, 0x1cbe9810}) syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x3, &(0x7f0000002880)=[{&(0x7f0000002540)="aa5c5061d43174ff74952c815da2f58531cc9acadbf6a4365b72ede53e8f500992b2abfef1d1594528602fd9efff53d0abb3afd1fafe5629c9bead1f3db4b92d064ee17c75c37f6e422cd6eacec360f88ed24c6e213ab92b4c10f4d1587379d88acec58920707a0bad0d9585db5b555176d38485e3913af7747dd122bb395e373ccc259476edc15fa747e46583f17844ba073d94", 0x94, 0x2}, {&(0x7f0000000380)="fa590b4d92a322fdc6", 0x9, 0x6}, {&(0x7f0000002800)="f448841a7ab225fb087894f61f09bc5749b9ecd4c0008144a092842bbd315323177c8e9e9d4567ebd10732cbd285387108cbc06fdde5d840cbd7fe947ea3f46765e90302a68e7e63bc00902a4458fe3e0eee06ae41793dcb9896c6e8b7c58d", 0x5f, 0x5}], 0x1000000, &(0x7f00000003c0)={[{@dmode={'dmode', 0x3d, 0xd}}, {@nojoliet='nojoliet'}]}) 04:43:13 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1e) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x88) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000040)=""/98) ioctl$TIOCEXCL(r0, 0x540c) madvise(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1) 04:43:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000140)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) clone(0x70024000, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000240)) chmod(&(0x7f00000000c0)='./file0\x00', 0x51) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f9d8b6d6f64653d30303030303030303030080030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 04:43:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f76") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:13 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000011000/0x2000)=nil, 0x2000}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) ioctl$VT_RELDISP(r1, 0x5605) 04:43:13 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f00000000c0)=@updsa={0x148, 0x1a, 0x5, 0x0, 0x0, {{@in6=@loopback, @in6}, {@in6=@remote, 0x0, 0x33}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_auth_trunc={0x4c, 0x14, {{'crc32c-intel\x00'}}}]}, 0x148}}, 0x0) recvmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000000480)=""/35, 0x23}, {&(0x7f00000004c0)=""/93, 0x5d}, {&(0x7f0000000540)=""/118, 0x76}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x7f}, 0x100000001}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/164, 0xa4}, {&(0x7f0000002700)=""/214, 0xd6}, {&(0x7f0000002800)=""/114, 0x72}], 0x4, &(0x7f00000028c0)=""/79, 0x4f}, 0xfffffffffffffffb}], 0x2, 0x10000, &(0x7f00000029c0)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002a00)={@in6={{0xa, 0x4e22, 0x6, @ipv4={[], [], @rand_addr=0x65fb}, 0x7fffffff}}, 0x27d, 0x4, 0x9, "fefb8113f1687865790dd02f4201bd27ee69985428101c4b1c0a065f093ad5428ca9a3fdc67ecac03b1acb47f58e8434341f81e0255da7b37723e8f7cc0d17e4abaf609a1c773be6cf9bff8ff5bd59b0"}, 0xd8) 04:43:13 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000200)=@bridge_newneigh={0x60, 0x1c, 0x0, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, r1, 0x8, 0x80}, [@NDA_MASTER={0x8, 0x9, 0x7}, @NDA_DST_MAC={0xc, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, @NDA_MASTER={0x8, 0x9, 0x3}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7fff}, @NDA_VLAN={0x8, 0x5, 0x3}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_VLAN={0x8, 0x5, 0x1}, @NDA_PROBES={0x8, 0x4, 0x6e4c}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001100030800ffea000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000140003007663616e300000000000000000000000"], 0x34}}, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e21, 0x2, @remote, 0x1}, {0xa, 0x4e24, 0x200, @remote, 0x1}, 0x7ff, [0x2, 0xffffffff, 0x1, 0x0, 0x800, 0x2, 0x0, 0x1000]}, 0x5c) [ 415.855793] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 415.872224] FAULT_FLAG_ALLOW_RETRY missing 30 [ 415.876805] FAULT_FLAG_ALLOW_RETRY missing 30 [ 415.876813] CPU: 1 PID: 27026 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 415.876817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.876826] ffff8801cb6af610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 415.876833] ffff8801d86fa780 ffff8801cb6af7e0 0000000000000000 ffff8801cb6af808 [ 415.876840] ffffffff81cbab1b 00000000000067c2 ffff88019d3bd130 ffff8801d86fa88c [ 415.876842] Call Trace: [ 415.876852] [] dump_stack+0xc1/0x128 [ 415.876858] [] handle_userfault.cold.18+0x3e/0x51 [ 415.876866] [] ? debug_check_no_locks_freed+0x210/0x210 04:43:13 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="370b7026da80dd0d4b1ed89524ec36c0119f61893bbec27e43e141608e8f90f4d5b622735ebbe93c88b19ae52b62cf091702ffdd6c1ff5e7e0823ee8450ac580635111ecea60c767d634718b552467ed83bce8c12b77913eb8857ad0990bd8c2f870ef0b65392fc47fab8a6ecde3cc5330a1acb58c0986", 0x77) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00000b7fe0), 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r2 = syz_open_pts(r1, 0x801) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cifs\x00', 0x10, &(0x7f00000000c0)="24748846d1887e3a43c11a8d0549aa07638adfbba190a9765892f8885fa7f4aa893872e049af88168b7851b1fd63c12ee7548e") r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r4, 0xf08, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff00000000}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x44800) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000089000)) r6 = dup3(r2, r1, 0x0) writev(r6, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 415.876874] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 415.876883] [] ? unwind_next_frame+0x86/0xe0 [ 415.876890] [] ? __save_stack_trace+0x7d/0xf0 [ 415.876898] [] ? handle_mm_fault+0x1267/0x28e0 [ 415.876903] [] ? handle_mm_fault+0x220f/0x28e0 04:43:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x10000, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x0, {0xdf, 0x0, 0x6}}, 0x14) open(&(0x7f0000000140)='./bus\x00', 0x20000, 0x40) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf40e2ce65d65659c2ee55eb581135e7a9ddda660a09"], 0x3e) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) 04:43:13 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80000, 0xa0) write$P9_RSTATFS(r1, &(0x7f00000002c0)={0x43, 0x9, 0x2, {0x7f, 0x9, 0x7, 0xfffffffffffff64e, 0x2, 0xffffffffffff8000, 0x9, 0x43d6, 0xfffffffffffffff9}}, 0x43) read(r0, &(0x7f0000000240)=""/28, 0x27c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000340)) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x8100}, {r0, 0x4100}, {r0, 0x80}, {r0, 0x2}, {r0, 0x1000}, {r0, 0x4004}, {r0, 0x1000}], 0x8, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={0x2}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0xc0305302, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8400, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) [ 415.876907] [] handle_mm_fault+0x221d/0x28e0 04:43:13 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000000040)="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", 0x1000) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001040)='/selinux/status\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f00000011c0)=[{0x81, 0x0, 0x401, 0x7, @tick, {0x1, 0x2}, {0x8000, 0x7}, @ext={0xe2, &(0x7f0000001080)="45987b12719ef016dfcc03e320e5b214bc49141e12bf896dcae77f63764cadb25b344813570c2d071a382c969dba57e373f157a211fd93aaa228c8a75edcf0cb91f408f9870a729902da0e86eb6dbaaee22617ab316afa7c1de03cee1f81bbd67066637b3da6a81fdcfa89d2337b7acb324defafaeb035b7d83f4056f615ece1a6373ab31e50195f8f670eafb9fe9dfab45bc637ff03811578f010a73d7e9fafd73209d10d8994bb639c336c057c2f387968b042a41e2b5315779af4b122e7b4388421238fdc68a3912f56baafcebdcbe767ef8e12db357871a7bb1596e96593ff57"}}, {0x72, 0x7fffffff, 0x80, 0x4, @tick=0x3, {0x80000000}, {0x1, 0x7}, @raw8={"2b76e166b6bab66097d326e0"}}, {0x1, 0x1, 0x0, 0x3, @tick=0x3, {0x2, 0x6}, {0x2, 0x6}, @quote={{0x1, 0x200}, 0x3f, &(0x7f0000001180)={0xffffffffffffff27, 0x8000, 0x100, 0x3, @time, {0x5, 0x6}, {0x7, 0x3d5}, @note={0x6, 0x61, 0x6, 0x9, 0x3}}}}], 0x90) write$P9_RVERSION(r1, &(0x7f0000001280)={0x15, 0x65, 0xffff, 0x3f007839, 0x8, '9P2000.u'}, 0x15) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000012c0)={0x6, 0xc, 0x8, 0x3b, "c9367ea5fd05d3e2a1751ba21ec50c0e529027b71241b916f03b502e53c20b8b"}) ftruncate(r1, 0x401) fgetxattr(r1, &(0x7f0000001300)=@random={'trusted.', 'GPL:^\x00'}, &(0x7f0000001340)=""/206, 0xce) r2 = gettid() r3 = perf_event_open(&(0x7f0000001440)={0x2, 0x70, 0x4, 0xfffffffffffffc01, 0xffffffff, 0xa000000, 0x0, 0x18e4, 0x80f00, 0x9, 0x40, 0x3, 0x6, 0x1, 0x9, 0x1, 0xbc, 0x1f, 0x2, 0x9, 0x5, 0xab, 0x401, 0x7fff, 0x9, 0x10000, 0x9, 0x3, 0x7ff, 0x99be, 0xa1, 0x0, 0x0, 0x100, 0x10001, 0x4, 0xfffffffffffff439, 0x53e1, 0x0, 0xfff, 0x4, @perf_config_ext={0x1, 0xfffffffffffff001}, 0x2040, 0x3, 0x1f, 0x0, 0x8e2, 0x8, 0x10000}, r2, 0x5, r1, 0x8) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000014c0)={0x819, 0x3, 0x6, 0x800, "f24f8b37c604d1d369a8d3835a60ef9eaa27a983bcd89a3dca1e53c25853dc3c"}) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f0000001540)=""/228) inotify_add_watch(r4, &(0x7f0000001640)='./file0\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, r2, 0x203, &(0x7f0000001780)={&(0x7f0000001680)=""/233, 0xe9}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000017c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000001800)={0xffffffff, 0xa84, 0x9, 0x100000001, 0x80000001}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001880)='team\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001940)={'veth0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001980)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000001a80)=0xe8) accept4$packet(r4, &(0x7f0000001ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001b00)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001c80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x3100002}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xe4, r6, 0x600, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0xc8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000001cc0)={0x3f, 0x1, 0x1000}) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000001d00)={0x1, 0x1d, 0xffffffffffffffff, 0x10000, "6fa649b85cb938da6d7092adb6d835c90d1b97ab906c16a1f5d04375fcfb2658"}) pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r10, 0x401054d6, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000001d80)={{0x1, 0x3, 0x0, 0x2, 0x1}, 0x401, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0xffffffffffffffff, 0x7f, 0x4}) ioctl$sock_inet6_udp_SIOCOUTQ(r11, 0x5411, &(0x7f0000001e80)) [ 415.876912] [] ? vm_insert_mixed+0x200/0x200 [ 415.876916] [] ? __lock_is_held+0xa2/0xf0 04:43:13 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x200, @multicast2}}, 0x2, 0x100000000, 0x9, "245b48dd3af68ae78c14732d3a56d81263d363890cc869874cb222e57c36e0e254c3ddcf9828109c3d38e30a19f404a3ee5ff5ecc51f41ec3c7d3a11c70ebeb91b4b4e204880e7df0791ac7bd0d390a1"}, 0xd8) close(r0) fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) sendto$unix(r2, &(0x7f00000001c0)="3cb08f1426f880103bf7aa444bb6edc8937ee6fc72c86d9a020743ca8e0ecd0f4fce153dedbeb618bf83d34552c11d9e60b69f0016a4a677d2a42618b2245fe0def96fccccac2c41ac95253be4e79b607470bba81a096a7feddde418a352847905c29def285a7e004f586a8c14aac30a9dc561eee7dfe10316b8d706379b47c88faf56da8a23a9a7f79ab2b0ceb236a145ff54de7aa71156615d66b97a442df8a7080fc72cd2135fbe7ffeff0fa01a56db60", 0xb2, 0x10, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 04:43:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x10004) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 415.876922] [] __do_page_fault+0x5af/0xd50 [ 415.876927] [] ? mm_fault_error+0x2c0/0x2c0 [ 415.876933] [] ? trace_hardirqs_off_thunk+0x1a/0x1c 04:43:13 executing program 7: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) flock(r0, 0xfffffffffffffffd) flock(r0, 0xffffffffdffffffc) [ 415.876937] [] do_page_fault+0x27/0x30 [ 415.876943] [] page_fault+0x28/0x30 [ 415.876948] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 415.876954] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 415.876958] [] ? str_to_user+0xa0/0xa0 [ 415.876963] [] ? __lock_acquire+0x654/0x4070 [ 415.876968] [] ? exit_robust_list+0x220/0x220 [ 415.876973] [] evdev_ioctl+0x27/0x30 [ 415.876978] [] ? evdev_ioctl_compat+0x30/0x30 [ 415.876983] [] do_vfs_ioctl+0x1ac/0x11a0 [ 415.876987] [] ? ioctl_preallocate+0x220/0x220 [ 415.876993] [] ? selinux_capable+0x40/0x40 [ 415.876997] [] ? __fget+0x20a/0x3b0 [ 415.877000] [] ? __fget+0x231/0x3b0 [ 415.877004] [] ? __fget+0x47/0x3b0 [ 415.877009] [] ? security_file_ioctl+0x8f/0xc0 [ 415.877013] [] SyS_ioctl+0x8f/0xc0 [ 415.877017] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 415.877021] [] do_syscall_64+0x1a6/0x490 [ 415.877026] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 416.000615] ISOFS: Unable to identify CD-ROM format. [ 416.060382] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 416.133528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32986 sclass=netlink_route_socket pig=27071 comm=syz-executor4 [ 416.311202] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000256) [ 416.311206] FAT-fs (loop0): Filesystem has been set read-only [ 416.311298] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000256) [ 416.312495] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000256) [ 416.312585] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000256) [ 416.489839] IPVS: Creating netns size=2536 id=63 [ 416.530204] pktgen: kernel_thread() failed for cpu 1 [ 416.530212] pktgen: Cannot create thread for cpu 1 (-4) [ 416.530886] IPVS: Creating netns size=2536 id=64 [ 416.564558] CPU: 0 PID: 27034 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 416.572261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.581610] ffff88019ea57950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 416.589666] ffff8801d86fa780 ffff88019ea57b20 0000000000000000 ffff88019ea57b48 [ 416.597670] ffffffff81cbab1b 0000000000000dca ffff8801d9262108 ffff8801d86fa88c [ 416.605693] Call Trace: [ 416.608260] [] dump_stack+0xc1/0x128 [ 416.613606] [] handle_userfault.cold.18+0x3e/0x51 [ 416.620085] [] ? debug_check_no_locks_freed+0x210/0x210 [ 416.627082] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 416.633471] [] ? handle_mm_fault+0x1267/0x28e0 [ 416.639680] [] ? handle_mm_fault+0x220f/0x28e0 [ 416.645894] [] handle_mm_fault+0x221d/0x28e0 [ 416.651935] [] ? vm_insert_mixed+0x200/0x200 [ 416.657983] [] __do_page_fault+0x5af/0xd50 [ 416.664376] [] ? mm_fault_error+0x2c0/0x2c0 [ 416.670346] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.677009] [] do_page_fault+0x27/0x30 [ 416.682541] [] page_fault+0x28/0x30 [ 416.687804] [] ? do_sigaltstack+0x267/0x6f0 [ 416.693761] [] ? do_sigaltstack+0x271/0x6f0 [ 416.699711] [] ? security_file_ioctl+0x8f/0xc0 [ 416.705930] [] SyS_sigaltstack+0x6c/0x90 [ 416.711620] [] ? do_sigaction+0x8c0/0x8c0 [ 416.717405] [] do_syscall_64+0x1a6/0x490 [ 416.723103] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:14 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write(r1, &(0x7f0000000380)="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", 0x1000) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r2) write$P9_RRENAME(r0, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) 04:43:14 executing program 6: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000080)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f0000000100)=0x78) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000140)=0x4) readv(r2, &(0x7f0000001740)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f00000012c0)=""/238, 0xee}, {&(0x7f00000013c0)=""/47, 0x2f}, {&(0x7f0000001400)=""/1, 0x1}, {&(0x7f0000001440)=""/161, 0xa1}, {&(0x7f0000001500)=""/193, 0xc1}, {&(0x7f0000001600)=""/55, 0x37}, {&(0x7f0000001640)=""/247, 0xf7}], 0x8) ioctl$TCXONC(r2, 0x540a, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f00000018c0)=0xe8) ioprio_set$uid(0x3, r3, 0x51) 04:43:14 executing program 1: accept4(0xffffffffffffffff, &(0x7f0000000200)=@in, &(0x7f00000005c0)=0x80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x1) r0 = accept(0xffffffffffffff9c, &(0x7f0000000300)=@ethernet={0x0, @link_local}, &(0x7f0000000100)=0x80) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0\x00', 0xc) syz_read_part_table(0xfffffffffffffffe, 0x0, &(0x7f0000000200)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) readlinkat(r2, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)=""/158, 0x9e) accept$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs, &(0x7f00000009c0)=0x6e) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000003c0)=@generic) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8a000}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="8c0000204b0d640d9a5a368e3485aa279842a9df02000000e8e46785e7292c4ebf692320ad4ed204a6508d6eeea190408bc177d56bd2a4db172528031a56f49f6cd16f451e25b273d61f3977f36f1294e08e15e7856d7c839847c17784188fc45ab47e8d4727d3b7691f3f6291255eb554bf6d68241bb61dec28c8ecb1012b5d99a8a3f7deb5f804cc3e809486f95ac5238335a73ae4f5067df71fd23dfc50e6adf5133b2a"], 0x1}, 0x1, 0x0, 0x0, 0x8800}, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x181080, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)) 04:43:14 executing program 0: madvise(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x1) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x30000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 04:43:14 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x375, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x24020400) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) getsockname(r1, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r2 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2, 0x1) sendfile(r2, r1, 0x0, 0x71f) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001a40)='bcsf0\x00') sendmsg$nl_route_sched(r1, &(0x7f0000001a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x30400}, 0xc, &(0x7f00000019c0)={&(0x7f0000000380)=@newtaction={0x1608, 0x30, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x9}, [{0x144, 0x1, @m_ife={0x140, 0xf, {{0x8, 0x1, 'ife\x00'}, {0x8c, 0x2, [@TCA_IFE_DMAC={0xc, 0x3, @local}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_TCINDEX={0x8, 0x5, @val=0x2}, @IFE_META_TCINDEX={0x8, 0x5, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}]}, @TCA_IFE_SMAC={0xc, 0x4, @remote}, @TCA_IFE_DMAC={0xc, 0x3, @dev={[], 0x16}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x8, 0x5, @val=0x1ad9f27}]}, @TCA_IFE_SMAC={0xc, 0x4, @remote}, @TCA_IFE_SMAC={0xc, 0x4, @dev={[], 0x1d}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xfffffffffffffff9}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0xa4, 0x6, "624041f4efafaf6ebf42f66cc3a8c94a8e83c2c3869e2d8ba6ed332af7472144ccbb2099e0c594eeacb2995d14f385cdae25286b4f67c50c65b6cef1385a70c67b4716b88e93fc8515aff99161f85fe7596d64fddea1d11e782b09d5978a78ba1292b11c78946ef66e55f270b416992a5ee51f063a1ad850470c5f437856aa56335c1042f522633a1de3104a1e566f73bbfc38a65b7b9327f6ae05e449dd5e"}}}}, {0x1044, 0x1, @m_nat={0x1040, 0x13, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x4, 0x2, 0x4, 0x8100000000000}, @dev={0xac, 0x14, 0x14, 0xd}, @empty, 0xffffff00, 0x1}}}, {0x1004, 0x6, "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"}}}}, {0x64, 0x1, @m_ipt={0x60, 0x14, {{0x8, 0x1, 'ipt\x00'}, {0x4c, 0x2, [@TCA_IPT_TABLE={0x14, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x14, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}}}}, {0x100, 0x1, @m_ipt={0xfc, 0x14, {{0x8, 0x1, 'ipt\x00'}, {0x1c, 0x2, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0xd0, 0x6, "9ec0cb823412b477960b544fe4e8510d5a9d6cec4513f2cfbca23ea64bb69ee9ad9a9feeab20ffedbd4a36a094767807f4e49a7c522f8a02f04e2c84e7dadaa900c7824bbbe26ce1657187e274c0f123acb362465f689babd887b43570f359e3ca87ef636d025c1e27e71422e332f6633a9cc7fdd65ae66aa633a21daef77562a63bbb3c3859bdb93d631fd95e977fad6f8ab1298f9a071016c9c0de6db3e8f6902e5d2a31e83a69d62d2ae1eb4920f140ad01ec8aff6f821c82b517d57b101c4c401a29abec3133fa03fed6"}}}}, {0x15c, 0x1, @m_skbedit={0x158, 0xd, {{0xc, 0x1, 'skbedit\x00'}, {0x5c, 0x2, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x101, 0x78, 0x8, 0x8, 0x79}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x2, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0x13}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x7, 0x6, 0x1}}]}, {0xe8, 0x6, "14b50dc487cac3d487262bf4bbba474fb8ad74b3121351a6b11a36bd583cd1c4ebff9b98dd57a78d696d7c4840181cdf877dc876aab89643d8e9e8ec126ee7607131b93fc76b26218b34f63e9c88db9996d86f873c3c648653e1218d0151f0fd38502b9e57e467f75080076f25c867be4fe0cd8d7ce73d08c07f3291b10223d19c91f2b7960ab89006e0b0caf990aa22d1f767c99e3b895cf539e469b64cb8af7d508645caa84f0f6e4ec21c105aced132156166884d418186b2b01f41fb2bc701992490a5ae571536d8b9364462fc1d5160429489e1c027e6291fd92e3002953374da76"}}}}, {0x70, 0x1, @m_vlan={0x6c, 0x1d, {{0xc, 0x1, 'vlan\x00'}, {0x14, 0x2, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x8, 0x3, 0x78f}]}, {0x44, 0x6, "8818f9fb362ff1148f5c4bb6358b0b3eb76f1202446ea27fea89c73e07ae81079865a69e61a8ffc2bbebb583ab4ddd6c8af6fc9d471f114f107462fbdc"}}}}, {0x13c, 0x1, @m_tunnel_key={0x138, 0xd, {{0x10, 0x1, 'tunnel_key\x00'}, {0x20, 0x2, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x1, 0x101, 0x7d}, 0x2}}]}, {0x100, 0x6, "8a2d8a900b3abbfc3702187349f3339880bc56eed9c440f892d27cc905ae486938556ef13d30728c757c8a133409934ed5bef2ccb3ea13a72d342c721fa8514d34456e2b79a43059cc5d8873ebb6a944ff080b6fe9cce642c97fe580fac1b069769f160160f3659815d22a89f232825ff97bdc81f62122da288410fe0adc5fb216a563763fbca42ff67b711cbede600caa795ce32019c4e4e5dee48fb269124da61d962ae23b99e7ec34eb81c680210ffd62ca9ce503573b11ceb3ccd3d3293484946e9f13dbf615d88444098c7d7d4e31af8aa4a5241cf95503474780e57be27014c6b58618d5284bfa2c0b2dc0d18e97e159345bdb9fb179f7"}}}}]}, 0x1608}, 0x1, 0x0, 0x0, 0x8000}, 0x1) read(r0, &(0x7f0000001a80)=""/186, 0x8b) ppoll(&(0x7f0000000280)=[{r1, 0x200}, {r2, 0x121}, {r0, 0x1000}, {r0, 0x2000}, {r1}, {r0, 0x9400}], 0x6, &(0x7f00000002c0), &(0x7f0000000300)={0x8}, 0x8) flistxattr(r2, &(0x7f0000001b40)=""/207, 0xcf) 04:43:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:14 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) fcntl$setstatus(r1, 0x4, 0x800042c05) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/127) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) bind(r0, &(0x7f0000f70000)=@un=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000c8e000)=@file={0x1, './file0\x00'}, 0xa) close(r0) 04:43:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x3, 0x57b8d73c, 0x100000001, 'queue0\x00', 0x1}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000540)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x3, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000240)) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000440)=""/246) dup3(r2, r1, 0x0) 04:43:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x8) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000500)='fuseblk\x00', 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}]}}) write$P9_RMKNOD(r0, &(0x7f0000000300)={0x14, 0x13, 0x0, {0x20, 0x0, 0x7}}, 0xffffffffffffffd0) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='\x00'], &(0x7f00000002c0)=[&(0x7f0000000280)='@\'\\loem0^\x00'], 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000400)='./file0/file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000440)='./file1\x00', &(0x7f0000000840)='./file0/file0/file0\x00') ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000880)={0x101, 0x40}) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='fuse\x00', 0x1014, &(0x7f0000000780)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}]}}) llistxattr(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000380)=""/14, 0xe) 04:43:14 executing program 6: capset(&(0x7f0000000000), &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73782e6c6f766d6e6574302d26007bef24667c115d3997438c7dd4cdb916e45ea8e1a7832f206c5d5e01f7a0e249d34f9df275213ee5f3f317558c1f8a73ff0cb219c314a2893b81e38756236b8d1b72ed1db90dcb9d2d87f3bc6e4b95f12942ff9e1419dc40dbd5a4cb7939067f"], &(0x7f0000000180)='\x00', 0x1, 0x0) 04:43:14 executing program 7: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r1, 0x40001) getsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000280)=""/4096, &(0x7f0000000180)=0x1000) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) sendfile(r0, r1, &(0x7f0000000240), 0x100000000002) memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) [ 416.941562] FAULT_FLAG_ALLOW_RETRY missing 30 [ 416.941609] FAULT_FLAG_ALLOW_RETRY missing 30 [ 416.941620] CPU: 1 PID: 27138 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 416.941635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:43:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc80700145f8f764070") getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000001fc0)={@multicast1, @broadcast, 0x0}, &(0x7f0000002000)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002040)={@dev={0xfe, 0x80, [], 0x1a}, 0x9, r1}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x9, @ipv4}, {0xa, 0x4e23, 0x9, @mcast2, 0x8}, 0xfff, [0xe9c0, 0xffff, 0x2d, 0x2, 0x5, 0x9, 0x401, 0x9]}, 0x5c) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b4d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000001c0)=0x11, 0x4) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000180)=0x1000) socket$inet_tcp(0x2, 0x1, 0x0) 04:43:14 executing program 6: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/209, &(0x7f0000000300)=0xd1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c6729e4ed7489574e97793a3bf402000000821a2304", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000002000)={0x90, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x69e}}}, 0x90) read$FUSE(r1, &(0x7f0000001000), 0x1000) stat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000480)) write$FUSE_ENTRY(r1, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000540)=0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f00000005c0)=0x10) [ 416.941649] ffff8801ba3df610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 416.941660] ffff8801d71f3e00 ffff8801ba3df7e0 0000000000000000 ffff8801ba3df808 04:43:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0xe2642) r2 = epoll_create1(0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000040)={{0x5, 0x5}, {0x4, 0x6}, 0x1407, 0x0, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:14 executing program 1: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000788000)=0x6, 0x4) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000017c0)) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000001580)) chroot(&(0x7f0000000200)='./file0\x00') syncfs(r0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e21, @broadcast}, 'team0\x00'}) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='md5sum\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@mcast1, @loopback, @empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) r4 = syz_open_dev$loop(&(0x7f0000003180)='/dev/loop#\x00', 0x400000000, 0x200000000082) r5 = memfd_create(&(0x7f0000000540)="00eb0c432d0174df5f00000000", 0x3) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000280)=0x81) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000480)) writev(r4, &(0x7f0000001680)=[{&(0x7f0000001600)="31d53a52313407154116776e0cacac582bcc061586ba55d9ca0b05803eeba1086cb3b80a3f0b36b1ed8439766d03bcc698bffab4bb2048c82bb9b6d8b6f31f291d971d028e55cd11eafb67b0395ccbcf51a14b96b8c6a43637bb0eff069704f931869e04db", 0x65}], 0x1) sysfs$3(0x3) socketpair(0xa, 0x0, 0x9eb5, &(0x7f0000001700)) sendmmsg(r5, &(0x7f0000001ec0)=[{{&(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @remote, 'team0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001800)="cdc9f69a399d5d2779021682a6aeca1a9ea5547e4a854a4b5931053ca8f249d660c950775567725a1831498b37c673a3f39a9f591b47c08f2be8227d6df943ed3672af464e39241df6b9db4190c722dc85a5401b6230f9570acbe9c1326e90cb32db575ceaae4ed6ed00923883512a5999ad9005bf415be300775244011e62fffe1294e35f6fe334a461be819d6aa999d1824c15abfbaee574ffe1eaf0e01e521d06842df77097ca6c8116b6e444ffcd2affb179755d1f8d5119c203936e81809cef49bf01bde6db8b43d268bf9f4c521aefb4e95f49faf3e80baa895290e513d5278937bfc6a56c71d939ed5c24", 0xee}], 0x1, &(0x7f00000031c0)=ANY=[], 0x0, 0x4090}, 0xfffffffffffeffff}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001a00)="9ab53d24a69a6b87cc2d4b9f5e73fc436fe98876756b264a8f9247adb4b98b7c6edcc406effea0bbdbcaabd31a752f89a498e3999bb5b6867a7ba48bf35895ccfe7f7758079f86e13befa5472363cd095252a9c41ab6d70b73f57b31100dafb304bc2e062ee1e617bdef87e7ea301fa28d2d96b390669ef3b864993f86dea1f668280d7fa8c36c5cb239655486c0a2cd2b8ecb5f768d8f48d65f62bf1d784996748de23e5323a0a1b2eec51b3fc6df1944cb359196ac42b4f9121f115cfee5e1d0049deafb73778ceab2236be6c2e5cfa87c7015e3910610a713ad", 0xdb}], 0x1, &(0x7f0000001b00), 0x0, 0x20000080}, 0x9}], 0x2, 0x80) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000140)="7bef13e836b16084628f42fa3cd4d59fffc01579f3b86c1a065277d5d77930", 0x1f}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000002b00), 0x2000005) 04:43:14 executing program 7: timer_create(0x8, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x77359400}, {0x0, 0xe4c}}, &(0x7f0000000040)) timer_gettime(r0, &(0x7f0000000080)) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='nv\x00', 0x3) [ 416.941671] ffffffff81cbab1b 00000000000067c2 ffff8801a7b55130 ffff8801d71f3f0c [ 416.941673] Call Trace: [ 416.941688] [] dump_stack+0xc1/0x128 [ 416.941698] [] handle_userfault.cold.18+0x3e/0x51 [ 416.941710] [] ? debug_check_no_locks_freed+0x210/0x210 [ 416.941721] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 416.941729] [] ? check_preemption_disabled+0x3b/0x170 [ 416.941737] [] ? check_preemption_disabled+0x3b/0x170 [ 416.941746] [] ? handle_mm_fault+0x1267/0x28e0 [ 416.941753] [] ? handle_mm_fault+0x220f/0x28e0 [ 416.941760] [] handle_mm_fault+0x221d/0x28e0 [ 416.941768] [] ? vm_insert_mixed+0x200/0x200 [ 416.941775] [] ? __lock_is_held+0xa2/0xf0 [ 416.941785] [] __do_page_fault+0x5af/0xd50 [ 416.941793] [] ? mm_fault_error+0x2c0/0x2c0 [ 416.941801] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 416.941809] [] do_page_fault+0x27/0x30 [ 416.941817] [] page_fault+0x28/0x30 [ 416.941826] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 416.941835] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 416.941847] [] ? str_to_user+0xa0/0xa0 [ 416.941854] [] ? __lock_acquire+0x654/0x4070 [ 416.941863] [] ? exit_robust_list+0x220/0x220 [ 416.941871] [] evdev_ioctl+0x27/0x30 [ 416.941879] [] ? evdev_ioctl_compat+0x30/0x30 [ 416.941886] [] do_vfs_ioctl+0x1ac/0x11a0 [ 416.941893] [] ? ioctl_preallocate+0x220/0x220 [ 416.941901] [] ? selinux_capable+0x40/0x40 [ 416.941908] [] ? __fget+0x20a/0x3b0 [ 416.941914] [] ? __fget+0x231/0x3b0 [ 416.941920] [] ? __fget+0x47/0x3b0 [ 416.941928] [] ? security_file_ioctl+0x8f/0xc0 [ 416.941934] [] SyS_ioctl+0x8f/0xc0 [ 416.941941] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 416.941947] [] do_syscall_64+0x1a6/0x490 [ 416.941955] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 417.150454] IPVS: length: 209 != 8 [ 417.154204] IPVS: length: 209 != 8 [ 417.384122] CPU: 0 PID: 27141 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 417.391861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.401215] ffff88019a407950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 417.409266] ffff8801d71f3e00 ffff88019a407b20 0000000000000000 ffff88019a407b48 [ 417.417330] ffffffff81cbab1b 0000000000000dca ffff8801d0096908 ffff8801d71f3f0c [ 417.425383] Call Trace: [ 417.427965] [] dump_stack+0xc1/0x128 [ 417.433318] [] handle_userfault.cold.18+0x3e/0x51 [ 417.439805] [] ? debug_check_no_locks_freed+0x210/0x210 [ 417.446818] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 417.453231] [] ? handle_mm_fault+0x1267/0x28e0 [ 417.459467] [] ? handle_mm_fault+0x220f/0x28e0 [ 417.465685] [] handle_mm_fault+0x221d/0x28e0 [ 417.471723] [] ? vm_insert_mixed+0x200/0x200 [ 417.477760] [] __do_page_fault+0x5af/0xd50 [ 417.483623] [] ? mm_fault_error+0x2c0/0x2c0 [ 417.489574] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.496218] [] do_page_fault+0x27/0x30 [ 417.501734] [] page_fault+0x28/0x30 [ 417.506990] [] ? do_sigaltstack+0x267/0x6f0 [ 417.512940] [] ? do_sigaltstack+0x271/0x6f0 [ 417.518889] [] ? security_file_ioctl+0x8f/0xc0 [ 417.525102] [] SyS_sigaltstack+0x6c/0x90 [ 417.530790] [] ? do_sigaction+0x8c0/0x8c0 [ 417.536565] [] do_syscall_64+0x1a6/0x490 [ 417.542253] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x2) ioctl$TCFLSH(r1, 0x40087101, 0x0) 04:43:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000100)="4ea1ba6f12982d89e13a791746c172c7c0a042f674e88b584c5a749f2b8e3846cd770ca55dcece3f4bf244639831020cd66d6c95460e4a3a17699c3bcf93738279c3a9c6645ef31f1dd4e0a21439c3d73f3b64e18e8868846b517ee7c6d56429c0c4e1619932b238acc049179390301e7fbc8e3d1c9888bf20f1b552bb857a8cb55604ffeadbedc451222026f0b3454157ea94eddce99196395abc5d6acc7d5ceebf62a511ac165eca8e0c1373b037a8c1cc8bf0757b2d24a5bebc", 0x1f2, 0x0, &(0x7f0000000200)={0x2, 0x4e23}, 0xfdc2) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x18a3, 0x4) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x101000) ppoll(&(0x7f0000000040)=[{r0, 0xa00a}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f00000000c0), 0x8) 04:43:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:15 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r3 = fcntl$getown(r1, 0x9) fcntl$setown(r0, 0x8, r3) r4 = getegid() write$FUSE_ATTR(r1, &(0x7f0000000200)={0x78, 0x0, 0x4, {0x7, 0x8, 0x0, {0x1, 0x20, 0xe7, 0x80, 0xffffffffffffffe1, 0xcc41, 0x6, 0x6, 0x8, 0x8, 0x7fff, r2, r4, 0x66e, 0x4}}}, 0x78) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_nat_t_type={0x1, 0x18, 0x0, [0x0, 0x0, 0xffffff7f]}]}, 0x18}}, 0x0) 04:43:15 executing program 7: r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000080)="075b5ed7cbd264c14adedc", 0xb) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) nanosleep(&(0x7f0000000380), &(0x7f0000000780)) [ 417.790389] FAULT_FLAG_ALLOW_RETRY missing 30 [ 417.794967] CPU: 0 PID: 27216 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 417.802665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.812008] ffff8801bd907610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 417.820053] ffff8801d86fb200 ffff8801bd9077e0 0000000000000000 ffff8801bd907808 [ 417.828063] ffffffff81cbab1b 00000000000067c2 ffff8801b8a05130 ffff8801d86fb30c [ 417.836063] Call Trace: [ 417.838638] [] dump_stack+0xc1/0x128 [ 417.843987] [] handle_userfault.cold.18+0x3e/0x51 [ 417.850469] [] ? debug_check_no_locks_freed+0x210/0x210 [ 417.857463] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 417.863860] [] ? check_preemption_disabled+0x3b/0x170 [ 417.870687] [] ? check_preemption_disabled+0x3b/0x170 [ 417.877516] [] ? handle_mm_fault+0x1267/0x28e0 [ 417.883735] [] ? handle_mm_fault+0x220f/0x28e0 04:43:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x103080, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r4 = dup3(r1, r0, 0x0) writev(r4, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000080)="37ca7dc6c8dad5a0c6ccf7ffe50a1807e8ef947a2c0f8d14a1a15bf22416a39023b6230bb40d8738f92e42b916194d64a4ca2ded64fa152693aee4df1f5a325ff29ff3547d58549609cb8185ca6fa5f62bd5ba0f3ee5651aae", 0x59) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast1, @multicast1, 0x0, 0x1b4, [@loopback, @rand_addr, @empty, @dev, @local]}, 0x10) 04:43:15 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e21, @rand_addr=0x5}}) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10) 04:43:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0xc) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000000080), 0x4) 04:43:15 executing program 0: socketpair$unix(0x1, 0x40000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r1, r0) getsockopt(r0, 0x0, 0xffffffff, &(0x7f0000000280)=""/11, &(0x7f00000002c0)=0xb) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x4, 0x8c, [], 0x4, &(0x7f0000000080)=[{}, {}, {}, {}], &(0x7f0000000180)=""/140}, &(0x7f0000000240)=0x78) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000140)) [ 417.889948] [] handle_mm_fault+0x221d/0x28e0 [ 417.895990] [] ? vm_insert_mixed+0x200/0x200 [ 417.902053] [] ? __lock_is_held+0xa2/0xf0 [ 417.907843] [] __do_page_fault+0x5af/0xd50 [ 417.913710] [] ? mm_fault_error+0x2c0/0x2c0 [ 417.919661] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 417.926307] [] do_page_fault+0x27/0x30 [ 417.931836] [] page_fault+0x28/0x30 04:43:15 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xf, 0x9) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000440)=0x44) clone(0x0, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000140)) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) 04:43:15 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/96, &(0x7f0000000180)=0x60) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) mmap(&(0x7f00007e8000/0x3000)=nil, 0x3000, 0x3, 0x44013, 0xffffffffffffffff, 0xfffffffffffffffc) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r3 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$TCFLSH(r3, 0x540b, 0xfffffffffffff5d4) ptrace(0x4207, r2) r4 = open(&(0x7f0000000000)='\x00', 0x4000, 0x8) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000080)={0x10001, 0x8000, 0x8, 0x100000000}) sched_setparam(r2, &(0x7f00000001c0)=0x1) tkill(r2, 0x1000000000016) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f00000000c0)=0xd75e) [ 417.937116] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 417.943959] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 417.950459] [] ? str_to_user+0xa0/0xa0 [ 417.956005] [] ? __lock_acquire+0x654/0x4070 [ 417.962073] [] ? exit_robust_list+0x220/0x220 [ 417.968223] [] evdev_ioctl+0x27/0x30 [ 417.973599] [] ? evdev_ioctl_compat+0x30/0x30 [ 417.979747] [] do_vfs_ioctl+0x1ac/0x11a0 04:43:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x10000, 0x0, 0x0, 0x0, 0x1000000000000000, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x5, 0x3f, 0x8000, 0x5bb, 0x7ff, 0x475d, 0x7fff, 0x7ff, 0xac08, 0x80000000}) read(r0, &(0x7f0000000200)=""/144, 0x90) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40200, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) write$selinux_context(r3, &(0x7f00000001c0)='system_u:object_r:public_content_rw_t:s0\x00', 0x29) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000180)) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) accept4$unix(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80000) 04:43:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000007c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) futex(&(0x7f0000000100), 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040), 0x0) poll(&(0x7f00000006c0)=[{r1, 0x40}, {r0, 0x4002}, {0xffffffffffffffff, 0x9000}], 0x3, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000880)=""/148) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @dev, @dev}, &(0x7f0000000200)=0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000940)='self%%md5sum$keyringself{\x00') ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipddp0\x00', r2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) connect$unix(r0, &(0x7f0000000800)=@abs, 0x6e) modify_ldt$write(0x1, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x70, 0x0, 0x5d0733b2, 0x0, 0x1, 0x9}, 0x10) ioctl$TUNSETOWNER(r1, 0x400454cc, 0x0) utime(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000003c0)) futex(&(0x7f0000000280), 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000380), 0x1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000580)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000780)={0x4, 0x9, 0x276, 0x0, 0xffffffffffffff7c}) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000400)={'bpq0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) write$selinux_load(r1, &(0x7f0000000700)={0xf97cff8c, 0x8, 'SE Linux', "f626d3302c3f642e8fbdc08d7f0b19a0e882de90"}, 0x24) openat$keychord(0xffffffffffffff9c, &(0x7f0000000740)='/dev/keychord\x00', 0x4003, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000002c0)=0x63e) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000980)) syncfs(0xffffffffffffffff) [ 417.985469] [] ? ioctl_preallocate+0x220/0x220 [ 417.991720] [] ? selinux_capable+0x40/0x40 [ 417.997608] [] ? __fget+0x20a/0x3b0 [ 418.002888] [] ? __fget+0x231/0x3b0 [ 418.008166] [] ? __fget+0x47/0x3b0 [ 418.013360] [] ? security_file_ioctl+0x8f/0xc0 [ 418.019579] [] SyS_ioctl+0x8f/0xc0 [ 418.024746] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 418.030716] [] do_syscall_64+0x1a6/0x490 04:43:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x1c2) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0), 0x4) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)=""/227, 0x66}], 0x1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xd}, 0x1000}, 0x1c) [ 418.036415] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:15 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r2, &(0x7f0000000180)="984422a16250407aaaeb8e0d777729610ce169deefe3c21f3bdbce4f557b0e4c40501fe8233cf52cc454e1423207cf69d1e9f241cc2dfe53bfd68990524483cba5962c2d361d21050ee91cd96087f0aea36f0c59fe", 0x55, 0x8850, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x2, 0x3}}, 0x80) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f00000002c0)=[{r1}, {r0}], 0x2, 0x80c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='jffs2\x00', 0x201000, &(0x7f00000002c0)) pivot_root(&(0x7f0000001380)='./file0\x00', &(0x7f00000016c0)='./file0\x00') [ 418.125623] IPVS: length: 96 != 8 04:43:15 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x80000000000005, @loopback, 0x3}, 0x3fc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) writev(r0, &(0x7f0000000080)=[{&(0x7f00000033c0)="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", 0x758}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)={'syz0', "a744e7c9edb962542024665f29974bb7b294555d4044f6623b1fd461eae2988ec0661a57218cfae98bdedbcc624a2f62ea05f4adcbcf2b42cc224c5907c35e7e8989ae830a35a50e2383359d845323260db323621bc8377dd0d7876b5a7ca4826a7baef34503e32b1897a676e16f5aa19dab176d409b7ee2ad538ab9bb1329d6fdc8976934c32fa5b4f6b0d5be7f55d82030e9cede87f943e2a8318782bea5e507f31ff993264dd8d1ae33bfd75c7ebfcc764e19509744c68a47bedb435ccc7bfee07df1b8032116a516882333c06a72971826fe542434"}, 0xdb) 04:43:15 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) r3 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000000)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000000000100bfa, 0x0) fallocate(r1, 0x0, 0x0, 0x10001) pwritev(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)='%', 0x1}], 0x1, 0x6400) fcntl$getown(r0, 0x9) ftruncate(r1, 0x7) [ 418.608816] FAULT_FLAG_ALLOW_RETRY missing 30 [ 418.613522] CPU: 0 PID: 27286 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 418.621231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.630589] ffff8801b827f610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 418.638645] ffff8801d86fb380 ffff8801b827f7e0 0000000000000000 ffff8801b827f808 [ 418.646694] ffffffff81cbab1b 00000000000067c2 ffff8801c1ba0930 ffff8801d86fb48c [ 418.654748] Call Trace: [ 418.657333] [] dump_stack+0xc1/0x128 [ 418.662699] [] handle_userfault.cold.18+0x3e/0x51 [ 418.669191] [] ? debug_check_no_locks_freed+0x210/0x210 [ 418.676205] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 418.682615] [] ? unwind_next_frame+0x86/0xe0 [ 418.688676] [] ? __save_stack_trace+0x7d/0xf0 [ 418.694819] [] ? handle_mm_fault+0x1267/0x28e0 [ 418.701035] [] ? handle_mm_fault+0x220f/0x28e0 [ 418.707257] [] handle_mm_fault+0x221d/0x28e0 [ 418.713309] [] ? vm_insert_mixed+0x200/0x200 [ 418.719367] [] ? __lock_is_held+0xa2/0xf0 [ 418.725152] [] __do_page_fault+0x5af/0xd50 [ 418.731035] [] ? mm_fault_error+0x2c0/0x2c0 [ 418.737000] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 418.743656] [] do_page_fault+0x27/0x30 [ 418.749196] [] page_fault+0x28/0x30 [ 418.754467] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 418.761300] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 418.767778] [] ? str_to_user+0xa0/0xa0 [ 418.773308] [] ? __lock_acquire+0x654/0x4070 [ 418.779361] [] ? exit_robust_list+0x220/0x220 [ 418.785495] [] evdev_ioctl+0x27/0x30 [ 418.790852] [] ? evdev_ioctl_compat+0x30/0x30 [ 418.796987] [] do_vfs_ioctl+0x1ac/0x11a0 [ 418.802686] [] ? ioctl_preallocate+0x220/0x220 [ 418.808896] [] ? selinux_capable+0x40/0x40 [ 418.814782] [] ? __fget+0x20a/0x3b0 [ 418.820051] [] ? __fget+0x231/0x3b0 [ 418.825307] [] ? __fget+0x47/0x3b0 [ 418.830483] [] ? security_file_ioctl+0x8f/0xc0 [ 418.836706] [] SyS_ioctl+0x8f/0xc0 [ 418.841877] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 418.847827] [] do_syscall_64+0x1a6/0x490 [ 418.853518] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 418.897262] IPVS: length: 96 != 8 04:43:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f7640") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x229, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup2(r1, r1) write$P9_RATTACH(r2, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x20, 0x2, 0x1}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400200000, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)) 04:43:16 executing program 7: get_thread_area(&(0x7f0000000000)={0xffffffff, 0x20001800, 0x5000, 0xffffffffffffff01, 0x0, 0x1ff, 0x800, 0x6, 0x7f, 0xfffffffffffffff9}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xd8, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffd}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000044}, 0x20044000) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000002c0)={'HL\x00'}, &(0x7f0000000300)=0x1e) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)={0x32, 0x6, 0x0, {0x4, 0x1, 0x9, 0x0, 'vboxnet0,'}}, 0x32) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@dev, @in6=@dev}}, {{@in=@broadcast}}}, &(0x7f00000004c0)=0xe8) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540)='/dev/net/tun\x00', 0x600, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/checkreqprot\x00', 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000005c0), 0x4) accept$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @local}, &(0x7f0000000640)=0x1c) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000680)=""/110) alarm(0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in, @in6=@dev}}, {{@in=@rand_addr}}}, &(0x7f0000000800)=0xe8) fdatasync(r5) finit_module(r4, &(0x7f0000000840)='em0\x00', 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) read$FUSE(r3, &(0x7f0000000880), 0x1000) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000001880)) ioctl$VT_DISALLOCATE(r0, 0x5608) execveat(r0, &(0x7f00000018c0)='./file0\x00', &(0x7f0000001ac0)=[&(0x7f0000001900)="e5776c616e3127706f7369785f61636c5f6163636573736d696d655f747970656370757365742500", &(0x7f0000001940)='/dev/rtc0\x00', &(0x7f0000001980)='{\x00', &(0x7f00000019c0)='\\bdev[\x00', &(0x7f0000001a00)='em0\x00', &(0x7f0000001a40)='vboxnet0,', &(0x7f0000001a80)='team\x00'], &(0x7f0000001c80)=[&(0x7f0000001b00)='\x00', &(0x7f0000001b40)='\x00', &(0x7f0000001b80)='IPVS\x00', &(0x7f0000001bc0)='$\x00', &(0x7f0000001c00)=':!wlan0{-trustedtrusted\x00', &(0x7f0000001c40)='em0\x00'], 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) getsockname$netlink(r5, &(0x7f0000001cc0), &(0x7f0000001d00)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r0, r3, &(0x7f0000001d40), 0x200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000001d80)=[{0xf, 0x1}], 0x1) 04:43:16 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x33) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000f6bfe8)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00004e3000/0x1000)=nil, 0x1000}, 0x8000}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/42) 04:43:16 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2001}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x3a240, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40080, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x6) 04:43:16 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) syncfs(r1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r0) 04:43:16 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) read(r1, &(0x7f0000000200)=""/226, 0xe2) fcntl$dupfd(r1, 0x0, r1) r3 = dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r1, &(0x7f0000000040), 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f00000000c0)) tkill(r0, 0x1000000000016) pread64(r3, &(0x7f0000000300)=""/228, 0xe4, 0x0) 04:43:16 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0x101) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x80, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') bind$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0xefa3}, 0x14) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000007c0)={@dev, @multicast2, 0x0}, &(0x7f0000000840)=0xfffffe33) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) accept4$packet(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x364, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000a40)={0x1a8, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa2}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@mcast1}, &(0x7f0000005940)=0xff3a) recvfrom$unix(r1, &(0x7f00000006c0)=""/117, 0x75, 0x2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) sendmmsg$unix(r6, &(0x7f0000000200), 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e00)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000dc0)=0xffffffffffffffeb) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000005c0)={r2, 0x0, 0x939c, 0x8, 0x1}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="f857d5906102cc66cd0d8591a82a1ef8236065863adbb45be8ee0da13bf54bef750242b0386039cdaac5a518937b7ba198e4f3eef9e4a75ef29520ce6b975292a2f1efd4b0a6ef81ab01c43631344aa7e2be3977eef95aef044bc681a75f7d96493046a1c4de07449b2335edcf78c70291eedcbe213214ea0c243dff63238305cbe67e2670465952e6", 0x89}, {&(0x7f0000000f00)="371d479b3a3c4d5df4628832810a045e8fddfae84f68edb32bb1a35da38a67ce6818aa5fae805ff61ff3497cf886d699bcea17815c2bbd9543b7c10c07b04c11707023cb544298f47aeb442d0aff23", 0x4f}, {&(0x7f0000002140)="0882264496931af877c407e9801804d957953bb6dcc02850d315f86517738cc35da447199951c9a412f79503f35895746e00c8e9904ae68d8c0e88ebd3e09f261374ee6452efd1a3bca48ec95e689f7a72594855dd76eb5576562025b38dc452681c989e17735df3b2fcd548b3064fdec357643ecf9a2cfabb48890218b4cee1fda9877e4aa0cbf5d1daa69f3eb2", 0x8e}, {&(0x7f0000002300)="cc2c82c5de9d19eb146ae61de68c5c5807de40bfbe3f4ed32c76d86e1708f3353d30d21a0885122a6ef1f91f042de27540a561082d779a6e0b480e82a2191731f6e01bc111be3a867306d9b6d5bbb6a4f0a0ce636aa575f37d510c5abaffb31f133282f8d882240c60aa240816e70b02379721df2cb7132f42e0ffd8b6081ad59488d84e4a2ba639be93f40c0d82a877b8043bb996a93b04dc19bda40b941c3e65bf0732455e", 0xa6}], 0x4, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000008d80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000008d40)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x20000881) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 04:43:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r2) munmap(&(0x7f0000141000/0x4000)=nil, 0x4000) mincore(&(0x7f0000142000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/105) openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x0, 0x0) 04:43:16 executing program 7: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x88) write$P9_RSTAT(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="9a0000007d02000000930001000700000002010000000800000000000000000008000100010004000000050000fff80000000800242f2e5c3a2e2be63000906574683075736572766d6e657430707070307b776c616e316370757365742c5e2521656d31776c617f31626465765c1a007070703073656c666e6f648fa8ccacced5f3572cf327f29fcb5d952b615e5ab77e8e9e0c04ba9e6831292a2d215b0e0073656c696e7578766d6e65104ccd7f61f9da7541ffd91f50caaf73d3403bed5286eae0218856841ca28dd9b6080270"], 0x9a) r1 = eventfd2(0x19c2, 0x0) ioctl(0xffffffffffffffff, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") poll(&(0x7f0000000080)=[{}, {}, {r1}, {}], 0x2000000000000041, 0x148f) 04:43:16 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r0, &(0x7f0000000140)=@hci, 0x80) bind(r0, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80) pwrite64(r0, &(0x7f0000000000)="dac432f2945605b371da02870c1a9ad83efe8da36cf34a98730ca38012d649edcc6144cf35050a6314fdea0bd33b96e2f16b98e2cf3c3afe7181a4a0cd14bc7fdcf2adf2aa5f216144759f5a883e8ad84f842e94d84c73a5e94922f5b08f24ad60fc4898aeb5861ed3eae852a0d7d0355f0ba253f2b33bc075d92560d100f09c5881509a148fc95974b81de2e3f54e845a102d7fffc17643b01276b60080df09d54dc5a951aa7a7ad3d15c3da3b6fb230e509af29543f6309f8325db738bb2b5cdfa3f75b702bc55d1dbf5bcb6d0895009d3c9caddd71025bb9082433b35db9c2c1c5bd06a0f4fb778c1", 0xea, 0x0) [ 419.203359] FAULT_FLAG_ALLOW_RETRY missing 30 [ 419.208004] FAULT_FLAG_ALLOW_RETRY missing 30 [ 419.208017] CPU: 1 PID: 27324 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 419.208023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 04:43:16 executing program 1: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = dup(r0) utimensat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x100) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000290007031dfffd946fa2830020200a00090000000600004d9b0000000000007e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 04:43:16 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) close(0xffffffffffffffff) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x80) [ 419.208040] ffff8801b83c7610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 419.208052] ffff8801d71f3800 ffff8801b83c77e0 0000000000000000 ffff8801b83c7808 04:43:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000000)={0x10000002}) r3 = dup3(r1, r0, 0x0) writev(r3, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) [ 419.208063] ffffffff81cbab1b 00000000000067c2 ffff8801d37ae930 ffff8801d71f390c 04:43:17 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@empty, r1}, 0x14) r2 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000140)='threaded\x00', 0x5dced9c0a8557d59) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000005ffc)=0x5, 0x4) 04:43:17 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0xfffffffffffffd68, 0x4d, 0x2}, 0xfffffffffffffe46) socket$nl_generic(0x10, 0x3, 0x10) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000340)=""/3) ioctl$fiemap(r4, 0x40086602, &(0x7f0000000840)=ANY=[@ANYBLOB="8149"]) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000140), 0x0) socket$inet6(0xa, 0x5, 0x7) sync_file_range(r0, 0x400, 0x3, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="4e7800000000000000000000000000000100000000", @ANYBLOB="00000000030000000000000000000000000000020000000000000000"]) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/pktcdvd/control\x00', 0x80000, 0x0) r6 = eventfd(0x9) fcntl$getownex(r6, 0x10, &(0x7f00000001c0)) dup(r2) ioctl$fiemap(r5, 0x40086602, &(0x7f0000000280)=ANY=[@ANYRES64=r1]) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) [ 419.208064] Call Trace: [ 419.208077] [] dump_stack+0xc1/0x128 [ 419.208089] [] handle_userfault.cold.18+0x3e/0x51 [ 419.208101] [] ? debug_check_no_locks_freed+0x210/0x210 [ 419.208114] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 419.208126] [] ? check_preemption_disabled+0x3b/0x170 [ 419.208134] [] ? check_preemption_disabled+0x3b/0x170 [ 419.208144] [] ? handle_mm_fault+0x1267/0x28e0 [ 419.208152] [] ? handle_mm_fault+0x220f/0x28e0 [ 419.208160] [] handle_mm_fault+0x221d/0x28e0 [ 419.208169] [] ? vm_insert_mixed+0x200/0x200 [ 419.208177] [] ? __lock_is_held+0xa2/0xf0 [ 419.208188] [] __do_page_fault+0x5af/0xd50 [ 419.208197] [] ? mm_fault_error+0x2c0/0x2c0 [ 419.208205] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.208213] [] do_page_fault+0x27/0x30 [ 419.208222] [] page_fault+0x28/0x30 [ 419.208231] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 419.208240] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 419.208248] [] ? str_to_user+0xa0/0xa0 [ 419.208257] [] ? __lock_acquire+0x654/0x4070 [ 419.208266] [] ? exit_robust_list+0x220/0x220 [ 419.208274] [] evdev_ioctl+0x27/0x30 [ 419.208281] [] ? evdev_ioctl_compat+0x30/0x30 [ 419.208288] [] do_vfs_ioctl+0x1ac/0x11a0 [ 419.208295] [] ? ioctl_preallocate+0x220/0x220 [ 419.208305] [] ? selinux_capable+0x40/0x40 [ 419.208311] [] ? __fget+0x20a/0x3b0 [ 419.208318] [] ? __fget+0x231/0x3b0 [ 419.208323] [] ? __fget+0x47/0x3b0 [ 419.208331] [] ? security_file_ioctl+0x8f/0xc0 [ 419.208338] [] SyS_ioctl+0x8f/0xc0 [ 419.208344] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 419.208351] [] do_syscall_64+0x1a6/0x490 [ 419.208359] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 419.617701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 419.793052] CPU: 1 PID: 27336 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 419.800760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.810115] ffff8801cccaf950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 419.818177] ffff8801d71f3800 ffff8801cccafb20 0000000000000000 ffff8801cccafb48 [ 419.826228] ffffffff81cbab1b 0000000000000dca ffff88019ded5108 ffff8801d71f390c [ 419.834327] Call Trace: [ 419.836898] [] dump_stack+0xc1/0x128 [ 419.842250] [] handle_userfault.cold.18+0x3e/0x51 [ 419.848729] [] ? debug_check_no_locks_freed+0x210/0x210 [ 419.855726] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 419.862113] [] ? handle_mm_fault+0x1267/0x28e0 [ 419.868322] [] ? handle_mm_fault+0x220f/0x28e0 [ 419.874535] [] handle_mm_fault+0x221d/0x28e0 [ 419.880574] [] ? vm_insert_mixed+0x200/0x200 [ 419.886614] [] __do_page_fault+0x5af/0xd50 [ 419.892480] [] ? mm_fault_error+0x2c0/0x2c0 [ 419.898427] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 419.905070] [] do_page_fault+0x27/0x30 [ 419.910584] [] page_fault+0x28/0x30 [ 419.915851] [] ? do_sigaltstack+0x267/0x6f0 [ 419.921800] [] ? do_sigaltstack+0x271/0x6f0 [ 419.927761] [] ? security_file_ioctl+0x8f/0xc0 [ 419.933981] [] SyS_sigaltstack+0x6c/0x90 [ 419.939665] [] ? do_sigaction+0x8c0/0x8c0 [ 419.945435] [] do_syscall_64+0x1a6/0x490 [ 419.951121] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) read(r1, &(0x7f0000000080)=""/11, 0x392) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCCONS(r3, 0x541d) 04:43:17 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x1, 0x101) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x80, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r4) rmdir(&(0x7f0000000240)='./file0//ile0\x00') r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') bind$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0xefa3}, 0x14) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000007c0)={@dev, @multicast2, 0x0}, &(0x7f0000000840)=0xfffffe33) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) accept4$packet(r6, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x364, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000a40)={0x1a8, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xa2}}}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000480)={@mcast1}, &(0x7f0000005940)=0xff3a) recvfrom$unix(r1, &(0x7f00000006c0)=""/117, 0x75, 0x2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) sendmmsg$unix(r6, &(0x7f0000000200), 0x0, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000e00)={{{@in6=@local, @in6}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000dc0)=0xffffffffffffffeb) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000005c0)={r2, 0x0, 0x939c, 0x8, 0x1}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="f857d5906102cc66cd0d8591a82a1ef8236065863adbb45be8ee0da13bf54bef750242b0386039cdaac5a518937b7ba198e4f3eef9e4a75ef29520ce6b975292a2f1efd4b0a6ef81ab01c43631344aa7e2be3977eef95aef044bc681a75f7d96493046a1c4de07449b2335edcf78c70291eedcbe213214ea0c243dff63238305cbe67e2670465952e6", 0x89}, {&(0x7f0000000f00)="371d479b3a3c4d5df4628832810a045e8fddfae84f68edb32bb1a35da38a67ce6818aa5fae805ff61ff3497cf886d699bcea17815c2bbd9543b7c10c07b04c11707023cb544298f47aeb442d0aff23", 0x4f}, {&(0x7f0000002140)="0882264496931af877c407e9801804d957953bb6dcc02850d315f86517738cc35da447199951c9a412f79503f35895746e00c8e9904ae68d8c0e88ebd3e09f261374ee6452efd1a3bca48ec95e689f7a72594855dd76eb5576562025b38dc452681c989e17735df3b2fcd548b3064fdec357643ecf9a2cfabb48890218b4cee1fda9877e4aa0cbf5d1daa69f3eb2", 0x8e}, {&(0x7f0000002300)="cc2c82c5de9d19eb146ae61de68c5c5807de40bfbe3f4ed32c76d86e1708f3353d30d21a0885122a6ef1f91f042de27540a561082d779a6e0b480e82a2191731f6e01bc111be3a867306d9b6d5bbb6a4f0a0ce636aa575f37d510c5abaffb31f133282f8d882240c60aa240816e70b02379721df2cb7132f42e0ffd8b6081ad59488d84e4a2ba639be93f40c0d82a877b8043bb996a93b04dc19bda40b941c3e65bf0732455e", 0xa6}], 0x4, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000008d80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000008d40)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x20000881) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 04:43:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000bbfff6)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000b7fe0)=[{&(0x7f00005d0f11)=""/239, 0xef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x801) r2 = epoll_create1(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) fcntl$setown(r1, 0x8, r3) ftruncate(r1, 0x2bf8) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000100)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000089000)) fstatfs(r1, &(0x7f0000000000)=""/95) r5 = dup3(r2, r0, 0x0) writev(r5, &(0x7f00008ba000)=[{&(0x7f0000cdff22)='I', 0x1}], 0x1) 04:43:17 executing program 6: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f00000002c0)=ANY=[]) r0 = open(&(0x7f00000003c0)='./file0\x00', 0x800, 0xbf) fchdir(r0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x42042, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000180)=0xffffffff, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={r1, 0x0, 0x8, 0x7fffffff, 0x4}) r2 = getpgrp(0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/ip_tables_names\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x97) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xdab15727c85a1301, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000240)) fcntl$notify(r0, 0x402, 0x8) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) prctl$setendian(0x14, 0x1) 04:43:17 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800, 0xfffffffffffffffc) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xfd0b, 0x0) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffd, @dev, 0x7}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) getpid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={@loopback, @empty, @ipv4, 0x9, 0x2, 0xffffffffffff94a8, 0x500, 0x7306, 0x20000, r4}) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x13) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x44000, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0xfffffffffffffe49}, 0x18) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) 04:43:17 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000100)=0x1000, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x400445a0, &(0x7f0000000100)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) 04:43:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x3, r1}) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/net\x00') ioctl$VT_RELDISP(r2, 0xb701) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x9) 04:43:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket(0x10, 0x803, 0x2) sendto(r1, &(0x7f00000002c0)="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", 0x4ad, 0x10000000010, 0x0, 0x170) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x44) dup3(r0, r1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 04:43:17 executing program 1: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) utime(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x8, 0x8}) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) signalfd(r1, &(0x7f00000001c0)={0x9}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) r4 = getpgrp(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80500}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=@setlink={0x4c, 0x13, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, 0x10010, 0x8084}, [@IFLA_NUM_RX_QUEUES={0x8}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_OPERSTATE={0x8, 0x10, 0xfffffffffffffffc}, @IFLA_LINKINFO={0x14, 0x12, @bond={{0xc}, {0x4}}}]}, 0x4c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x6, [{0x6, 0x0, 0x8, 0x0, 0x0, 0x1501}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x5, 0x9}, {0x0, 0xae13, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x758b, 0x0, 0x0, 0x0, 0x1000}, {0x9b30, 0x20, 0xfffffffffffffffb}]}) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)=0x110) creat(&(0x7f000002bff8)='./file0\x00', 0x0) r5 = inotify_init1(0x0) fcntl$setstatus(r5, 0x4, 0x72109c5fef5d34d3) r6 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r5, 0xf, &(0x7f0000fa4000)={0x0, r6}) getsockname(r0, &(0x7f00000003c0)=@un=@abs, &(0x7f00000000c0)=0x80) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) [ 420.161509] FAULT_FLAG_ALLOW_RETRY missing 30 [ 420.171163] CPU: 1 PID: 27409 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 420.178908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.188265] ffff8801d6c1f950 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 420.196335] ffff8801d86fbc80 ffff8801d6c1fb20 0000000000000000 ffff8801d6c1fb48 [ 420.204400] ffffffff81cbab1b 0000000000000dca ffff88019c092108 ffff8801d86fbd8c [ 420.212455] Call Trace: [ 420.215035] [] dump_stack+0xc1/0x128 [ 420.220394] [] handle_userfault.cold.18+0x3e/0x51 [ 420.226884] [] ? debug_check_no_locks_freed+0x210/0x210 [ 420.233898] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 420.240304] [] ? HARDIRQ_verbose+0x10/0x10 [ 420.246196] [] ? handle_mm_fault+0x1267/0x28e0 [ 420.252431] [] ? handle_mm_fault+0x220f/0x28e0 [ 420.258665] [] handle_mm_fault+0x221d/0x28e0 [ 420.264731] [] ? vm_insert_mixed+0x200/0x200 [ 420.270793] [] __do_page_fault+0x5af/0xd50 [ 420.276688] [] ? mm_fault_error+0x2c0/0x2c0 [ 420.282663] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.289339] [] do_page_fault+0x27/0x30 [ 420.294884] [] page_fault+0x28/0x30 [ 420.300172] [] ? do_sigaltstack+0x267/0x6f0 [ 420.306151] [] ? do_sigaltstack+0x271/0x6f0 [ 420.312130] [] ? security_file_ioctl+0x8f/0xc0 [ 420.318365] [] SyS_sigaltstack+0x6c/0x90 [ 420.324079] [] ? do_sigaction+0x8c0/0x8c0 [ 420.329880] [] do_syscall_64+0x1a6/0x490 [ 420.335624] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 04:43:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) keyctl$describe(0x6, 0x0, &(0x7f0000000340)=""/59, 0x3b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00'}) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000100)) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x4800, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xac48391f3b232f56, &(0x7f00000001c0)={@broadcast, @rand_addr}, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) r3 = request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)='veth0\x00', 0xfffffffffffffffa) keyctl$update(0x2, r3, &(0x7f0000000380)="312abd625993f12eb7e078979f23f9b5d863f13fdb", 0x15) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000940)=@nat={'nat\x00', 0x19, 0x3, 0x4a0, [0x20000480, 0x0, 0x0, 0x20000630, 0x200008f0], 0x0, &(0x7f0000000440), &(0x7f0000000480)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1cfcb0be44900578, 0x4, 0x8f7, 'ip6_vti0\x00', 'gretap0\x00', 'veth1\x00', 'veth1_to_bridge\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xc0, 0x148, 0x180, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@mcast2, [0xffffff00, 0xff000000, 0xffffff00, 0xffffffff], 0x4e23, 0x2b, 0x2, 0x4e20, 0x8, 0xc}}}]}, [@common=@log={'log\x00', 0x28, {{0xfffffffffffffff7, "1f711dcbbf4d259988b9398aa162ca4076237db674639073c658ac13fb7b", 0x8}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="30b50d5b8fa4", 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x13, 0x10, 0xffff, 'gre0\x00', 'syz_tun\x00', 'erspan0\x00', 'gre0\x00', @local, [0xff], @dev={[], 0x1f}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb0, 0x138, 0x170, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x0, 0x2}}}]}, [@common=@log={'log\x00', 0x28, {{0x7, "aebd638f3fc60e1868a6155504645b98ce559e6a8905763aafb3a25fbe01"}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffc}}}]}, @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, 0xfffffffffffffffd}}}}, {{{0x11, 0xa, 0x7, 'syzkaller1\x00', 'teql0\x00', 'ip_vti0\x00', 'veth0_to_team\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0x12}, [0xff, 0x0, 0xff, 0xff, 0xff], 0xb0, 0xe8, 0x120, [@devgroup={'devgroup\x00', 0x18, {{0x8, 0x347153dc, 0x7f, 0x5, 0x6}}}]}, [@snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}]}, @snat={'snat\x00', 0x10, {{@dev={[], 0x17}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3}]}, 0x518) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000003ac0)=""/4096, 0xfdbf}], 0x1, &(0x7f0000000200)=""/20, 0xfffffffffffffec4}, 0x100) r4 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x101000, 0x0) bind$inet(r4, &(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x1) 04:43:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0xffffffffffffffff) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000001c0)) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'tunl0\x00', 0x400}) 04:43:18 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) syz_open_pts(r0, 0x2) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @broadcast, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@remote, @empty, @loopback, 0x7ff, 0x7ff, 0x401, 0x500, 0x0, 0x2a, r3}) ioctl$EVIOCGMTSLOTS(r2, 0x400445a0, &(0x7f0000013000)) sigaltstack(&(0x7f0000013000/0x3000)=nil, &(0x7f0000000040)) setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_access\x00', &(0x7f0000000480)='/dev/input/event#\x00', 0x12, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x20b6b0c1, 0x1f}, {0xb70, 0x40}, 0x8, 0x3, 0x8}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) close(r1) write$P9_RLOCK(r0, &(0x7f0000000180)={0x8, 0x35, 0x1, 0x3}, 0x8) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000300)) [ 420.563370] IPVS: Creating netns size=2536 id=65 [ 420.705364] FAULT_FLAG_ALLOW_RETRY missing 30 [ 420.708095] FAULT_FLAG_ALLOW_RETRY missing 30 [ 420.708106] CPU: 1 PID: 27454 Comm: syz-executor2 Not tainted 4.9.116-g52be322 #17 [ 420.708112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.708126] ffff8801cccaf610 ffffffff81eb46a9 0000000000000002 0000000000000000 [ 420.708138] ffff8801d86fbe00 ffff8801cccaf7e0 0000000000000000 ffff8801cccaf808 04:43:18 executing program 7: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000,user_id=\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0xfffffede) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) fsync(r2) 04:43:18 executing program 6: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) fchmod(r1, 0x26) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 04:43:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x402, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x900}, 0xc, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x80fe}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1c6}}]}, 0x30}}, 0x0) [ 420.708150] ffffffff81cbab1b 00000000000067c2 ffff8801ce150930 ffff8801d86fbf0c [ 420.708153] Call Trace: [ 420.708167] [] dump_stack+0xc1/0x128 [ 420.708178] [] handle_userfault.cold.18+0x3e/0x51 [ 420.708189] [] ? debug_check_no_locks_freed+0x210/0x210 [ 420.708202] [] ? userfaultfd_ioctl+0x2540/0x2540 [ 420.708213] [] ? check_preemption_disabled+0x3b/0x170 [ 420.708221] [] ? check_preemption_disabled+0x3b/0x170 [ 420.708231] [] ? handle_mm_fault+0x1267/0x28e0 [ 420.708239] [] ? handle_mm_fault+0x220f/0x28e0 [ 420.708247] [] handle_mm_fault+0x221d/0x28e0 04:43:18 executing program 6: r0 = socket$inet6(0xa, 0x1000800000002, 0x0) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000300)="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", 0x1000, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r1) r2 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./control\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6d73697a653d3078303030303030303030303011303030342c00"]) getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) shutdown(r0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r4, r5) [ 420.708255] [] ? vm_insert_mixed+0x200/0x200 [ 420.708263] [] ? __lock_is_held+0xa2/0xf0 [ 420.708274] [] __do_page_fault+0x5af/0xd50 [ 420.708282] [] ? mm_fault_error+0x2c0/0x2c0 [ 420.708305] [] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 420.708314] [] do_page_fault+0x27/0x30 [ 420.708326] [] page_fault+0x28/0x30 [ 420.708336] [] ? copy_user_generic_unrolled+0x9e/0xc0 [ 420.708346] [] ? evdev_ioctl_handler+0xb18/0x1820 [ 420.708354] [] ? str_to_user+0xa0/0xa0 [ 420.708361] [] ? __lock_acquire+0x654/0x4070 [ 420.708370] [] ? putname+0xdb/0x110 [ 420.708379] [] ? exit_robust_list+0x220/0x220 [ 420.708387] [] evdev_ioctl+0x27/0x30 [ 420.708395] [] ? evdev_ioctl_compat+0x30/0x30 [ 420.708401] [] do_vfs_ioctl+0x1ac/0x11a0 [ 420.708408] [] ? ioctl_preallocate+0x220/0x220 [ 420.708417] [] ? selinux_capable+0x40/0x40 [ 420.708424] [] ? __fget+0x20a/0x3b0 [ 420.708431] [] ? __fget+0x231/0x3b0 [ 420.708436] [] ? __fget+0x47/0x3b0 [ 420.708444] [] ? security_file_ioctl+0x8f/0xc0 [ 420.708451] [] SyS_ioctl+0x8f/0xc0 [ 420.708458] [] ? do_vfs_ioctl+0x11a0/0x11a0 [ 420.708465] [] do_syscall_64+0x1a6/0x490 [ 420.708473] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 420.879300] IPv6: NLM_F_REPLACE set, but no existing node found! [ 420.999132] IPVS: Creating netns size=2536 id=66 [ 421.029481] ================================================================== [ 421.029503] BUG: KASAN: slab-out-of-bounds in p9pdu_readf+0x535/0x1d50 [ 421.029512] Read of size 65409 at addr ffff88019c4ec02d by task syz-executor6/27497 [ 421.029513] [ 421.029524] CPU: 0 PID: 27497 Comm: syz-executor6 Not tainted 4.9.116-g52be322 #17 [ 421.029528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.029544] ffff8801d53775a0 ffffffff81eb46a9 ffffea0006713b00 ffff88019c4ec02d [ 421.029557] 0000000000000000 ffff88019c4ee025 0000000081f1c21c ffff8801d53775d8 [ 421.029569] ffffffff81567d49 ffff88019c4ec02d 000000000000ff81 0000000000000000 [ 421.029571] Call Trace: [ 421.029582] [] dump_stack+0xc1/0x128 [ 421.029592] [] print_address_description+0x6c/0x234 [ 421.029599] [] kasan_report.cold.6+0x242/0x2fe [ 421.029607] [] ? p9pdu_readf+0x535/0x1d50 [ 421.029616] [] check_memory_region+0x14f/0x1b0 [ 421.029623] [] memcpy+0x23/0x50 [ 421.029633] [] p9pdu_readf+0x535/0x1d50 [ 421.029644] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 421.029651] [] ? p9_client_rpc+0x643/0x1140 [ 421.029661] [] ? trace_event_raw_event_9p_client_res+0x270/0x270 [ 421.029669] [] ? p9pdu_writef+0xe0/0xe0 [ 421.029678] [] ? smp_trace_thermal_interrupt+0x211/0x5c0 [ 421.029685] [] ? inotify_poll+0xb9/0xe0 [ 421.029693] [] ? p9_fd_poll+0x246/0x310 [ 421.029702] [] ? lockdep_init_map+0x105/0x4f0 [ 421.029709] [] ? prepare_to_wait_event+0x450/0x450 [ 421.029718] [] ? p9_conn_create+0x3c0/0x4c0 [ 421.029725] [] ? parse_opts.part.1+0x320/0x320 [ 421.029731] [] ? __raw_spin_lock_init+0x2d/0x100 [ 421.029739] [] p9_client_create+0xa3f/0x10a0 [ 421.029749] [] ? p9_client_zc_rpc.constprop.11+0x1020/0x1020 [ 421.029767] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 421.029777] [] ? bdi_register+0xb4/0x570 [ 421.029786] [] ? bdi_init+0x7ae/0xab0 [ 421.029803] [] v9fs_session_init+0x333/0x13a0 [ 421.029815] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 421.029824] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 421.029833] [] ? v9fs_inode_init_once+0x30/0x30 [ 421.029842] [] ? ___slab_alloc.constprop.79+0x3b7/0x5a0 [ 421.029849] [] ? free_hot_cold_page+0x493/0x840 [ 421.029857] [] ? v9fs_mount+0x62/0x810 [ 421.029865] [] ? check_preemption_disabled+0x3b/0x170 [ 421.029872] [] ? kasan_unpoison_shadow+0x35/0x50 [ 421.029879] [] ? kasan_kmalloc+0xc7/0xe0 [ 421.029887] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 421.029894] [] ? v9fs_mount+0x62/0x810 [ 421.029901] [] v9fs_mount+0x7d/0x810 [ 421.029910] [] mount_fs+0x28c/0x370 [ 421.029918] [] vfs_kern_mount.part.29+0xd1/0x3d0 [ 421.029927] [] ? ns_capable_common+0x12a/0x150 [ 421.029934] [] do_mount+0x3c9/0x2740 [ 421.029943] [] ? copy_mount_string+0x40/0x40 [ 421.029949] [] ? kasan_unpoison_shadow+0x35/0x50 [ 421.029956] [] ? kasan_kmalloc+0xc7/0xe0 [ 421.029964] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 421.029971] [] ? copy_mount_options+0x5f/0x320 [ 421.029978] [] ? copy_mount_options+0x1e5/0x320 [ 421.029986] [] SyS_mount+0xfe/0x110 [ 421.029993] [] ? copy_mnt_ns+0x8e0/0x8e0 [ 421.030001] [] do_syscall_64+0x1a6/0x490 [ 421.030008] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 421.030011] [ 421.030013] The buggy address belongs to the page: [ 421.030025] page:ffffea0006713b00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 421.030029] flags: 0x8000000000004000(head) [ 421.030032] page dumped because: kasan: bad access detected [ 421.030033] [ 421.030036] Memory state around the buggy address: [ 421.030043] ffff88019c4edf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.030049] ffff88019c4edf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 421.030056] >ffff88019c4ee000: 00 00 00 00 fe fe fe fe fe fe fe fe fe fe fe fe [ 421.030059] ^ [ 421.030066] ffff88019c4ee080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 421.030071] ffff88019c4ee100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 421.030073] ================================================================== [ 421.030075] Disabling lock debugging due to kernel taint [ 421.030102] Kernel panic - not syncing: panic_on_warn set ... [ 421.030102] [ 421.030111] CPU: 0 PID: 27497 Comm: syz-executor6 Tainted: G B 4.9.116-g52be322 #17 [ 421.030116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.030128] ffff8801d5377500 ffffffff81eb46a9 ffffffff843c88df 00000000ffffffff [ 421.030139] 0000000000000000 0000000000000000 0000000081f1c21c ffff8801d53775c0 [ 421.030151] ffffffff81421a75 0000000041b58ab3 ffffffff843bbff8 ffffffff814218b6 [ 421.030153] Call Trace: [ 421.030161] [] dump_stack+0xc1/0x128 [ 421.030171] [] panic+0x1bf/0x3bc [ 421.030179] [] ? add_taint.cold.6+0x16/0x16 [ 421.030186] [] kasan_end_report+0x47/0x4f [ 421.030193] [] kasan_report.cold.6+0x76/0x2fe [ 421.030200] [] ? p9pdu_readf+0x535/0x1d50 [ 421.030207] [] check_memory_region+0x14f/0x1b0 [ 421.030214] [] memcpy+0x23/0x50 [ 421.030221] [] p9pdu_readf+0x535/0x1d50 [ 421.030231] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 421.030239] [] ? p9_client_rpc+0x643/0x1140 [ 421.030248] [] ? trace_event_raw_event_9p_client_res+0x270/0x270 [ 421.030256] [] ? p9pdu_writef+0xe0/0xe0 [ 421.030263] [] ? smp_trace_thermal_interrupt+0x211/0x5c0 [ 421.030270] [] ? inotify_poll+0xb9/0xe0 [ 421.030278] [] ? p9_fd_poll+0x246/0x310 [ 421.030290] [] ? lockdep_init_map+0x105/0x4f0 [ 421.030299] [] ? prepare_to_wait_event+0x450/0x450 [ 421.030308] [] ? p9_conn_create+0x3c0/0x4c0 [ 421.030316] [] ? parse_opts.part.1+0x320/0x320 [ 421.030324] [] ? __raw_spin_lock_init+0x2d/0x100 [ 421.030333] [] p9_client_create+0xa3f/0x10a0 [ 421.030342] [] ? p9_client_zc_rpc.constprop.11+0x1020/0x1020 [ 421.030351] [] ? rcu_read_lock_sched_held+0x103/0x120 [ 421.030359] [] ? bdi_register+0xb4/0x570 [ 421.030366] [] ? bdi_init+0x7ae/0xab0 [ 421.030375] [] v9fs_session_init+0x333/0x13a0 [ 421.030384] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 421.030393] [] ? debug_check_no_obj_freed+0x2ec/0x930 [ 421.030401] [] ? v9fs_inode_init_once+0x30/0x30 [ 421.030409] [] ? ___slab_alloc.constprop.79+0x3b7/0x5a0 [ 421.030416] [] ? free_hot_cold_page+0x493/0x840 [ 421.030423] [] ? v9fs_mount+0x62/0x810 [ 421.030431] [] ? check_preemption_disabled+0x3b/0x170 [ 421.030438] [] ? kasan_unpoison_shadow+0x35/0x50 [ 421.030444] [] ? kasan_kmalloc+0xc7/0xe0 [ 421.030452] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 421.030459] [] ? v9fs_mount+0x62/0x810 [ 421.030465] [] v9fs_mount+0x7d/0x810 [ 421.030473] [] mount_fs+0x28c/0x370 [ 421.030481] [] vfs_kern_mount.part.29+0xd1/0x3d0 [ 421.030488] [] ? ns_capable_common+0x12a/0x150 [ 421.030496] [] do_mount+0x3c9/0x2740 [ 421.030504] [] ? copy_mount_string+0x40/0x40 [ 421.030510] [] ? kasan_unpoison_shadow+0x35/0x50 [ 421.030516] [] ? kasan_kmalloc+0xc7/0xe0 [ 421.030524] [] ? kmem_cache_alloc_trace+0xfd/0x2b0 [ 421.030532] [] ? copy_mount_options+0x5f/0x320 [ 421.030539] [] ? copy_mount_options+0x1e5/0x320 [ 421.030546] [] SyS_mount+0xfe/0x110 [ 421.030553] [] ? copy_mnt_ns+0x8e0/0x8e0 [ 421.030560] [] do_syscall_64+0x1a6/0x490 [ 421.030567] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 421.031018] Dumping ftrace buffer: [ 421.031022] (ftrace buffer empty) [ 421.031025] Kernel Offset: disabled [ 421.965413] Rebooting in 86400 seconds..