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", 0x1000}], 0x1, &(0x7f0000001180)=ANY=[@ANYBLOB="50000000000000001601000021580000e9783e51d8e550e1ee6a73eda9f769f15e3d9ac9076582a31671ed585c0bdc45442b000000"], 0x50}, 0x408c1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000001340)={0x10001, 0x4, 0x8001, 0x5, &(0x7f0000001240)=[{}, {}, {}, {}]}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000000)) [ 210.303677] EXT4-fs (sda1): re-mounted. Opts: usrjquota=,noquota, 15:35:55 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000200)={[], 0x8, 0x3, 0x7, 0x0, 0xda88, 0xd000, 0x4, [], 0xcac}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[], 0x0, 0x280}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:35:55 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200100, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{}, {0x6a76}]}, 0x12c, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x4) accept$alg(r0, 0x0, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x1) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self\x00', 0x40, 0x0) 15:35:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="0f20e06635000002000f22e00f9350f20f232e0f47f5baf80c66b8c8a2558a66efbafc0c66ed0f35b85c000f00d0baf80c66b8fe65f68066efbafc0ced66b9870a000066b8d95f902966baf1a568110f300f231b"}], 0xaaaaaaaaaaaad03, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) accept$ax25(r3, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)={0x1, 0x0, [{0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x18d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000140)=0x400, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80000000002, 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40240, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x6ea, 0x100000000, &(0x7f0000000040)=0x1}) recvmmsg(r0, &(0x7f00000001c0), 0x460, 0xea225aec34b1dd0e, 0x0) 15:35:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0x4) recvmsg(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000400)=""/30, 0x1e}, {&(0x7f0000001480)=""/92, 0x5c}], 0x5, &(0x7f0000001680)=""/240, 0xf0}, 0x12020) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001780)="8fe13783a3368b196ed27b861fa436ff5c8bc6be4a32e16f0b21fa8e813beb3d676e44de9aa40919ec092f16d42df28587d0545b6ba9a7194ca92e200bdd7a3a78e5500ad17c11559a6d5d2e04e2965984a732d6167d", 0x56}, {&(0x7f0000001800)="8a98799cc68717eecc5498a0f935181d83552e8badb82fcb2cda471a6c9becdedd60bb7b3ebd1421ca7c51af84d381c7adaca8c104a730d53f5ddba51b18df0e5c49c16b121f35073c989758eaccb558a6f59598d2940b6ba4bbf07610b7dd0e0c077ca3530f3ab2c4faa0971fbc8b5d513b88bee5f0cddac13116f2c9faa20aef9dd1dfc0d712db72ced71523531daeeb90652552910ba7387f0c8ea60d8802501c77a7af2230678781b835babc878db1da3c5cebfb51eed38ad837c1fa409cff8305c07d6d389100e1d008c762319bddab", 0xd2}, {&(0x7f0000001900)="0cb974817b04cc2e524d40548db0e8f08452bbe3726dcb861ce85ce6e0094bb9d09aee4c140508c965bddc6674ab6b9a230644f6922365b80d58a98d3d0c045b3c2455d84493ea78df86f90bedc81c35a522212a6575d3bd3232416008ebeb94b856e818f9c69e663655f146f5914f27a970373ac200f11708703c1a388e059679e6bedee31f65992839dd3b9d33179885b88e217526bacb0c6a9890867498274c32e7c536f0b04100e80187c785a2c1068f9811c73d5cc9ad2a6ed358a080dd7c3ccbacd94301d157e872ce487f6832da1d5f72cec1d575419326238938057c23b8b03b1ed4c079be26c22d506e53abc121d4", 0xf3}, {&(0x7f0000001600)='f\"', 0x2}, {&(0x7f0000001a00)="0e217734a0b7d8c6958a950787187e4a65b6732b6e6f", 0x16}], 0x5, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0xd0c547eb3164483d) connect$x25(r1, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 15:35:55 executing program 3: clone(0xfffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x5, 0xffffffffffffffff) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000003c0)='net/igopF\x00\x86\'\x15\xeahU\xb9\xda\xcc\f\xb5\xb6q=\x1cF\xb0\xb0r\b[\x7fV\xe6\x9c\xc8\x96nB\xb4\b\x804\xc3\b\x1d^\x8e\xdaj\xb13$_4Ea\x0f8\xd4\xec\x85\xcb\xfax\r\xe0\x115\f4\xb3\']\xec\xeae\xa4\xd2\xda\xc2\xd5XPh\xf6\xc7\xae\x87\xc7#\xae4\x04\fj\xe8\xcb\xea\xceDej\xff\xe9\\\xe3\x9e\xfa\xe2\xa63Pt\xd3') ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000300)) 15:35:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000006180)={@multicast1, @rand_addr, 0x0}, &(0x7f00000061c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000006200)={@loopback, @local, @local, 0x5, 0x661, 0x0, 0x0, 0x3, 0x2000000, r2}) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0x80080) bind$bt_rfcomm(r3, &(0x7f0000000140)={0x1f, {0x4, 0x2, 0x0, 0xfffffffffffffffc, 0x6, 0xfbea}, 0xffffffff}, 0xa) sendto$inet6(r1, 0x0, 0xb15949b9cb7c6bb4, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000180)=0x100000000) 15:35:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x2000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4000000000, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x101000, 0x0) preadv(r2, &(0x7f00000017c0), 0x10000000000001c2, 0x0) [ 210.605685] EXT4-fs (sda1): re-mounted. Opts: usrjquota=,noquota, [ 210.625315] Unknown ioctl 1075359458 15:35:55 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key(&(0x7f0000000180)='ceph\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="0bb4dd554627197aa41cbf48f099a3929ab7df38f392cc8f2822c2f50fba2cf27686d11f7ad67edc708113c965cf303b3823cb42b0bcd1c34f75f974e5802e186910d87e533ddbfad593d5558dae68b2137783199ab145bc326929e1d0c850e46969909255b7ea48f94b01b2553b6dfc6417e67584c2c796ad2f898949f1dbcff5ec6d5975a9bb86b795c3b3a013837863", 0x91, 0xfffffffffffffff9) keyctl$instantiate(0xc, r0, &(0x7f0000000080)=@encrypted_update={'update ', 'default', 0x20, 'user:', '!bdev'}, 0x1a, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSLCKTRMIOS(r2, 0x89f1, &(0x7f0000000140)) 15:35:55 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x7, 0x80100) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000200)='\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000002c0)=r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r2, 0x400454ce, r3) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x10000000008993, &(0x7f0000000000)={'bond0\x00\x00Z\x00', @ifru_data=&(0x7f0000000080)="2f15b66235820b646650f222fd4700109e49d4a5ddff3b542513d2ccda01c086"}) connect$netlink(r0, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc) 15:35:55 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) bind$netrom(r1, 0x0, 0x0) [ 210.803610] Unknown ioctl 1075359458 15:35:55 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:55 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x10) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x101800) fanotify_mark(r0, 0x44, 0x0, r1, &(0x7f0000000140)='./file0\x00') prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/relabel\x00', 0x2, 0x0) 15:35:55 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000600)=""/222, 0xde}], 0x1) r1 = inotify_init() readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2a) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 15:35:56 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0x1}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4008af04, 0x0) 15:35:56 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x1814c0, 0x0) write$vhci(r0, &(0x7f0000000600)=@HCI_EVENT_PKT={0x4, "a1233df65ce3f093085f125f7a06a20503259ef7451f6fdf1bafada39b0120f00f7bd89afdd234bfa0c52d7ef1bf9da2d1f1011f8f6ba177a95993877a0738aa67a98cbfdca8a7ca0aab9bf7dc01d7a896b20eec175aed0cd9f14cba884b4c845245f48c0e621a5f608908cbf0c073f6821830e7c4d8432070919d4d1c9e30bb01d6b69ba5d815fd2c8863a09d3ee4d14b113adc72bc7e80ea6ac2feed8f793bdae39c12c4b412084ad9166f0cd6cf25"}, 0xb1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x101401, 0x0) connect$l2tp(r0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x1, 0x4, 0x2, 0x4}}, 0x26) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000540)=0x6) sendto$isdn(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7e, 0x4, &(0x7f0000000140)={0x22, 0x1ff, 0x8001, 0xd2f2, 0x8}, 0x6) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae93, &(0x7f0000000340)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200000, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000001c0)) 15:35:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x5) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000044a6aeabec2e15fc1772f184bc1b3f1000ff010017db9820000000003b08d450ffffb3560000080000ab31c357e3972f415ff5cb88b9ce837c597e9ce5cccf7942003606404079025f759e9f5d54076bb47f57f3"], 0x58) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, &(0x7f0000000000)) 15:35:56 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0xe) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)='[\x00', 0x2, 0x1) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:56 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) read(r0, &(0x7f0000000040)=""/150, 0x96) 15:35:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x0, 0x802, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001380)="b7f2dd8b5500000000000000000000003805b1fcaa84ec6a7578a043e4287858100599a314074b1f39b015bad4309ed6a340f7fae01bace345aa487e023da173f74bdbce6d631d2765c892ea51aa42c2fe6112111e1db2c807f9443685814731d980a370a9c75fb09a5e98c980d0eb2d54faf3841512f8223c909634ce65792dad527a85d95b7d5d261f6eb2935ae9b6ea8902257360c5e137d1814c020a3893abde15895eb72097000079d9759dfcf74edd4245a79562b857d7c23450673cf7a062cb7f3c5111d4bec69a7d6954b13d4466e222959cb3db775c827f085d6670ad821f553cb6479c50839b1fe3fefd3b01463810b35f2fe27bcc6b8a45b2b358b8a33e5c08cab34001fee08b0d9ee518db12ec8a2f6698462854077971b7d377892a1928eb879d0d05ccffead4fdcc52dbc490418ed5df68db89b2429415ccf76fd028543e61e82d7120a6f9ca3bf2ac818935766abf0da29f52df876579beb02bbe9b36df6efbc70e71dd9033ba35d914b82586065e51fd46e961a6d374ad4b8d27797279a3b3a19d3dcd", 0xc0) sendto$x25(r2, &(0x7f0000000200)="efffb20954553d7762ab489c4b362d6c48660c6a4dfc7ba62aeccb07949e14aae14bde010e03625e55f7a5bcc931c9b1d34402dad46f2427b2e5c19c325384c2601da9264bff4c2798a2b6fb7d6fe28ed7d912758101933b", 0x58, 0x14, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$vhci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="02bfa6adb69eae1fe0d5e747cf9a27d96a297b57772a1d0e4458519aa2645f818077110709fe03a0caf529ca5dea2f166a7ad605faa974b071eee02656e417653cd77322cc2a377b9f4b0acf1a912b7f7c1ad32d502b3309e3093c78fb5007d0f66ebfe7886d10b0a893d83beef284a8c45800d26faeb2df9b7be7a0e838900777a066135c91d4357ed7"], 0x7d) r4 = syz_open_dev$mice(0x0, 0x0, 0x7d5cef316d1bb903) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffe5f}, 0x0) fgetxattr(r4, &(0x7f0000000180)=@random={'user.', 'gcm(twofish)\x00'}, &(0x7f0000001540)=""/186, 0xba) 15:35:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x18900) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000100)=""/32) ioctl$BLKPG(r0, 0x1269, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x8, {0x8, 0x0, 0x10000, 0x6ec, 0x400, 0x40}}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000100"]) 15:35:56 executing program 4: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80000, 0x0) write$capi20_data(r1, &(0x7f0000000080)={{0x10, 0xfe, 0xff, 0x82, 0x100, 0x6}, 0x23, "91a04fafb8298b1bcd4031cda38bea95a7ea3f2ea80cc10539138b62365f3961b224d4"}, 0x35) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x47, 0x0, 0x3000}, 0x4) 15:35:56 executing program 1: r0 = socket$kcm(0xa, 0x7, 0x73) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c}, 0x7}}, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x2, 0x4, 0x4}}, 0x80, 0x0}}], 0x1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x1ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0x4}, &(0x7f0000000280)=0x8) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) 15:35:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:35:56 executing program 5: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xeb, &(0x7f0000000000)="c1b12a15f0fc3eaa331e697363b321ce11cb1492781ab3bf8bc220851e6daa94bc773adbf93e4069076bb5d024762670aebc149d40a99da8ed4d1a835c1f89a802173d69d3f89a80aee72f2b73144f6146b1fb9cc0801acc10a8e6f525ceaa0a23f12297141d32319fec79950f62eee0454d61fdf893746043f6d347eec6610d", 0x80) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x40) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000180)) connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x302}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}}], 0x1, 0x0, 0x0) close(r1) 15:35:56 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000000)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x5) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:56 executing program 4: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:56 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") recvfrom$rose(r0, &(0x7f0000000180)=""/80, 0x50, 0x2, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) timer_create(0x2, &(0x7f0000000040)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x8}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000380)=[{0x7, 0x5, 0x39eabdbb, 0xea2f, @time={r2, r3+30000000}, {0x6, 0x4}, {0x9c, 0x8}, @time=@time={0x77359400}}, {0x3, 0x800, 0xffffffffffffffe0, 0x27, @tick=0x3f, {0x3, 0x1b}, {0x6, 0xf6c}, @queue={0x100, {0x8000, 0x7}}}, {0x8, 0x2b6, 0x6, 0x7fff, @time={r4, r5+10000000}, {0x4, 0x8}, {0x2, 0xffffffffffffffff}, @control={0x4, 0x8000000000, 0x100000000}}], 0x90) openat$cgroup_ro(r0, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x0, 0x0) timer_settime(0x0, 0xfffffffffffeffff, &(0x7f0000000280)={{0x77359400}, {0x0, 0x9}}, &(0x7f0000000300)) 15:35:56 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000200)) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 15:35:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1ff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x12, 0x0, [{0x48}]}) 15:35:56 executing program 4: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x18) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:35:56 executing program 5: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0xeb, &(0x7f0000000000)="c1b12a15f0fc3eaa331e697363b321ce11cb1492781ab3bf8bc220851e6daa94bc773adbf93e4069076bb5d024762670aebc149d40a99da8ed4d1a835c1f89a802173d69d3f89a80aee72f2b73144f6146b1fb9cc0801acc10a8e6f525ceaa0a23f12297141d32319fec79950f62eee0454d61fdf893746043f6d347eec6610d", 0x80) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x40) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000180)) connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x302}, 0x10) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1}}], 0x1, 0x0, 0x0) close(r1) 15:35:56 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x21) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x80000001, 0x2}, {0x3, 0xa0}]}, 0x14, 0x2) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xe0) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f00000000c0)={0x0, 0xffffffff7fffffff, 0x0, 0x6, 0xbac3, 0x1}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x1000000000009) futimesat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}}) 15:35:56 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x4000000) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2000, &(0x7f0000000340)=ANY=[@ANYBLOB="6d657461636f70cdfc3aeb88462d1f7e236245c925605e793d6f6e2c78696e6f3d6f2e0000000000000073666c6f6f723d6367726f987065dba9000065636c6162656c2c7569643d91ac03a07dfdace5547815ce2600cedd2fcd381bd9c345fa470f36eb254019ba1562eb8cfdd908c95ac8d6cef11adbe5c0e3cfae648bd564c5a0142cdd7a050e", @ANYRESDEC=r2, @ANYBLOB="2c6f626a5f747970653d2d2d776c616e302d707070302173656c662c646f6e745f6d6561737572652c646f6e745f6d6561737572652c61707072616973652c736d61636b6673686174a52c00"]) getsockopt$inet_opts(r1, 0x0, 0x400000000000012, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0xfffffffffffffe7d) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000240)) 15:35:57 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20000, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000140)=""/194) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:57 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0x7bf5b255, 0x1f, 0x0, {r2, r3+10000000}, 0x9, 0x3}) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000140), 0x10, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000007fffffff0000000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000020000000000000000000000000efb945e295dc71755e0e47de548367d119ebd5b154142c88067b96091603c56f7c8"], 0x200001c8}}, 0x0) 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x195}, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 15:35:57 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x7) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 15:35:57 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x240) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x3000, 0x1000, 0x1f, 0x7fff, 0x47f, 0x3, 0x0, 0x31c, 0xffffffffffff0000, 0x7, 0x8, 0x8}, {0xd002, 0x2000, 0xd, 0x0, 0x2, 0x6, 0x917, 0x300000, 0x0, 0x3, 0x7, 0x2}, {0x10004, 0xf000, 0x4, 0x1, 0xffffffff, 0x401, 0x40, 0x8, 0x3, 0x0, 0xd8b4, 0x6e7}, {0x100000, 0x3000, 0xd, 0x100000000, 0x2, 0x1, 0x8a, 0xffff, 0x81, 0x88, 0x7, 0x4}, {0xf000, 0x7001, 0x10, 0x5, 0x4, 0xf9a1, 0x3f, 0x0, 0x8, 0x80, 0x8, 0x5}, {0x6000, 0xf000, 0x9, 0x1000, 0x7fff, 0x0, 0x81, 0x4, 0x5, 0x6, 0x7, 0x827}, {0x5000, 0x100000, 0x10, 0x1, 0xfffffffffffffffc, 0x5aed8471, 0x6, 0xfffffffffffffffe, 0x9, 0x3e3cef9e, 0x80000001, 0x4}, {0x10007, 0x100000, 0xd, 0x0, 0x2, 0x10000, 0x3f, 0xe8c, 0x800, 0x0, 0x6, 0x5}, {0x4, 0x1000}, {0x1, 0x2}, 0x80000000, 0x0, 0x1, 0x4000, 0xfffffffffffffffd, 0x1000, 0x5000, [0xa, 0x20, 0x1, 0x74ab]}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000240)={0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0063404001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3022e0faf860d64200cac6befe7344c79b669617f24907dd2eacca814992e511d8c3363e1a1a4cbd70d8d3b81c941b301827a5a81834938b8e435703a98d8c8ea9d96e10dd9c45aeba2dc190ccc5bd33fc2b10d72003d9d1192028250bf3efc349dea0b392ac669ff6e5ca672eb468c0d7336e7492b5e8cd870a00c53e1627906979c5eef35a154515e80e913f904562095ee49db93b79a340d3dd8a160def321f64a7bd0ff3a2f2259b435d7ddae1361530fbb42e4c9553e98b8ef73ffa2c59a8ccd1e4c1d69fb0a8fec6c40df176bdd066bd75748d795fdfb53728696875006406074541e33fda08544c414a1285d300d0448df67bb21d5fb97f05f0d9fbb65462804d94e0e206598fdb40f210595ec176865109c02b742dde1159b7368854845f881"], 0x0, 0x0, 0x0}) 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x800, 0x0) mbind(&(0x7f00000ef000/0x2000)=nil, 0x2000, 0x6, 0x0, 0x10003c, 0x7) remap_file_pages(&(0x7f00009a6000/0x3000)=nil, 0x3000, 0xa, 0x7a79, 0x1) [ 212.129774] audit: type=1400 audit(1555428957.206:80): avc: denied { sys_ptrace } for pid=10533 comm="ps" capability=19 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 15:35:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$void(r0, 0xc0045878) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f00000001c0)='vfat\x00', 0x5) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fchdir(r0) linkat(r0, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x400) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x2}}, 0x18) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) fstatfs(r2, 0x0) 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) [ 212.212726] binder: 10704:10712 got transaction to invalid handle 15:35:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x2, @raw_data="e1d6d9832206a1e59df7e03dd452d8fe6c769e29f4c31112527fe7ffd5dc05a2272768688fd26012ad188c069d5bb196478cf910e5c30b279b031d4c2b9e4b5e8b36f41bf04f7732ec21f28f19d12b003c6b10304877caba256b159177c6c3f106ab54c066a4697a90da310d6d947ad8753b2e037f1cb343f0e592112f25121f946803aa6981e56fda094ebbdd053b312ece22d65cd16bae6e20b2144b3ce79139fcef79a685c6a75517ba71d167a7ad01af437fa8b849f673aed09f3938698500e992c856605cf9"}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 15:35:57 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x200, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000019c0)='\x00') sendmsg(r0, &(0x7f0000001980)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001680)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="79c054acc8fc334a1f817e5b71acc79a0ae4aa900ab2d40633285a594a583b2114b5fdbb951249787779410e0029586e038175abd42b3aa01c7e3b8457e046019cd9203148e4ac8cebdfb7c66cf6ef186362fed125e2d2dda85c", 0x5a}, {&(0x7f0000001240)="a017c0ed8910761377947162e1581c5d9ad7a53e4f3d2da2b362498a0fe779f570dd05a26ee851124097168deb1f4e57e2c5bdc577dd26953a57cb77be47cdec18b9725fb1a0643fe8dbc46e781d3bd1baaf9b71fd7676b2f500db", 0x5b}, {&(0x7f00000012c0)="531de2e1f1c9eda231243d4d8e4f0cb40be80e728fb924650752c42ebaf20920d0bed98a2db057c4f8cf9823e8", 0x2d}, {&(0x7f0000001300)="bc0f0172a3c644078a0e7ecf793ddc4357e7e768eee771b503bee68dfbabaf3e8a655e4b7fc87db2183a9a7c5a79868a5f7d3f2e05b68c10ce5646bf", 0x3c}, {&(0x7f0000001340)="90717238166ff1333cfd80e02f5760892f8ba3b8e93bf6981f9c85cc9ed11cb39ac87bbacd68397b9869cf79ee5a9d3ef18122a3503ff2f202467466af9eaf34ba6b1b4a05e77f9cafd704ea6e875a069731b0b8c5651c5d9cce901c945a147be84f28c76e1855887f3f0743229f8852b3d0c0caa6388e9b05c4126e849f8141d1acb809263e5a9d10bc3a4c0a00f2fd305b8804743a1572294cd7acae09840b0be9307a846b44a247661252a2d0cdb475ccdf3f5692c98a3beb7acbafd07de7803d76d4b1e64afed2c60e7aeeee4c3fc71ea3ce168235c1421927a49a159e952f608e22f2c721b068", 0xe9}, {&(0x7f0000001440)="865cedd8a2d67c9574066fa969c39f186eb8431eee2ea13d4529dde6494fad6e5f9e136c8b5f7a1e3f80a50de220648f5acabeeaeb23c733c97c891dc4dd690dfd554a3c88646e301447298e28616602c40ddb1c99632dea3d5b239c830cf8496de3c7098e04c3566b1a9d7c5745ea4d63e5009c15975a0927c9e6910870f9cabcb1d95000402f6ec90af175b9c824b4cf0d7f40181fc7b0e2099b8c6c2ba7e44b2dfc4ed82d4dd0c914c86a142334cebd6de14a1a8df65faab389539fcc003af639186b8500590d7f26d92df45aa6aa6930bced", 0xd4}, {&(0x7f0000001540)="a4fc1c09a6b1d026d296268fc4b56d562f461097ea6212aee93f5c666a7a99d8526a887fab37f50e277fd8f5cce84d427014bcb4c3e18d12c062d668a1e48be5ef252d2bd5b1bc87cdd260c263efad082b6af580a1df19e7d057ea354f299a60edc206c5ad98f09f340997a70141d30b2f22b0ee3f2183c4f608a80588c7eec3b9b0ddc4dba663fbe25c3e94657c17a35ceff3e8346bd953b8d546cd577b003ddac65c4dd97ad82519a5c36f3027b9", 0xaf}, {&(0x7f0000001600)="1d62052e8e3d989cd96573187bfafdd702868adf8942120e6d4b71c23bc218efd4fc9dd2e1915782fa61b6b9f37752b848b17741180da2551774797ccb46bcc5c610262130", 0x45}], 0x9, &(0x7f0000001740)=ANY=[@ANYBLOB="10010000000000c849f2836fbec39656dc8bb70f29f9e10c3a08bcbd716d687d6ea1aea7a79d5eb9ea325a96c6029d4d8c80fba9f80fa1bd3104e300b519c7c6db585ffc29f4dfb590308bdd6ec3ca3b82eeb766c12b87369e504843a16682b911b4f45367ed94d6bfa329fc6ecc697770f7c708c6c0953949a72dd0f5fef74361561393574b52f580a75f9e457b6a9ba05d83941d54e885cdda31831848b256e9b258b7f61f7c5a6c6a30fadf6780e464ad087f7481948dd3e427e3979b3beee616eed887ab0e440090afec458b0720ea89e5d4ef25007413707faacb2bff3a4a04efbb7d49e26d55c509bd2c66718856b48911d7d56e860000000000a80000000000000017010000bc000000d2184a682190b06dd6c8329b8f010000000000000012a889d86d66408ebe3e4092360bc2cbdb6b1c26cc7d7524bd62470016d39b76f84a97f6496f68010f2746edb5855356d09f48e64c1d8eaa1e67c7588c956837e7fd1e5d4deefdb0f896c8caa99e576616d7d432260ea496461fd400f0a3fffdd5e715113e731623a44009baac0643e42653ba21bb9765324534a9640000000000000070000000000000001701000004000000044d319d48bfde066eba4a6be99f9d8b39dbf318e3e1821f190321991371188c66ef2e5f1e0fc9af0e5caaa88ea3e3f36ededc9b405bec08db3712e828e845b45005fc784c15f45c47dc59fd83014507e24600"/539], 0x228}, 0x4008010) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0xff03) [ 212.255892] binder: 10704:10712 transaction failed 29201/-22, size 0-0 line 2802 15:35:57 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2) r1 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e22, 0x7fffffff, 0xa, 0xa0, 0x80, 0x2f, 0x0, r1}, {0x80, 0x80000001, 0x800, 0x400, 0x0, 0x101, 0x7, 0x3f}, {0x7, 0x2, 0x2, 0x3}, 0x5, 0x6e6bb5, 0x2, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d6, 0x6c}, 0xa, @in=@empty, 0x3505, 0x4, 0x1, 0x100, 0x1, 0x0, 0x1}}, 0xe8) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:57 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="2e0000002d00817ee45de087185082cf0224b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x4080) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x1000, "7fb3115a3e28f75060c563cfcd13613ba13b42df7bd16bbdcb48f193b4a42c15c2321fcf85c7ef99633910c6e5c4fc61aa6ccbd0af96f1571a30fabcbaa66dfabe17dadedce3d66fe2a4de98a962bedc2d12b5f7e2ba8e22af7d56ec162395cbad395850abb67d1fb8ce91a994aae43c4fc298f2458aa71d1da20f51881cbd230dac936be0dba6ebd53e89f6a5f78d5a3e7f9e96e67427ff2e270a1a97018681fabdb255916f72783151d4e6d928e5bdad2f0330bc806e9bb69326dc7851e283ea4357fc588b59a8981643d5702f01b89bfcd1e5e0cbcfd1ffd1e8afa4908a7abbed5fa34b47b81d7e65523f8226d9d3b0a170475dc52d3477f82dc37b7b78d94a59c14f9cdd9facfe4c4ce0bb097f180d9b924b2767425b8850ec210eecac24c9f4a06714eea19a1d399ff9301a037f9182204b856e3aa017b30972e11280d798218fdde3a74ea658ca1cc0c874e34e9d3d14dab787f0f93bd5f3447c6b0cc9113c0181c5c42b656994abd1d8e91d27f60c9896d543119e37cd33fc0ae00c6f747a9c83ff8a6f22664c0035deb01850a3164f6659a36fa6de7a923649d04f6fc676e6f3d9ed3d28c9ffa674f8c3715f6be7f78b47df54c192b803044233aec7bea4b1077a8cbc70d126eec45a337aa37234d9005c180e8da511db9e6f53c11306fee18177b4ab4eabc8f034d7c3c69362d3272b6ca6202ae04c1f74ace5b23757465b86b68272d19361de073b0b5444870cf83bba45477ea11cb8f3234f3e42c6cd495131f7e9a3124fdfe685cc0a4b8f39978b790b7afd4334e79cb391adfad8e212d9482288679c07b24cab202cde21627897d117cc885b1028de6ab52b6201af975202aed751be9fa4c158dda7ad05531b7c533182f6ad5b28607604fedf5916dc1d5dc5dd74d7479319c00742b7db404a4c19f1e28a536108badb4baad7687df42c493013514bbc133c9808ad7c827c6ec9ae6810eca61febbc978e8e1f98c437a342c4ff0d90246298ae276ffe895796f69222aad913e17877e01757884f059fb9dc0304e3cb2e088195fdae0092a494c7f59eb4da76b5e287355e45c1501529b99adf1f517bb433f99d92a25f665a761707241e2964b93e56581d8f3e87df0951c714ede094e4f128232508da3f97b2291c00c9e875fafe83760f47c539efdde2d33228f96396746ac38d645e9b48296f9f76560060c9cb2dc824f97737e2b2157571c4cbd5a8f1e3e8e9ce39fe93fabfba450960a2abc0b3ae050270a2a5bb306af5cba02f4c54587a798390627961618c9865f527e1b9752b40dfdad96a1d2ef368983a556f22d02fbf9a48147c58acb33a294f273e018fa8a4d2beb983fe348ed9cd798151f1c3a6b5b5852c305b0ce6536236dbc4206c78bb96e47826da96800144112514165727f968fa9e9f6bf95d4caae25e5d645251e46d747779986eb532c77dd91c29db4ba7bdb1a848a17098efa1b10a7fb8752c4c5961041761f1a4c395ef4f537e9889d3c1017260e06669d5a192f17082617be4380ed820182adec74f74b0652fd6473da2a999611b4a89f35d0945820a214f75c4bca4f6cfe0f21147e9623ed006391c688183301d6c5abdef66e88d9b1533262c940648e52bb6a3e91caf8192457fb95092aa3931343be5f20ed517e908e928735b727453aa83150002fcda2e6595571f003d5202ef46c0f0f34a7d4d8c865a229bf7abcf5b5a8a8ce8eecc00596d4f52d712d400526511cf7bd5a9b167c8a5940f9b084eb8d2c4c73a7e6edde074ba727124c372f488628b97732ecef2a3d2d0d07893cbb529709ef59e719afc5aff61eff1e54246d7c51f6d9cc5d9c169d9c75575e0ece33598fd31d56c18679c9c4ae3b89b0df3134e9da9d1c8cb5eafe05c1106121abc696db96cc1f9f1185f29e5cbb36de80ec892a2c52a93ed65348dfff3bfc21ab629a845d9bd797ba7b3f2d52b171b0ed604103baca3a0942924c85bf0608d81e580489d844ad9b5bf3a3b016b2cb872012c7f8b5e16ae050855c67e8a82871c046764de55a44981ad964e860fa49ce3f320da1660cbc707f6898ecf57e2ef6777600b8cc59b3c6135755493212ff26a89a064eb2e93ae7faf5e70c0f47ccd046b4731b1ffc72a012be14b35f689fd6ada5138b9ef1c38e4092153954cdc42f2665c209de00695fffeb13d1ae44dd13f7ef053bfc5349f0042a12cbd1a72ef1ad120a43fa0be8d897f761f5ef386d0ecd23698cfd8f6f6d990223280c30993318ef55860c2bde71ff35718dbfab0710b7709135017c9254b43fccc9e5c444bdb9d41900f7be2546e380df23ea83c6033b3a5cb5a4f5976eea8f30c53d942790db39a9a008b0021381dfde6cacd5141f3ebba21da8ff4cd3b31a4724ad98c44e250c97bf43bc346854c46f87017ec9dd1a5f8c56d24d8af6bd0225a0a2b05737cd50568c3789e9cce4113f1105387005bc234507174533751955ca1e89a69141d212c8a809bb025f4fe68af026a2ead024050393f8716b132ea5355a7a76adda8edf0523ab5c94b9d79604153d29ede3239264d13e85e54218558d4d812901c2c99097c3bad9234f96e92f403d0ee72417fe2f01f144970f551240b2ffafbd489bf97fed34e47d4d64d4b95a4a5877c87b9f181efd3f08cdac2c528e9548d7b2635e8a708ee886422a6425ebb8f418792b26360feac41bb15d712d448b3882844684ca3fd30bc71de8b443ef00c74506d21023743d153cb7fe8fe59f7d0e06cfe5d59738d9b88e6e59a5b893efe477453abe26b411ecfb1abbad946ec2fda0653fb4e3e9e2b9d53561ec3f8852247144a81e54015661933c6f20a6ee271e008e5dc0ad2d4bc4e08f68cd05d0d1453db1649a1b8e89749b52e49c5e73a84f24ab26aa42f8ee4d1975fc839da644b434ed0c8c706b2067cd1422708309836c105569245b313af24bf8a97d9ecf50804fba5cdfef4abcf5c11e458df52e9809df3de89b094efe73e4b9cd69d5a01b8f865afdbf750edef862bddf8a0e0e180e87ae2e3da8e62f668f08a8b00e00d3625cdfa1788a76d3c8e89a6c4d300782e7f5c58b357a200bd39ca3b8cf771c8ce8475fb7b001b7cf326950200bec502f99fa6df627962f901b973bed700d954a842ebe30770a98b57c1d42ae266f9e5824a2212943cf1e723723de9b9ac17ee28900dbaf9c6a88df8a18cfc4a2b17d1c89b54c7e41be6cb15885151c4d8d43c33b2d4f4a0fde561c9898a3a9afe1b379959362bdfc595f4acdece01754135fe2622c4f0aa2f115466933c688123430569bfbf23d5318b7f51a34b125519188320361dc88be2b62766e67554e639c1865e1d211cd2577e8f5bf551104c08e2bd172ea0332fc2f01c05997136ef2b45016c95a053a02d3105b73a24a53e39f4b37f5f1ab30931ee76c04a8a75e260d8f29e5351670393c355ff7188f839b9d7d067a1c1db3ba377b7492d2f1c5f98266cc4a30d34927ad369c3c7fde24d95626b8975275fd0e46935ea8d93358300ea2de2236921ccaf799713bce47b6c4021892709ddd575f43a9d28de8815fc8df4cb7751d476069cc3d84a697f1740891b2346190975c91b5fb71ee0073a4f1dd0a51c9fb0314d148b81eaaf6f2495233c1a7e0dace20d4b06b4c35d8a89dbbb2e65d92d75bf3ee8ce3cf2baea5b2b79a9654c7e0940091546f29884693d1dc4fb8963291cf9d25db773766fdd01254446d6da3a336bbe8a4016d911249bd6334367af62e00ad85e51d5ed9df83a6fca8f9145bb66691ba6df3782887c4bad6ed22a7585b5acf9bc449d9a7fd4214ecf55e1f699f91f65f83e92b21155e0d78ba2576e5a7f4a8ccf925ff694c905b9b999de642953e82ce267c3f0efa4f5832e76e35304570b3a5f46609eda181f35640d2053af1e80a9741cb6269c62a94e6db850098362902d18f4f7d7f319150c6d56c34fec4c50762218b7fedf6c80d5068b15c3ecf86cef2c156070919fdf3b297278e70883b8a2f69fe342bfd9518b8f09bf64a120411eff33292700474335f2aa56f6e6e86f85e676c6de7eb63587424b7201a146ed5cefe15b7aead52e16f1002f3c381dbcf7b7bf80fc00a97700417be02f10651331547fecf4a81299dd0c32698973528b39eab2b7692a067a5eb2d0f95004df3b9aa72630dacd9bd264c5f1f261924d418fafe4ab8410d4bb5b1055b4fe18b6cb77e3879a880321a2e9b949b9860e8eae0c7ceb98f867cab931ffbb0674047df3165de81ffe1494e32f78e1f6436db8613c28d606ab2850fb7f0e56ac73a51621146dc91c27ae949c62253d1ff1ca5f9d33a4cf3e25071079ad32d91a665c21dfca4a8cdc7efbc2b9163871158bea4cc950586100ee03c723e02557549c51294f671b8eb29f273a4691ad1930c941779635599d5b08b01543d12abd21a8cb5cee0b49bfc0305e96f7bea366918b0a161009bba7ff3c8224254ce6961cceec696ad18338a92f6c253f9b3d5bfaeedcf2735e370842497e31ed550b710b97ff3291740727a472548531f408181c785a45e851e099beb5440bb896604f551c7d8c209e46235a1a6112faffa2e62fee31847456b7fa61abac9ef8d52c20f81b6619670c5d52d936f1a23a83c19000c1da6d999af5956ba87b5f425102a2577cf91ab11d81c571867f4a9ecad4f04d456dc47b1953007c2d7d8f6b27047dac7a7015eb6dc503c5d3ee0dca3347113e44ba454dc2320e7ccc23f145e88d1cc519e3f5862996b800db0623fd87ee45aa03bad1d2c484d1b44f02d189b34afd22b32cd1a4ae2a50744f22c521b127ed0d0df51bd3112400bea09cdf6cfe4ab8297d8476053c1f1c1891db62604fbe5e7e2552a50b6170667b6809bdb0cea4fdbf9b0e1d117391612f4291c167e0ff6167f27f6eb878ebce052329890c74407a1abebe47a2d8323c14a98b7221aa978f8b8d393a84d85dc61f5bc4d9133b7b8215405444b5c8d5a3ee09be457b040896aa6c6ef25351bf15bb033c6c00ec53bbe005a0160840c0267038434ec40742f503e9ca3aaa61022c4a815b3ba6ae2089ee66fb383b5fa1ed88804f1f792571be03bb091e2268595efc2d9ea83ec9ef4e8542c2ad5babaa510c90610620beca835f32d24432aeff9d63282b01a20cde9ab9501adce6408ea1f963e39e34aff16aeeed12ca04487e69757b5f9c73548b41546a2fd4e51d9d017fb96256f5a4705f4414c94dc75e9e200a1c59fe4285a612facf4fa20d26ef2305a3a34f4f5de7d5c60112a4536a10ed6adf58d492919e2009324e6e7a0237acfe64b92048b0dbd10625d4ce515d80327897ceb0be0740b45e78f6a40b071107f68c80037551967570f132c8a3edd117ed6c3aac9a8775132da99f00665b7864880f896e61080570333a4b8968e8da7fdcb543fbe4245798118176ead8f0845c46ab94553a4894507720ea708ff3590298341f47f5a54569da6ad4702b80ba3294edcfd82c0059ef0f60b05b47514115f988f0a357226021ff584d8362b3747024e373cacb77fc2cdf271496f539400ace76f34fc6382c9de45e02fe37ca4c433c64882ad0ba65c9850eaf7c97182b19cea2aba83e82c13579270a50765e179efb113f578630cb5116b5a1216691f8a47208752c039a5b0a88f2d2b7537dbb853d8da57a86ba7eab2eff4e22809f02f54c9b43251f9268054f8a9cda0a717a98c454f92eff7d65bfd9b01d02057c6d8d70004931d2194e56117f0f433b354f015a7f2da28c9ae8dd05ad18587852297e87b19996e2a183202ef1"}, &(0x7f0000000040)=0x1024) [ 212.371629] binder: undelivered TRANSACTION_ERROR: 29201 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:57 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bd070") r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x5, 0x5, 0x8, 0x5969, '\x00', 0x101}, 0x6, 0x10000000, 0x8, r2, 0x5, 0x7, 'syz1\x00', &(0x7f0000000000)=['user/\x00', 'em0\x00', '/proc/capi/capi20\x00', '\x00', '\t&.\'vmnet0\x00'], 0x28, [], [0x7, 0x631, 0xffff, 0x400]}) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='.\x00', 0xfe) r4 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) dup2(r1, r4) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r5, 0xd, &(0x7f0000000140)=""/66) 15:35:57 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)}, 0x20) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x400000) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0xff00, 0x92fb, 0x36, 0x7}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x6e) 15:35:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/if_inet6\x00') preadv(r0, &(0x7f0000001180)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, 0x4e) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 15:35:57 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0xc58, 0x4) r1 = socket(0x2, 0x3, 0x5) getsockopt(r0, 0xff, 0x800000000000001, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={r2, 0x5, 0x20, 0x7, 0x1d}, &(0x7f00000002c0)=0x18) 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) [ 212.543261] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) 15:35:57 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x400022) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:57 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000180)={0x0, 0x2710}, 0x10) bind$llc(r0, &(0x7f0000000cc0)={0x1a, 0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, @link_local}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r3 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x100000001, 0x200000) sendmsg$unix(r3, &(0x7f0000000c80)={&(0x7f0000000940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="26f6c8fd945061b4bdd3f05bd04c4b4b55b2bfc6f179b1", 0x17}, {&(0x7f0000000a00)="73962f8472fde8d8bf07309902bb52e508810907f739c0188a08452e7ca3ea70ba12ee5078af3778f24c49a104d578129d37cdfd718fca427ee670af919acb316528d038d7b3ba5df397f6c45f75f020", 0x50}, {&(0x7f0000000a80)="526ba7", 0x3}, {&(0x7f0000000ac0)="1cf04a340744641b65a98d8d6a877b50fd399c8c6159263bf9cf63b4b31f5c0c4c3dacc86c88d481fec44ab429b4a8f355500a72cca6e10bd966d6c7af5eab62c3263fa3bd013eabdb5a43834f7b6e77d15f6f536914b642d6fc2a9baea9e990a4e36d4486d255213998750fbb01d337470517e1e4527eef4ed6ce8fd02ea883f8ea103a5c1a0e3be5a37100b346781bda9d0af4d694f7029e0388c2280804d6a94a8a297b", 0xa5}, {&(0x7f0000000b80)}], 0x5, &(0x7f0000000c40)=[@rights={0x18, 0x1, 0x1, [r0, r3]}], 0x18, 0x20000014}, 0x20000001) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000600)={@rand_addr="f131e4972797299347cf9470d7266efe", @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfff, 0x8, 0x0, 0x400, 0x1f, 0x4000104, r1}) getsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000680)=""/63, &(0x7f00000006c0)=0x3f) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x3, &(0x7f0000000100)=[{&(0x7f00000001c0)="01eb3039f6b2c2b8bc3e1c87648610afaa577c80deef290118d011573475417d9b696160c47b4cf4729f2374340d047723683842f2c241ab1ad590bb742cbd96a360439fa7ffe49320a32278f83d91fcdef785d39ea4ab9771f4685ae134c756b9a1603f3740dbcf25faa370c6ccab7d37169622066d7f7896bd34cceb8ae1c6acefe0b6517f21f9689ec21a3c579d7e69dcfa64065156d15765569eaa9c6b993903367f1f9dd6380d1b7200defef271268c2472e046bacdca7d573442e9c0bd100637372c314d39603547c1ca056ba9cf33ebf25d5046b84a70de", 0xdb, 0x30de}, {&(0x7f00000002c0)="45fb34e1bcc028339e3d24be220c9f401632686f87789b35140a73d390839aa94d7dc674a6793dc14bdb6cc7c7af4f6ecbb19312838a5b69250624195793941bf7e6fe58348f88edab436e19077ae7c73cfdc2a372283cf057416a880ad9e3ce0d1365c629e6142899f512a88018b34b5ad0a0ecc6c4bf52a950c06e637559da21efdbabdcc03362c6a1ccad26fc74c0d57488c1d7699ca8f118620682c2dd618014a8dedc4256848dbbc687823e728770b71798b798f01760996d4c1c9070e25e0512ad", 0xc4, 0x4}, {&(0x7f00000003c0)="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", 0xfb, 0x101}], 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="747970653d721f38aa2c696f636861727365743d6d61636761656c69632c66696c655f756d61736b3d30303030303030303030303030303030303030303030342c7063723d30303030303030303030303030303030303031322c7569643d", @ANYRESDEC=r2, @ANYBLOB="2c2d841f58461e53eb410a0080000000000000a8ee687a95560a557bd63a3ab138c1046425f0c06b0901067c286aef9a3a4c33b100000000d10200"/71]) listen(r0, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000b80)={'veth1_to_hsr\x00', @broadcast}) accept(r0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000700)='f2fs\x00', &(0x7f0000000800)='./file0\x00', 0xe04, 0x1, &(0x7f0000000880)=[{&(0x7f0000000840)="198b2e00916bbde2b450a16425b5dcdace7b836e6c802fded30f514611e8f1f2cf59a8e6a34c719d428c9bf1ac6a", 0x2e, 0x1}], 0x45000, &(0x7f00000008c0)={[{@six_active_logs='active_logs=6'}, {@disable_ext_identify='disable_ext_identify'}, {@noflush_merge='noflush_merge'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@inline_data='inline_data'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@nouser_xattr='nouser_xattr'}, {@prjjquota={'prjjquota', 0x3d, 'vmnet0\x89'}}], [{@seclabel='seclabel'}]}) [ 212.665575] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:57 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='\t\x00\x00\x00\x00\x00\x00\x00X', 0x9) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000)=0xc3b, 0x244) 15:35:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "69795146f4c4cfc106"}, 0xa, 0x2) getsockname(r1, &(0x7f0000000080)=@in={0x2, 0x0, @local}, &(0x7f0000000100)=0x80) ioctl(r0, 0x1000008910, &(0x7f0000000100)) 15:35:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75781500000000f600000800000007000000402c11000000000009000007000000000000000000000000385a5800000000000000000000000000000100000000000000c7000000010000ff03000000000000f6ed4adecd4ced4cc625298c23245bf9e800af21bf4e4a873f4aed9e2d5b485b3e42"], 0x60) r2 = dup3(r1, r1, 0x80000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000240)=0x6e6) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000100)=""/163) socket$rds(0x15, 0x5, 0x0) 15:35:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x48, 0x0, 0x4b564d03, 0xfffffffffffffffd], [0xc2]}) 15:35:57 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 212.828325] SELinux: failed to load policy 15:35:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x4000000) fcntl$setlease(r1, 0x400, 0x0) fcntl$getflags(r1, 0x401) 15:35:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) [ 212.916965] SELinux: failed to load policy 15:35:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8400, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000080)={0x100000001, 0x0, [], {0x0, @bt={0x9, 0x8, 0x1, 0x2, 0x400, 0x5, 0xe554, 0x9, 0x100, 0x1, 0xffffffff, 0x7, 0x7ff, 0x52e, 0x42da1f9cdb6df3b5, 0x15}}}) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000180007041dfffd946f6105000200000a1f0000070028080008000b0004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:35:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00', 0x29}) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={r2, 0x0, r3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 15:35:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x20032600) 15:35:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r1, 0x0) pkey_mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x4e24, @rand_addr=0x6}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00c@@'], 0xee, 0x0, 0x0}) [ 213.070294] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.130269] audit: type=1400 audit(1555428958.206:81): avc: denied { map } for pid=10858 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=15529 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 213.148712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:58 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) seccomp(0x1, 0x1, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x6, 0x601, 0x400, 0x100000001}, {0x1000, 0x20000000000, 0x9, 0x3}, {0x7, 0x203, 0x80, 0x8}, {0xcc, 0x0, 0x2718, 0x7}, {0x1000, 0x8001, 0x7, 0x22c}]}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000240)=0x40, 0x4) write$FUSE_GETXATTR(r0, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x3, {0x400}}, 0x18) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x5, 0x5, 0x2, 0xff}]}, 0x10) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x7fffffff, 0x1ff}) [ 213.177464] binder: 10858:10867 ioctl 8917 20000040 returned -22 15:35:58 executing program 0: syz_emit_ethernet(0x2f1, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [{[], {0x8100, 0x8, 0x80000000, 0x1}}], {@ipv4={0x800, {{0x0, 0x4, 0x0, 0x1, 0x0, 0x68, 0x2e01, 0x1, 0x21, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x0, 0x7, 0x0, 0x7, [{[], 0x8}, {[], 0xffffffffffff8000}, {[], 0x7fff}]}, @ra={0x94, 0x0, 0xfff}, @end, @rr={0x7, 0x0, 0xffffffffffffffe0, [@loopback, @remote]}, @end]}}, @udp={0x4e22, 0x4e23, 0x0, 0x0, [@guehdr={0x0, 0x4, 0xef, 0x2, 0x100, [0x80]}, @guehdr={0x0, 0x8, 0xf71, 0xeec2, 0x100, [0x80]}, @guehdr={0x0, 0x5, 0x0, 0x1, 0x100}, @guehdr={0x0, 0x8, 0x7, 0x0, 0x100}, @guehdr={0x0, 0x3, 0x623, 0x7f, 0x100, [0x80]}, @guehdr={0x0, 0xfffffffffffeffff, 0x80000001, 0x3, 0x100}], "3e6c91821cb54086fd9cae64888d7d24de1c895bd6707a7f65b1ce3c036eb81cce1536af21f0acb1f8d2266d381bece1a22eee78a06c8b7cbbe559affc795b82906d4fd0d8c5c47224b8222e3f13d1ed98fa"}}}}}, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xc8, 0x240000) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r1, 0x5, 0x720}, &(0x7f0000000140)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, &(0x7f00000001c0)="604151479f82ce8d13e9b75345360e67cec5a1fca7bea2d9c11be13a898af38bdd9f7bf086fe75b5452300c4ce56bc123fefa5827c949c5d180dd5437c469c65d95759bd878142af23c2b1d3c4cf67711eed6519a17a41a1b846bac34d59b9", &(0x7f0000000240)=""/131) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x4, 0x73a, 0x7, 0x1, 0xffffffffffffffc1, "e77b7a421860f96626db469dd5c06c18bc7b41", 0xffffffffffff77d7, 0x3}) 15:35:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) [ 213.241819] binder: 10858:10878 got transaction to context manager from process owning it [ 213.290296] binder: 10858:10878 transaction failed 29201/-22, size 0-0 line 2793 [ 213.308350] audit: type=1400 audit(1555428958.256:82): avc: denied { set_context_mgr } for pid=10858 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 15:35:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20000, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3ff) fcntl$setlease(r1, 0x400, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008004ffcd750200080001c0dfffffffffff00"/36], 0x3c}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x200) r3 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x80000000, 0x100000000, 0x8, 0xa927, 0x0, 0x6, 0x101, 0xf, 0x3, 0x8001, 0xfffffffffffffff9, 0xa1, 0x40, 0x6, 0x3ff, 0x8, 0xfffffffffffffffe, 0x2, 0x4, 0x7fff, 0x2, 0x1, 0x9, 0x3, 0x7, 0x8000, 0x5, 0x6, 0x4, 0x100000001, 0x1000, 0xe9, 0xffff, 0x98a, 0x100000000, 0x4a, 0x0, 0xf3b, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x2, 0xf, 0xf, 0x9, 0xffffffffffffff06}, r3, 0xe, r1, 0x9) 15:35:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), &(0x7f00000001c0)=0xffffffffffffffef) ioctl(r0, 0xa70d, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, 0x2a8) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007300244471b800"/144], 0x90) 15:35:58 executing program 3: clone(0x2102002081, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x9) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x101502) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x301008, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x20}}, {@mode={'mode', 0x3d, 0xffff}}, {@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x3ff}}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@mode={'mode', 0x3d, 0x6}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '$vmnet1'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) [ 213.387309] binder: 10858:10878 ioctl c0306201 20000240 returned -14 [ 213.427336] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.447207] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.454042] binder: 10858:10878 ioctl 8917 20000040 returned -22 15:35:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) [ 213.501240] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:58 executing program 5: syz_mount_image$gfs2(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000280)) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x403e, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@aname={'aname', 0x3d, 'ppp0posix_acl_access'}}]}}) 15:35:58 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000001c0)={r2, &(0x7f0000000100)=""/192}) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 15:35:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x20000, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x80000000, 0x466100) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000000ad, 0x0) 15:35:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x7, 0xff0}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="24000000040a07031dfffd946fa2830020200a0009000100000000000000aba20400ff7e28000000110affffba01000000ff000000000000008be3518546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000180)={0x0, @aes256}) 15:35:58 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) 15:35:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:58 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) write$FUSE_STATFS(r0, &(0x7f0000000280)={0x60, 0x0, 0x1, {{0x7, 0x8001, 0x7, 0x1, 0x5f, 0x9, 0x0, 0x6}}}, 0x60) getpeername$unix(r0, &(0x7f0000000400), &(0x7f0000000240)=0x6e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, [], 0x24}, 0x2}}, 0x8, 0x80000000}, &(0x7f0000000540)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000580)={r1, 0xa000000000000000}, &(0x7f00000005c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000002700000000000000950000000000000004534fb21204a3b7eba5e8b33355621c909fb28e12eb6e7e88ea6cc9aa3c63a56ce436365761e7c4541c0c0000e6c3cadffc8d128f7f7a4fed193fc30a94da4808df8d220088b2109edb019b02ffe76bd9d004d843975ad04b548d290ed8469fce2f56507ed2cc33878272fd827df72448734f77c59df57678271195441281779d64085a3f5a47f93b54bf698ebee9cf6e2d272752194aca0b7948541fb458c168424529a0925a8f5729e850a95c307cd8ff693ce0682a"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00'/248}, 0x48) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000200)=0xadda) [ 213.787902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:58 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x8) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x3f, 0x280) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0xfffffffffffffffe, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x1, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x1}}, 0x18) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") sendmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000140)=@hci, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000880)}}, {{&(0x7f0000000400)=@sco, 0x359, &(0x7f0000000a80), 0x26c, &(0x7f0000000c40)}}], 0x4000000000002f0, 0x0) 15:35:59 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x8977, &(0x7f0000000040)={'veth0\x00', @ifru_data=&(0x7f0000000000)="a63d63ce3a398c457499e5a4dbea5b954a9e1d3cadd640fc89589d9e06a1c855"}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xd) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x4, 0x8}}, 0x2e) dup2(r2, r1) [ 213.844510] audit: type=1400 audit(1555428958.926:83): avc: denied { ioctl } for pid=10928 comm="syz-executor.2" path="socket:[38370]" dev="sockfs" ino=38370 ioctlcmd=0x6614 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 213.879025] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 15:35:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1}}], 0x400000000000098, 0x0, 0x0) r0 = syz_open_pts(0xffffffffffffff9c, 0x200000) ioctl$KDSKBLED(r0, 0x4b65, 0x16d140e6) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/fscreate\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) 15:35:59 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x64001, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") r2 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0xfffffffffffffffd) fchdir(r2) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 15:35:59 executing program 3: clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x7fff}) mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x1, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x22) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{}, {0x6a76}]}, 0x18, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 15:35:59 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080), 0x8) socketpair(0xb, 0x802, 0x7d97, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 15:35:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@usrjquota='usrjquota='}, {@noquota='noquota'}]}) 15:35:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x1, 0x1d8, [0x0, 0x200005c0, 0x200005f0, 0x20000620], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x250) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) 15:35:59 executing program 3: syz_execute_func(&(0x7f0000000000)="64ded9f043f79a0c0000000f38f024e2440fbfc5c4c109ecaff7ffff7fe341ded2d201845f05080000008fc92092f4c462bd9a777dc44281aa39") r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) 15:35:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$unix(r1, &(0x7f00000000c0)="a8a420c4bd3640b338c74cae184bbca3035d6a5763c09bd401efc72a057ab6cfcdef73e6205e3af2de586090aaacb6c687c1a2ff0167fba56ce10991e9a8fa99f4a24b15229589c7fad333da81e1c5da6a4c6b376f245a5730ba8cc56cd4", 0x5e, 0x20000000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000042, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000240)={0x1, "d1"}, 0x2) 15:35:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:35:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000000c0)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x713c3a790a72bb52) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:35:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') sendfile(r0, r1, 0x0, 0x10000) 15:35:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'team0\x00', 0x892}) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xd6, 0x1, 0x10000, "43f594239382129c3ed29bf2764653f1", "daf6c4c3058fe773ac855bb300b5384daedc08f78f1138ff29eefd31f9e4abc3d9d71edbf42569177aa56290a21afaea5f471de41003ac62cca3526eda9df741dfc70b30d5e290adc04d21ecc6926fdac0f4f2c9fe116892846b488479f029491a1407f60a7322e8a508bf94920a9ba7b321ad95abfa588aefe75a4dc39bd312778975cdb9a20f5784e86b3805074b0716a2f9b5b49dbffaf9ec1a35fc9f2e76d1ff5c3fd814c2e625d2d5bfc692a3775b63dd57e1997ddc751f30b7744d2b1cf7"}, 0xd6, 0x3) 15:35:59 executing program 3: syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d1f000000302c8c2f73655f73656e7369746976653d6e6f2c00"]) r0 = syz_open_dev$media(&(0x7f0000000680)='/dev/media#\x00', 0x2b, 0x500) getsockopt$inet_buf(r0, 0x0, 0x19b01c210f62c2ae, &(0x7f00000006c0)=""/138, &(0x7f00000007c0)=0x8a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 214.547261] EXT4-fs (sda1): re-mounted. Opts: 15:35:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:dri_device_t:s0\x00', 0x22, 0x0) r1 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0xffffffff, 0x0) poll(&(0x7f0000000040)=[{r1, 0x8105}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000280), &(0x7f0000000140)=0xc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self\x00', 0x402, 0x0) [ 214.579565] ntfs: (device loop3): parse_options(): NLS character set  not found. 15:35:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$unix(r1, &(0x7f00000000c0)="a8a420c4bd3640b338c74cae184bbca3035d6a5763c09bd401efc72a057ab6cfcdef73e6205e3af2de586090aaacb6c687c1a2ff0167fba56ce10991e9a8fa99f4a24b15229589c7fad333da81e1c5da6a4c6b376f245a5730ba8cc56cd4", 0x5e, 0x20000000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000042, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000240)={0x1, "d1"}, 0x2) 15:35:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:35:59 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f0000000100)="0adc8e47319b2755f6de2386a0") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/uinput\x00', 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000080), 0x800) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) poll(&(0x7f0000000100), 0x37, 0xffffffffffff0103) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f00000000c0)={0x7fff, 0x6, 0x514, 0x7}) poll(&(0x7f0000000040)=[{r1, 0x8000}, {r0, 0x1420}], 0x2, 0x9) [ 214.752058] ntfs: (device loop3): parse_options(): NLS character set  not found. 15:35:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x100) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f109bc070") memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = dup2(0xffffffffffffffff, r1) write$UHID_CREATE2(r2, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={0x2}, &(0x7f0000000140), 0x8) 15:35:59 executing program 2: setreuid(0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x86a82b9162edebbf, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x5) ioctl$TIOCEXCL(r0, 0x540c) openat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) [ 214.873715] EXT4-fs (sda1): re-mounted. Opts: 15:36:00 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x101400, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fd\x00') setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000a00)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000006804000060020000600200006002000080030000800300008003000004000000f6eda8299333b895944ad7827ca72e773e1213d31bf8710dbfd1aaacafa4f3cd847c6d3d89b22fa0cb008cea0f1bd45e80800968afe8afe7da98dc4c0eae51dd7aeea05dba2b9dd34aec1760e7b43a8d5a68c31ee287825fd2074d846c5ab69db17a054dbb0a6f0857d743a0b4e608d42fc4681dbe40126eb2af323478a463c68807a8efd6e48822c6d92290d82ca436e5ff45d76445757e79b84ea5c08822a421c8bc8afd", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="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"], 0x4b8) fchdir(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x1, 0x3ff, 0x4, 'syz1\x00', 0xaf14}, 0x6, 0x10000004, 0x80000001, r0, 0x3, 0x0, 'syz0\x00', &(0x7f0000000100)=['fd\x00', '&selinux\x00', '**&user$\x00'], 0x15, [], [0x8000, 0x7, 0x0, 0x9]}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000900)=ANY=[@ANYBLOB="ac141422e0000001010000000300000000004b27790f2f2226770001f5b4674d425e73a2e840a4e62a3c65baefd72a29ffbe1975465ae02ce74255c4db696b8556fd22a09375d108e61a8dbb4afeb9451163f3f2f1cc18fd339e3420b95d2a48a10d0f3bb487e6fcd1f19a41dd593550920a80cf39257dee9939c69f2d477486239c2e40bb74d12ae6271e63b1541ac8fca95b72eb3ac76dbf18d921ec2fc483fac3bd4861886dfb70ff755bfb8e8a792ed40951671816106fa280775ba0d5f221011ddb241b49aaeda4e969958810a83d3f9603882cb6e13fa7b86532a516e1d473e359dad67b929da0ae5ddb284ece3faabb2305"], 0x1c) r5 = inotify_init() getsockname$packet(r3, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sched_setattr(r0, &(0x7f0000000140)={0x30, 0x6, 0x1, 0x2, 0x8001, 0x5, 0x6, 0x1eb8}, 0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0x1) getdents64(r3, 0x0, 0x0) 15:36:00 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x141880, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in={{0x2, 0x1, @loopback}}}, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x4, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x7fffffff}}, {@sq={'sq', 0x3d, 0x4}}, {@common=@cache_fscache='cache=fscache'}, {@timeout={'timeout', 0x3d, 0x81}}, {@rq={'rq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x1ff}}], [{@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, 'eth0'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@permit_directio='permit_directio'}, {@subj_type={'subj_type', 0x3d, '/dev/ubi_ctrl\x00'}}, {@fsmagic={'fsmagic'}}]}}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000031002908000000000000000003000000180000001400010004000002000000000000000000000001"], 0x1}}, 0x0) 15:36:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:36:00 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1}) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 15:36:00 executing program 0: sigaltstack(&(0x7f00006ce000/0x1000)=nil, 0x0) madvise(&(0x7f00006fb000/0x1000)=nil, 0x1000, 0xf) modify_ldt$read_default(0x2, &(0x7f0000735000)=""/1, 0x1) fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getgroups(0x9, &(0x7f0000000200)=[0xee01, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) r5 = getgid() r6 = getegid() getgroups(0x5, &(0x7f0000000240)=[0x0, 0xee00, 0x0, 0xee01, 0x0]) r8 = getgid() r9 = getgid() stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x4}, [{0x2, 0x0, r0}, {0x2, 0x1, r1}, {0x2, 0x1, r2}], {0x4, 0x6}, [{0x8, 0x1, r3}, {0x8, 0x4, r4}, {0x8, 0x2, r5}, {0x8, 0x4, r6}, {0x8, 0x0, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r9}, {0x8, 0x0, r10}], {0x10, 0x7}, {0x20, 0x5}}, 0x7c, 0x1) 15:36:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00!\x00\x00!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r2 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000280)="f9e869f0550f1c2d24391d94063dfd6aac628c0c120fc00cd75ea0a28143ea69884ac583c98dbd6941c15dccf73336a3ed20446f50e9b3777c2204b5888495b0a655736c774c11afe18836d4fd253535f16ea5492085bbc829ed41c49ab600cf1a7087d08b3004b08a1b65ad3487d3333ceda894907bcfc44b2a972de8d1269316a061786c63c4f42f03b64fda9bbee0203b7622c3feb7997455d56684b19e6c4e1783420df09400b9605fe96df8a33c43f1eec14c4f0a49d4541c05f85f7cf4ef84dc097c86615d7adb4ad4f0e58ae21e8b0b3eedb8a5cbb2afd1e9f27ae4a91c5d779803980a43e1fb1b33b5bdc9c21a722365379f353e41", 0xf9, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x4) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:36:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendto$unix(r1, &(0x7f00000000c0)="a8a420c4bd3640b338c74cae184bbca3035d6a5763c09bd401efc72a057ab6cfcdef73e6205e3af2de586090aaacb6c687c1a2ff0167fba56ce10991e9a8fa99f4a24b15229589c7fad333da81e1c5da6a4c6b376f245a5730ba8cc56cd4", 0x5e, 0x20000000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x7f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000042, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000240)={0x1, "d1"}, 0x2) [ 215.061958] EXT4-fs (sda1): re-mounted. Opts: 15:36:00 executing program 3: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000280)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x1, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000500)='/dev/adsp#\x00', 0x800, 0x40100) r6 = accept4$bt_l2cap(0xffffffffffffff9c, 0x0, &(0x7f0000000540), 0x800) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000005c0)=0x0) r9 = geteuid() getgroups(0x8, &(0x7f0000000640)=[0xee01, 0x0, 0x0, 0xee00, 0xee00, 0x0, 0xee01, 0xee00]) r11 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000d40), &(0x7f0000000d80)=0x12, 0x800) r12 = memfd_create(&(0x7f0000000dc0)='--\\]\x00', 0x0) r13 = syz_open_dev$vcsn(&(0x7f0000000e00)='/dev/vcs#\x00', 0x6, 0x402000) r14 = syz_open_dev$binder(&(0x7f0000000e40)='/dev/binder#\x00', 0x0, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000002100)='mime_type]keyringGPLproc%\x87bdevbdev\x00'}, 0x30) getresuid(&(0x7f0000002180)=0x0, &(0x7f00000021c0), &(0x7f0000002200)) r17 = getegid() r18 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000002240), &(0x7f00000022c0)=0x60, 0x800) r19 = socket$nl_xfrm(0x10, 0x3, 0x6) r20 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r21 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000002300)) r22 = syz_open_dev$vbi(&(0x7f0000002340)='/dev/vbi#\x00', 0x1, 0x2) r23 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002380)='/dev/vga_arbiter\x00', 0x14000, 0x0) r24 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r25 = openat$vfio(0xffffffffffffff9c, &(0x7f0000002400)='/dev/vfio/vfio\x00', 0x301040, 0x0) r26 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r27 = socket$inet6_sctp(0xa, 0x5, 0x84) r28 = getpgrp(0xffffffffffffffff) r29 = getuid() fstat(0xffffffffffffff9c, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r31 = syz_open_dev$radio(&(0x7f0000002500)='/dev/radio#\x00', 0x0, 0x2) r32 = socket$inet_dccp(0x2, 0x6, 0x0) r33 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x321003, 0x0) r34 = socket(0x3, 0x80f, 0x2b) r35 = socket$caif_stream(0x25, 0x1, 0x2) r36 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)=0x0) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002e80)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}}}, &(0x7f0000002f80)=0xe8) getresgid(&(0x7f0000002fc0), &(0x7f0000003000), &(0x7f0000003040)=0x0) r42 = accept4(0xffffffffffffffff, &(0x7f0000003080)=@nfc_llcp, &(0x7f0000003100)=0x80, 0x80002) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000003140)={0x8, 0x3c, 0x1, 0xffffffffffffff9c}) r44 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003180)='/selinux/checkreqprot\x00', 0x2, 0x0) r45 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000031c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r46 = socket$bt_cmtp(0x1f, 0x3, 0x5) r47 = accept4$tipc(0xffffffffffffffff, &(0x7f0000003200)=@id, &(0x7f0000003240)=0x10, 0x800) r48 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003280)='/dev/hwrng\x00', 0x80, 0x0) r49 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000032c0)='/dev/sequencer\x00', 0x2000, 0x0) r50 = socket$packet(0x11, 0x3, 0x300) r51 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003300)='/dev/hwrng\x00', 0x0, 0x0) r52 = socket$nl_route(0x10, 0x3, 0x0) r53 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003780)={0x0, 0x3, 0x18}, 0xc) r54 = syz_open_dev$vcsa(&(0x7f00000037c0)='/dev/vcsa#\x00', 0x80, 0x800) pipe(&(0x7f0000003800)={0xffffffffffffffff}) r56 = accept$inet(0xffffffffffffff9c, &(0x7f0000003840)={0x2, 0x0, @empty}, &(0x7f0000003880)=0x10) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000003cc0)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003d00)={0x0, 0x0}, &(0x7f0000003d40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003d80)={0x0, 0x0, 0x0}, &(0x7f0000003dc0)=0xc) sendmmsg$unix(r0, &(0x7f0000003e40)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)="5559a30e2bfe4b72ae31fdbe1a47d9db65d0b0932a9c3b950355", 0x1a}, {&(0x7f0000000100)}, {&(0x7f0000000140)="b1eaf46eb4186130fc352994fbe62f6248484c8eb3ef2c2b4d73aadd311954f9105f6bedebc280ff7d832a2ce29b1e5ac51985a4cf622ef6ea4e6022408be840c279c457d66aa6a2808e51fe465059561b2444f069f31d333452f0c8b88e3fc6d634505a918ddef776917407f07ac5c120665016066fdd76b1665770faebd59a6f28937e7982323f98f4648d31b00d9cefdb5a04c3e20ec55a9cf61e10d1a44e6c10c227c144cf08", 0xa8}, {&(0x7f0000000200)="3b3620588f18ce725919649924f3", 0xe}], 0x4, &(0x7f0000000680)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x18, 0x1, 0x1, [r4]}, @rights={0x20, 0x1, 0x1, [r5, r6, r7]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x78, 0x40}, {&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000780)="c829e538868b4ae9a8185894b5359e29834b05e68b20f7973a67285974077f5442adea11b36fa8ac8a46e8d3e992826b88881f684d67fb75e7af04b58ea2099cabb92be6bdf61956bf5829d03a8dde0f5b81468a26e8efa626be3bceaee1424e82756b393f3e65401c2774f76ef00d5cce96a27c270d59ff7f1b4e3d15e2f056141cb078f7632281f8afef2aeb71bd83873bc8b653242c56c7a212b4", 0x9c}, {&(0x7f0000000840)="baf45ea644ce3d9e177e4914233fc21ba7b4767a6892d784db72611096718a9d06ea85a5639ef2d12b15bfb47a5bf60512e31391c6511eb9c57a34485a7bb690e9448ef4e2059bfee8aa5879f11e9415c9ace743ae565c94729190c6cb2148f844c4bc99e2fc551ba6303c9f7b290a94c4f14f9e4f378134fbd39d870cac16659b5eade001ccbb823fe087f5dc48a133cdc8ec8a1c2b0868b80bf534d4966a91ffeeb3b501046bc2c18e6c54d417bc98f3eb0bdc6b71a637dccf83af003be1305e9ead7f8dda803f0acb6baea5c1cb1476a0723d", 0xd4}, {&(0x7f0000000940)="043b756d8206854de883ee439e92f7eccf7965d03154adf358a2bd6c8cab63ccfd91a98b2e69ac1eb15578ecc8fa6760c11c3221a7d697cf6a2e57eb7db615728c0a274071d6680fcae430c3b2b089eb679ca9e4ba2afb0bae91d7f2316aeabd91ed4b0f15807691edb5a07369f7d2de346a4d2034c67a3685be27f8f8c4", 0x7e}, {&(0x7f00000009c0)="bd185fed4551e977583ade821280d0f1c029a990543186be37fce79c952a7b48b35972569f0b33eacd58374162eb5b73ddaecd0fec33230160191b7efe29447f4edb58ac87c41eb68f11d38e3f9648405670ac18315a2bfe50dab668314145cb4dcde0f922d3d858611dd04363f7bb8fdff528186535da0bb4a9a3930badd1187972f4c423ac412056248a84f093702a8e825e416c9807b8700c0dacebfaf361b6296a86c0f7b68f04", 0xa9}, {&(0x7f0000000a80)="4aa17d23bcead35c68f78b2d0dd6be76efe25607e8db6def55b7d91eeca3c224bcf57bb3a9329c38e0c6756b997bd23fd9bee2eae7b8f822d00dec61c3ad876b29cd0d3e899d3a3901f2331475f06829bd1c", 0x52}, {&(0x7f0000000b00)="0d60d5f56b4ff07a1ccd3cc701a78627072d832c076d912bcfb44715ea04ab63223a4002decf8ca9bda14a3a88fba75e730eecb2961145cde1eafe9280a420ed12f6288aa3c40c46ef0dfe839a272c2aa65449cb1bd9e763775582e49c2bbad2e73777397a526fc30d749864865cecfc8a6d5b232c689d4ab0bc207be42cb7627c7c35c47c9a75696189a460c63011f80167d00dc5df0ee843aea6aff9fc283684b733d7d72907a624c10fb057bdb4f0237d3e9e7c8faa7b0f3853c3f0d85af33f9ad3974a27e9cbba564c506f2161d2538a12b121cc50be5fe0e6ec3bf9b72916b4a2bd2daef959dc196537c68d5c50b8ea4dd0c3668e1e2f3932cf", 0xfc}, {&(0x7f0000000c00)="e815cba4e61fa3888c61b962911ddd1c661db4366cc5d67d4865998452398eb1ae687803eb3bd151c1ee8165d00152a15548dd653c0d8d61649cee0c35f719e9f26d898e634383c6e6414ae1d171b50f6e0d47bda2c12882333fe8d207f243e4458993999bb493312241f96802b58dece47b778ba9c0388a6caaa90ac2e0cf0f456fe00d67561736f682f21e0bd6570a65308b6968e87efa8f85df88cea446", 0x9f}], 0x7, &(0x7f0000000e80)=[@rights={0x20, 0x1, 0x1, [r11, r12, r13]}, @rights={0x18, 0x1, 0x1, [r14]}], 0x38}, {&(0x7f0000000ec0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002080)=[{&(0x7f0000000f40)="8183d44d188789", 0x7}, {&(0x7f0000000f80)="9b714cb05f4bd7a844e725c5f7d40d0aed46e3c3210a8a5579ceed37e34aa059ca61a76acc942e5b23b2eb3a5a4d6bad72286f51", 0x34}, {&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)="6889ab005ce45c6b1279429bc0329d54b8a1bd443023d7ffc1676b68c148e22de576731621ad6197c8ec6d7c15cc0c2fc2f24ad0e3c16dd721c19c49932dd25470b09064da07d1c25c8c63dfb26c92fa", 0x50}, {&(0x7f0000002040)="aae05e8aa77640350e257b94387808fe", 0x10}], 0x5, &(0x7f0000003fc0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="180000000000000017000000010000f8", @ANYRES32=r20, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="00000000280000000000000001000000010000006777cd4979371398d38a77a6009fee02821e4563da0f1239831b856c0e21864f3cb7f900e75f30e00c9b4dadc594b80c5e827070232cfc05805c3252824831b5acd55d280130f9c49338d8e8a715374600"/111, @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r38, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x40000}, {&(0x7f00000029c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002a40)="7f0767", 0x3}, {&(0x7f0000002a80)="a3f877d63b5441e3c8c8b398e94423f3f9625e5b3d82f0c10c08bdb387e7854381cd6629d0eb9a3f52b6c1930158fe4a3302c7baa79067b964f68ebc16b321297faf7ba5dde91248b30c698fec8d3f13745611692c982e10f39bda4d2eee253da40ad3c6ced96c8b4624ce08f77a83d0ecf9c659a9754fc338f7fe72cfb8f9d0fdbbc5e988a3c9153d8bb8ae66d45c978b7d8b4175dc9515359271a828b6a134a1ee3e91a195c9aac486d51dc25cc8297802651cba8363e1358ffbf7a6103e1e482c3c115f00cf1f4ed4b33f46af78bedbf844c48c5fe9b88716b35445fc8156c375c86850a1f914c1e3", 0xea}, {&(0x7f0000002b80)="5c2db1599b46712bfcbb5274ed08b4d5ccfccfb62fc90617989ed1bb1e31525cd8c7044f7eff489998e0a5c27a3445931a3d349ddac0e803b3c226d0328351eb00ef835e1dbea48fe77482df4c4542dceb9ac0e705d3c184653f2b39217ab2929bc3a8641de5382d59a1468e18ceccc920aa5d4d4d1d16320fb005de053d9f3915539aff393901", 0x87}, {&(0x7f0000002c40)="971c2bc55128c7572db07d7462dfa1aa8866d11b1c86a823d5c570a627a9ee6d4bacdbce4e5d0969709c8d7909a07c229645f37acba9ae82f14b3077af190b0c482b4e5264263efe0d93997cb672ddceaeeac0c1f4bde7ac6652ae0c2fa0f06d0c41eb651e524539adb99b7729813ee78b677c1ff9e663b94d7e26bf5d5c5e852ab4bc0b98737d26fc072815a986f1b3", 0x90}, {&(0x7f0000002d00)="c5a0d62e6c189eb561dc8390862e5a011477416eb36364b79f4bb810843726796b78252c9882d82e2ba17bac0ce446418dfa082a426a1c6eb0f27374df", 0x3d}, {&(0x7f0000002d40)="f34f4d61d1e7c87f444a9eb9d7c92fb829e2c8058567a0dbf4218d6e3d690f42b0b811ed13a4c0aca95a9823d0bd0d9cb8c486be59d568656309ec05b7e34eddbfc6aa26128a2f77381bf2465a0e7ef48d31d0a7d2a38540158311bc362058156bbbdc9c1ddec7adf7a5a1cf8d16322040a9b9ceec26fc1ff645888697536dfa564adeaa0fea07", 0x87}], 0x6, &(0x7f0000003340)=[@cred={0x20, 0x1, 0x2, r39, r40, r41}, @rights={0x38, 0x1, 0x1, [r42, r43, r44, r45, r46, r47, r48, r49, r50, r51]}], 0x58, 0x4000}, {&(0x7f00000033c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003440)="e59f248eb96e1300e4438743d34f21b17e8194ac0e5a49a1ef90eea3c57642b7f2270af2f06188963094209bb145e7f98f0338bc8131729330f9a720cc934f37c06a7943dcb303c43826e234db86fa6a2be4c42ab552d46b1b6fbf7abe0d69eb5f352061bd181db37f324c7f1236d8bf687cbcd2c7d64a08d8c105ba39d08b7d1ac840418340b6b1866649f7d65c1f7952a44e7d6929ac991099a3cdf73279e38bb36cd06cff6f349803ee010bf34a3a387b24b8acfc98bca99392f1535e7b9f63510a68b14a5ff2bf682c92a06067e629d3d3fd6a", 0xd5}, {&(0x7f0000003540)="886dd3b3132df40282b7fef3dac89f748ad24708937d32e4c41a0c66cda1716992fe6812f78862cf3e786e08ed696be5", 0x30}, {&(0x7f0000003580)="4cf36df36e8c85ebdd9e3da53a794fbbad706cd1fae0aa2210581a3f90e27d8af7ce08e05e25a21a7d67d0ac471d23e36dfd832caf79d44dd67559fba24c59db6f2552faf013b58b06b11a1c1206e9dff421ee2bbb17d43e5c4d860fe108d334463918e2d251c33f0d6775fc6c913ef8f7a524c10836a098af1922e5c8fd66f3d5620c7311be304b52feb9610ec7f2212594f33ae7274a4af04cf63fdeb951425d9be358760381f8f4560352dc2fee4dcdab1ade51942ca1507a4e033ea5dd243fa80b089eb8fae6ddd3b7f5f7ec59341f427c25932b06c0", 0xd8}, {&(0x7f0000003680)="af4b09acb6833bab882fbf3918f11ae31250fd649f3c44391c31510aea39509f8a4407c6691927433da8aa06394b5b9d3d6df3d557ff0620fc4e1708b1967f6749f31547ff2f54f3c8c99b7726658619e8063e7792e12daaa4e6c1057e08ac2d25e50f59ecffb72e0c4341fe31301300ede30257df95ff2f27e08f37444474c51a01568e2db34343a0a93cac814db79727ff71f677f9bc7bcfd4f95bb5306ef00b2c00b1daaa3d8c1e510b6f5c19e18cb616c2a486c068b243347b377328", 0xbe}], 0x4, &(0x7f0000002580)=ANY=[@ANYBLOB="0800800081d5eb01343d7a7f0e85686741c7a3e1dde5c0ef206cf10484682d9e7521d7b9e1a00dfd22370578eea9ada311cecdeaf2737d4f4ee7f7ca0cd4e4de96bff580b6cd704fec7d195ade97e4564e1bbb726086c519c1e019dc3a3cefc616f2bfd54492ec0b74c54c4d05a1c8bdeb1f7152269ce378de69dfbdd2592050f90600f3eecc6f49e141c1f28043c1e6c4bc39b688237e351b868121b03a145a9944f98f8f571b2da1c76dda99f55cdf126f75900d8c14745788bfbb18822d097843", @ANYRES32=r52, @ANYRES32=r53, @ANYRES32=r54, @ANYRES32=r55, @ANYRES32=r56, @ANYBLOB="0000000010000000000000000100000001000000"], 0x38, 0x1}, {&(0x7f0000003900)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003980)="02c057bfe4ad79adb6b58e14e22b0a85f08918aa54ec65ab2f8f7354ad75c29636e95c33d89ab8bc77a3", 0x2a}, {&(0x7f00000039c0)="b46feb96ba8ffdd62068f75f6e062522ea051c28ac98d161e9fb135d48f64a819a6a012d268d73d8857f255f5f8e6901cd6c4baa1d97b7e3786be3881afd4abbaf071e997ee682e0dba3d203f29db4657b15e2821a009450113b9d1f153e80535ebcda67f627097cfced45019dd9f57613d91c001b372950e41fd72d6a3c97265845d272dc2f02709d13ac1263a256ea073e254221148483159e49ecd74a753b0a47c28552026b2f82bf04194cd7207bea314b2b0ae0480f08721384c58b10e66600198b0c8d5342f380f96b83454752b34a3b237e98306e805be4feb7491dc2816bd120429f1011270a15900e2b9195db20608842664799a1b9", 0xfa}, {&(0x7f0000003ac0)="e008814ec53de539270210fdda", 0xd}, {&(0x7f0000003b00)="419b9ae19142a28bb27c570a3faa748401322ce2c418dad8f8a17e176d37bee677b584998b84e43f768bd778c2c45f7b91df73eb07bceb35629e7e4d929327c5c3a850f5fb63bbd7ecd95737daa9f30041b4bc1711944acc0d15db50418f91e7dedaf77ac343f350fc65810fde1bf0a5839bfbf51c854a260147833ce4d70639", 0x80}, {&(0x7f0000003b80)="578859d25fc032594f3312db3a43328e2e4cb2ea5d236b13b0c8e18c8c818621bc57ff59ac517361a67b7c80e921d07c311a9f3b3736e1f9e9b2afa0a2169780437fe2a642224ff7c8b3e9abaeb7c17fc6dc4f3da118cdda957d07735c1e15083781aef1839ded8add28741a5fc7d7b579912ed5401475c30701bc959f53ae5980b8ec013b1527ada85ce99551a2a994d74bafcc0b07", 0x96}], 0x5, &(0x7f0000003e00)=[@cred={0x20, 0x1, 0x2, r57, r58, r59}], 0x20, 0x4000000}], 0x6, 0x20040050) mmap(&(0x7f000032a000/0x1000)=nil, 0xfffffffffffffdef, 0x0, 0x2000005cc31, 0xffffffffffffffff, 0x0) 15:36:00 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x7a04, 0x0) unlink(&(0x7f0000000080)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x100000, 0x0) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="157b822a3f9023f06a1d05487816dde475c356088f13039bd1bad18d620ff6187b5cee56b65ec4400046ebd606ebbf3780d6b7490080000000000000d6f32e435abb"], &(0x7f0000000380)='./file0\x00', 0x0, 0x5010, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4041, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x420, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) r3 = creat(&(0x7f0000000240)='./file0/file0\x00', 0x22) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r2, r3}}, 0x18) 15:36:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000037c0)=""/4096) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x105001, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) [ 215.182447] bond0: Releasing backup interface bond_slave_1 15:36:00 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x70, 0x100, 0x6, 0x5, 0x6a, 0x0, 0x6, 0x800, 0x4, 0x8000, 0x401, 0x6, 0x975b, 0x8, 0x0, 0x1, 0x7, 0x7, 0x0, 0x9, 0xecaf, 0x8, 0x80000001, 0x6, 0x9, 0x8, 0x1f, 0x3, 0x2, 0x0, 0x8ca0, 0x0, 0x0, 0x4, 0x5, 0x1, 0x7, 0x0, 0xce9e, 0x2, @perf_config_ext={0x3, 0x54a3}, 0x2420, 0x2, 0x401, 0x7, 0x1, 0x8, 0x5}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="06"], 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000140), 0x7fff) 15:36:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x20000000000002, 0x0) r2 = dup(r1) getpid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) r4 = getpgrp(r3) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = msgget$private(0x0, 0x201) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000800)=0xfff) msgrcv(r7, &(0x7f0000000d80)=ANY=[@ANYBLOB='\x00'/4094], 0x1008, 0x1, 0x2000) ioctl$TCFLSH(r2, 0x540b, 0xfff) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0}, &(0x7f0000000480)=0x20) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000700)=0xe8) r13 = getegid() sched_yield() prctl$PR_SET_PDEATHSIG(0x1, 0x18) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000740)=0x0) getresuid(&(0x7f0000001e40)=0x0, &(0x7f0000001dc0), &(0x7f0000001e00)) fstat(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000980)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000001c0)="675073ebc6622ae2c2fd74dc86fff37097820d31e5bc2998b8307e943c3f861cde8720ce174d76249b19bb382f50104632150b0d150070926c91f63cc674b0a765cd862dcd28b5f9f09409c731c5e7d3ea", 0x51}, {&(0x7f0000000240)="ede48953e335d1450775a38df5f72193fd2d252d213bd8ea9dce8e26e17ad4e3f6770ebb53d904522ab341aa17d1134a8ffb6f80aa1e46187cf55d1bab83d9719f1967884ab4b8f3aec973653fba933d5db853977309943ebb1f7cce868df80722bf0f5da9cc6df6f9793d3849ff", 0x6e}, {&(0x7f00000002c0)="b66701351966c9998a0ad3c7d238118be55c31225e41cec87e7b1fa27bd3e415e2cb9e308770089af7a23320159b045723c8ef3a2d38e1e33dc06e093a899b925135023429d1ac3744d4691ed7a06068dfbc097aa753c3f7427254f75c9b", 0x5e}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="6b166f157ffea544f2bbb493ce65fbc583fc7cd5cd552c479778738daf713993bb356cf9fd42198e6af69afced703d7e18c03ccdf9687b6127da0683d1f3364736baa1", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="a90b407068fa9600200000000000000093f5e4c8", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x40080}, 0x4008010) sendmsg$nfc_llcp(r2, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x27, 0x0, 0x2, 0x7, 0x9, 0x9, "2fc1e8546c55023601043143f618cfefe7c1ddca9971dd33b18e01cd77da13f2049a23641e07be6b0b8dcdaa0f1de3ba05de3b10d18fa4d8deb6493b6a1165", 0x20}, 0x60, &(0x7f0000000940)=[{&(0x7f0000000ac0)="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", 0xfa}, {&(0x7f0000000bc0)="850deadea2f37b6c90f6931eaae8c709618d7f63d050676a43b886658af6b65ee92cbc771605bde7d47d10121f7e2a0916a7d8a630999cd9c2663562f437cf4f5b565f98189b42472e2e28a74f183b083ac19028cc0be6bc8ab8bbc3077792e33507d2ac29852f4e70e2bd6651a7153f99e1a3c52c083a843c23123e7a771c78a08d4481fa5b958ac7ab02db669c03f350f8f39c3c0b2f2b953f3c26871c8d0eba7734e9588b130cd8b2f6e2557133", 0xaf}], 0x2, &(0x7f0000001e80)=ANY=[@ANYBLOB="18000000000000001901000039000000db3f842a17000700af7a1307cadc4352b92acc48a064a0087c50454e4c3faa67ce73482644f9a2d74a1bd4a4fcfe1a00f2d39a2bf0c0c31fc5deba5bb84061f48ce689a1704b420f5c485195a860ae0917dd96be5366261e1ca23090febd6202eb832919c059e15b6778259fab5fda73da47abcb9f63aa1ae415112b9087cca4e06b5eb64086000000"], 0x18, 0x80}, 0x44040) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0023021dfffd946f610500070000001f0000000000040008000900e3fffe7e280000001100ffffba16a0931c09000000000000120000000000efe34d8238cfa47e23f7efbf5400", 0x4c}], 0x1}, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x6, 0x2c0) [ 215.272359] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 215.286114] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:36:00 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x19}, 0x80}}, 0x7fff, 0x7}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x81, @local, 0x472}]}, &(0x7f0000000280)=0x10) connect(r0, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x60000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0x50, 0x4) 15:36:00 executing program 0: socket$inet6(0xa, 0x2, 0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000000)="b603fa70280a66ecf6bd7d9bebcc1b", 0xf, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000640)=""/69, 0xfffffffffffffecb, 0x0, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0xfdd3) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x0, 0x80}, 0x4000004) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:36:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)) [ 215.320911] bond0: Releasing backup interface bond_slave_1 [ 215.374240] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:36:00 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wf=\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',\x00']) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000080)) 15:36:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00!\x00\x00!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r2 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000280)="f9e869f0550f1c2d24391d94063dfd6aac628c0c120fc00cd75ea0a28143ea69884ac583c98dbd6941c15dccf73336a3ed20446f50e9b3777c2204b5888495b0a655736c774c11afe18836d4fd253535f16ea5492085bbc829ed41c49ab600cf1a7087d08b3004b08a1b65ad3487d3333ceda894907bcfc44b2a972de8d1269316a061786c63c4f42f03b64fda9bbee0203b7622c3feb7997455d56684b19e6c4e1783420df09400b9605fe96df8a33c43f1eec14c4f0a49d4541c05f85f7cf4ef84dc097c86615d7adb4ad4f0e58ae21e8b0b3eedb8a5cbb2afd1e9f27ae4a91c5d779803980a43e1fb1b33b5bdc9c21a722365379f353e41", 0xf9, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x4) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 15:36:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="800f04000000009d190003000000000000000102000000000100000001000000004000000040009160ee9c4399c97e006d5ebe5a0080ffff53efd3e856d34ece6ffb9585929e2ae23b76da0500000000000000f3d6af211c08c59ff924", 0x5d, 0x400}], 0x0, 0x0) [ 215.496399] EXT4-fs (sda1): re-mounted. Opts: [ 215.533606] bond0: Releasing backup interface bond_slave_1 [ 215.545810] 9pnet: Insufficient options for proto=fd [ 215.610605] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.632688] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.652819] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 215.698780] EXT4-fs (loop1): invalid inodes per group: 16384 [ 215.698780] 15:36:00 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='loginuid\x00') socket(0x9, 0x0, 0x20) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) sendfile(r0, r0, 0x0, 0x38000000) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/133) 15:36:00 executing program 3: r0 = userfaultfd(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x400, 0x2000) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x5, 0x8, 0xe39}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e23, 0x2, @loopback, 0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 15:36:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)) [ 215.755067] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 215.770582] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 215.789346] EXT4-fs (loop1): invalid inodes per group: 16384 [ 215.789346] 15:36:00 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x5) syz_mount_image$msdos(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) [ 215.913273] EXT4-fs (sda1): re-mounted. Opts: 15:36:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x3, 0xbb1, "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", 0x81, 0x4, 0x9, 0x8, 0x72, 0x1, 0x1ff}, r2}}, 0x120) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r3 = socket$inet(0x10, 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x7, 0x400) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="240000001d0007041dfffd946f6105000700000402000000000002000800a3a20400ff7e", 0x24}], 0x1}, 0x0) 15:36:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000300)="0adc1f23860c07bc1ee76aa4e03aead7251e0086cb9487fda251bab9db1de6c99dd003acb6a4e2a0cd27bd38c0ad2db7405f68c4bdca0eb5a8d4d83e38039ad6a7b9acae6f12a167224e1c473834bc13c502db49c69ad2fd719ffbeb7685ec48c592b6bbd3de55f9b55e3181665bdcdbeb441673d74a2fb045bdd8bef332363217a347eae2e291c1fe13f99c035cd660de0db41d6097ed8a57a21cba6bfeb06c3444277214d49a18a1009ce0cfe53123a0cc787f4865eda7d37663c667a1407464") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x163882) dup3(r0, r1, 0x0) 15:36:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)) [ 216.211868] EXT4-fs (sda1): re-mounted. Opts: 15:36:01 executing program 0: socket$inet6(0xa, 0x2, 0x0) gettid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x1000000004e23, @local}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0xda8, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000000000)="b603fa70280a66ecf6bd7d9bebcc1b", 0xf, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000640)=""/69, 0xfffffffffffffecb, 0x0, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0xfdd3) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x0, 0x80}, 0x4000004) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 15:36:01 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x5, &(0x7f00000001c0)) r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1ff, 0x40000) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000001c0)={0x21, 0x4, &(0x7f0000000140)="73b77bab2991e66bfa8f67d19ce54aff1976e497db30dd9deb2258e6e89196292a42cb45c1f94b2f2b9d7d3fd30d57cfeaaba463818a58abfb52e731c24597efdbbd671bb37a56ce4f737560ba05db3f75a146e2eeba1e7d14346ce945a6f22ebb", {0x8a32, 0x5, 0x0, 0x4, 0x9, 0x3, 0x0, 0x800}}) mlockall(0x20000000000000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xbe, 0x101000) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x958, @loopback, 0x7}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mlockall(0x4) 15:36:01 executing program 5: mmap(&(0x7f0000003000/0xe000)=nil, 0xe000, 0x0, 0x80000004031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mlock(&(0x7f0000008000/0x2000)=nil, 0x2000) munmap(&(0x7f0000006000/0xf000)=nil, 0xf000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000003000/0x3000)=nil) 15:36:01 executing program 1: gettid() 15:36:01 executing program 4 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:01 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file0\x00') ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x4, 0x0, 0x1000, 0x9, 0x200, 0x6, 0xf05}) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000100), 0x4) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getuid() r3 = getgid() chown(&(0x7f00000000c0)='./file0\x00', r2, r3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") close(r0) 15:36:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp\x00') write$selinux_create(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c9) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(&(0x7f0000000400), 0x0, 0x400007f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000280), 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="d51835cec3214a89cac8b1da190768f469a26ca02e6d041a657d74cf168562c527e3870d4edbaadd2949a7872d38cfe3b0509c2f7a4eadf1799d0d8f3025d921ddb7adbaa4265fe82f5cc46b722ec5f767b12330df22f34202b050e519bd46d22f0044390666bb64e022251f2a57b69948677cd1606883f35e37025147e4617b65003c56ec1eefc0de74b7311ccf9155f00ee2d17684185f98c07f93754ba391f913016b123efada576e", 0xaa}], 0x1, 0x8) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000440)=""/97, &(0x7f00000004c0)=0x61) 15:36:01 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write(r0, &(0x7f00000000c0)='\x00', 0x1) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) [ 216.421642] FAULT_INJECTION: forcing a failure. [ 216.421642] name failslab, interval 1, probability 0, space 0, times 0 15:36:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x80000000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000780)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x1b0, r4, 0x420, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x60, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x6, 0x9, 0x9, 0x1}, {0x7, 0x7fffffff800000, 0x3, 0xfff}, {0xffffffffffff0001, 0x0, 0x4, 0x3}, {0x1, 0x101, 0x7, 0xfff}, {0x400, 0x1000, 0x2, 0x13}]}}}]}}, {{0x8, 0x1, r6}, {0x12c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x94f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7f}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 15:36:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x10000) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x3004100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x1090, 0x6, 0xf, 0x220, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0xa}, [@generic="5b58a620e6a2c35c99", @typed={0x8, 0x67, @pid=r2}, @generic="bf3231df6b713649a8ef76a9e8fca90a815e55644906f2ea2d60966c934166f78785a8aa4b4cf021aeb9388f3f49d80a29feae28ecf39b82bac92c46ffb1ecb550c729c5cb82720e803aebfd0fc90db57eb282d80c7bbc87f1b2d26bc53b8f", @typed={0x1004, 0x4c, @binary="f32fc81b353f1360b1f2bc6ad82d9e27102005e36d0438d3b9edf64af5f708a2bed09cf7e4323fc9205690e918a404afe98dcd6c5ac8847773f1496b41d5570481fd68bec945f73c0dfb979e8ee1eef73c89f6434f047821a993887cf5004534b24f1849f328385503166d6ae1439a63b4823862d8bbffb9e7385628814c6ab0e14a18d8453ba2970fa78d772adc218496f06cd6e72e99068f7ddfcb510021b72afb5407bff4a1e086ff122cae42b7eb188ffa5c720e9b0e09db5cff86c8edbad404a0ab926c52964225bb0284b7204e60563524931c66f7e3e8e6ce445f7b4f838c8addab54218babb56a0f0ecd0069134f44c811ad2b0fc391ca703a2a05154478ac34d97df7949d084cb039f56ac4386cc2d2778de5344754b519035adda26596833eca951b95f79ff43cdbed636862f0017b635568887110cd39d1154e0e3048e331b660ba6ea4d488b5fe823b4f8b06a51309153518ebc63327ddd8baf9203a381f2f43a0fbdc73c0ce7ca6edfa847a79de14759b46d53e026a7aab5150e16705116e537886aa990bc1eebcdc484040806bffcaa5c0a91c96bb23ad0af4b0644ed7b5f6af441280887010f644e67e404c5fb5f9863a11ef86da8862759e35e0646a9c8b34af28a503d6c1513e215f700f4b7a161a8d43f2d04d6b1477d71dae8888feae24e3eb2be0db1acb996cf8946ce96943dcd1d2f37353cb89426c045ae96a6d5d8fd9c53db38164a551a7c37db78fbd267e232883433e94346f74af8aebe559557a5fc773fbd1fc24f3e08cdc23832956d3a65b4df8cff9477f4bf04040bd9eb4aed4fe474be52ed9bf5ddda2084accb4f27a2734a4e3de05a12f7e5421db521d76e70ba7310b547cffcb19251ea624681659e8d2beb6c58549abca21715e10533ebb9d66271a0f7e5a3addaed45fd9f3cbeb78f4054c9646c05d45a8fe49b0f606b2bc40ba249d11a4467ea6a79edc2d1858d89afd7d71562bf63696894088ee4e89507f5a671d23c629216e433c269c441be87ece85222b021f6c784955871dad2a34d069fb2a8c980ec889846fb798b4b461caf732db3b83c4684c9c2cdd0b2462d0e520219583755afcfeb65c78096c99b5223c3a4a525f25ab632949fb0fbcc149e386c7f6b482d0cbe5ae7e02c04c5e48ad4240307773776d16bacfd84ae27f5cc65d069cfab0929b3509516bc9c37265c9b8850f34ee03d589d6e2c8c448908274e4ded949cada9b402698683751be3cc0c03466321e65629d64e93b3ffd0ef9dd0f99a329edab9ccc9cd5b479dcafcb6aa0f82f5e8d8b83c0e08ac0946270c000a904cfd2954c63ebbb075fe60ff179ef6898fd570ac481b6c5d7e17c28f4cc98697a245e50af70b0749eb6233424c852ead4136f73a891277fb1909e23efb5f340bd41ff744260ede3491f2cde5646cb8c8ca8348148721661396667dcc735e93a082820220105b5ac51256345365256bfa9840a22aa3b606853e7adb8943fb8f8fe8b8874bf96bbaea35f169d00b31931f1dc6d8ca07e536ead2d26a4378929895c0bcae46c0cdaff2412b41bb573cf192990de67b4ed85a076aefaa389af184a1d2b61dbb1818d19930947e77113c6b2781248bd7a64862680eee39719313791bd595a12ab4185218d400fe5595cf1ac08e02375deecdd8a3b89634edaf71750cfd2eebb6a2e8b0bac3fb30f89a464e3880a700113a085c60e24d6ce1a99aafbbc14fd2224eaa05ce93ff8d611c78a4e2eff6d0a1bd0e20e85f2f4dfd28af06df9536daa5056658659a45b8a9be3bb40d703025cbaeb5f37943f26de9a9701f0299e4c7bffef1ab43e677ec0b5613267ac5e531659978ef6344074ed95b5adbeddcc4a3444187e9d8fef2cc8a1120d3d1b298ea8e037df1035c00c40d2d11c145b7e747c542a02c32546e2db0502805b65988e8f4db8a906dd2f3617ec9b93f0aeac053963b3a3e119801a9358abec53946f8b878715aad614a3c50830549a8ea92d9519895f130529413a41dfc67378c234cdd180c2fb54f9d7228f411fb9f8490391b61014f52ef5044dd5b3a4af9d6003c0f291f4046ed371884392fd8943bdd2d54a9d54c71e2f4576940bdb5adf61ee336284c24e8997293d06cfefd623f258ed19a7e86db8c2fecea4aa3c2be89d57e0f92d1137f046ee07cb4a9b8dc00fa9984ebfa5a766967b4f18588aff9aed80a811fdb5b5f296ba90738c4dcbac8b0aaf0387090c2dac587498b6e89f82d14d3ff2c56b98302d2d121b7e9553ca7f1a9ed008ce1b2830629f63879d5da9bc90ffbdef6a8b3c298c23a910ef3d898485bb90940265fa2c40746c6a425b3c74b9ceaf74c41cf7c9c638aed211a3eade1de34b1d43c34e362b40c6bc4a868b6a17b93597dccdc03350e672cb084fd0848c1939de5ac21f67aef3d8021038e288276a45a395b46cdcf0a8d685cceecdc8c1df72741f0d98771a58f95758b0015506904faf237b480c12dc8fc6436c1738bc01dea30ae3dbcaa60e9662c19cdf0416cdcc058472a841264ca99cc28cfaba8c134b27b91ce32ff9fd9070af7f16cb80aaacee446cb58b6c4969b20285bbaeeaa3cdfb9d119f318e91a23a169cfaacf915cad46a18911fa0374723a65699d53ff790492af1f1d589b7aeff3ad52ace817658bc6805af68574039fa898d8647090bfead091fcaa4a84cd80b4256e9e7d89c152723f89a3ba02e0a2217013809bfed13c8f261abe7f58fdac1e04fbf146cc5c483fd53f90e436c1297d95fe109de930d5f9a9ff206152beb744c64b469121c66f187609f4f9ec6df739501e78f8d60cef94776cdecf7840181721f833c544867871ef5223c3d23894ef1e6592fea1f19aec229a4894654bc563abb2f4c058d81a19f5eddb3ec364fb51cb9e5e396ccdde0fbb268ad8efb004d4c5fecfe7b7fa53f2c27f054b73d8f8ef9f23ce8a0cb4700b6639cfb020155450ce2e7aae24c288f4a27a9c86e946091113a8f529a12bcb24122db8fed45e2834f8ff4f1b63825a1801a38dfdc54024a8cfbe5d366d036fe63ce9c2ab76f99c3fa237b07ef1a08b362fbb584341bd926d6efe1f396db231f3350a5f2b039e4f3c199d38548b1b27e61238fd8fa110d6f14abcfdab23dce929e26845baea6f3b0f4821b72089c8278ebd6c97f29bf3bdab1d5e83a25a3b06957828ce0c30a3022ced276a05e3dd593153f409325a65712255cfea0209f66aa4b6c2c4d7d03dfd4d47c5170e820b6f57b825cf570b91fc4a60a3fbc663e6cdb63bfc68ca7c53860eefe420d4edb707395678f58566581cd3b1927aeddedf3c44dc59e0badb094e83ffb484278f07a6b7bfe6fafd891c798b2231aa3abc1f0327326f250d605f7212df13fa51f66174125ea6401dc96e1a410494a80050160debe644932dd6dc5b1c9a2c6667e13bf7b6b185a097421219c49b5d265aabd16a6c5012d4315d656efc2d09cda0961b08e37c56f4529f75c8b495a6f127dd9fbdd7052f81890a81148453e7950500bf936984d8edb9ce7a17c3d7ac9257d07498c97b57b71cc01cb7e309bbcc0d63acad462f1bd2d0ecd2c482407db358e7106c8f5c026362200673762e5716b65e52263fe447b6fb98f9ab833b6863004f58050956e8972215b2d6c285b7452d8cd30f33c020e64528738ce61d58ed06e1cd4b7e9635487dd57e7f3edbe557bf7457512ba6f01dc2e37fe85cf992a3261919e3c952088b50394e70153e1701f312d62909150dadf8626ba14db12d4d572fc4713f48d98f3fddde32d04fd47c500aa418c06afb9016f6dfbbea3068b6631c61375de07145c0ac9662d7e3060b4b2d34d60ce6eca9cd876686729522236ecc514f1b113555d8b0c7aac1a3e4b264ba27b7bf7a832d46d92f29e432b12e021870a5d053478464b35aa9ba0b981b93f86bbab874c3aaf8da527a16e128f539cfa59fe2407e36d66f3c1eee2f78d24e740ef67eb8499214830707ce231bf23a93478c08a82a02916ad3f8f3a4f288ecc866d6b275fedb3315c36df41119599f589368775c9e2d26f83aa07a0d776ec0d43b0e9f72af77a2d346a0c50eb5e761b5defc07ee7bc7edf0e0cd302200a125318871abff215f86f23598d0c939dd65e9d09c55058dc81a4be86a8131d2022b0e26fdc7b83e6ef587faa1f462bab25b3f36f8e52a5ba66b104553ab9eb490356ac318f744db6eceed161185198d40c75a305c087c0bea1a1d098955868f7429c040739dc161431f36cb18bf564be5027ab813ae041db10413344bc40099290f3e0037575603ded686cd1f351721f2c76562c80adb5905086e395ea720aec98b44c8891c3944d0d64c37e0a48510a0bfee31d5fbae39d29c95979b5bb5c82102fa26b100e195e3c11b72a7d090374a69616120521a2d0bab5fcdb677bfed26bd3c05d997833f6f19f9bcbce0f7c0d055d130ba5aa1d601a7a956ccdf2c157c45b3dc1ed05fa56760e79c73f8988500e08d3681c88496536549d8f82e980e575a38e9045c85ebc2f09dd8ce77ea1ed8e3f859a5940cf0bc346407297de9ca7a26a28062afd5381e99eb08924d3e31eaa94f5e8c7b0fc03ba80d6d3b5fac2b80539d7349710619f45c75be473a82c3d6a3ee418fbc67509120fd79ab5883c2abffb683887e999424b7d3df1e7c3cc70c3560756e17c89bc47b7cf9a5024b127d2ffc3b7fbef775169c6ee4abf3c9540d95ec83e3aa419f1d81adf6f9848947855ad795f1508edb80bbcbcf7bce1cd3ca39839007044875fa972bb53ca378bbdb42c51c29a515c525d5fdd9e49790a526e652dbf82a15ca05de46089adc59da1f4464c7bf72a433fa84aea124ffeb1e500f9d3fd4b70a5246d234e09018eb2171d95763f907b76fc96938a7dd1937e1adafeda16060fab302bb2b3e42dbff58dfbd1ef6f9183374938f8b14dc3833c12c20059e98511bad260f7aa838b45def571c31c0fa8bac6f572ddda64df48979816a3429d84efede244034e04f791c94fee4caec1937fac646291b9f6e1e13461ddb36bf78a2ca300f44fd278aad30ccfc76f8896ca2f3376ab1919e8ece8f9be9c7505833ebcae19f2395e84a32834d7ddde65011b51b94ae545cb6a64fd07e49f012eb33f56e3fdfa3e007938c6735e2f849bae75d08274c81544afa43d56b8330a59d26f4fe2acd840f4c7115466a206baeebe8316ee690421636bd2ffcfa89fd764ac35dbc86c0801c4a0cdab81c114a364e40c64cee135254dcc12050358ad33a87b60324c31b2936ff1f8d065e9ee9b5c748f39069cd0c77d81f4aaccfbea0fdd951aafe351c3cd647e3f84da016e00c147ee7f6830e1dabeea0d1495ecfe452b3898f21ffd490f6d5c4d602e0c3ca5348865e3ac1ceb21903683987f578e74e70801628a70aba30451d47d89d7cc06b995f4deae8c9ea4d9f74c8df2b764bd585046c633edf781eccee2aea0fff874aa9d949f5cf3e04e1ed22dd0669e16c2f660c8905bcb5abce080f2a127c6e0083ab69cd8992f7a3730e83c043637b436da7d2bff8dc92c97b094d4566428b8f7c254c1e7a14b73c78bb304a7953f00cff929629c08c784e490fcb466772555183679b42293d429c5f880819be724594ea3d42893c47754f17818039ec2b884fff542cdbd85aa908f32b96a0222d44f1b5ade15ebda638131512b47914cc141378ad4bf5dee8c9caedfb37df069dafa42fe0db793a3d55430e3c078bf2bb2817484bcb40feeb690d38c3ef0cb7a090b17bb3b971113d7cf9f06bef579257a297ee4788b"}, @typed={0x8, 0x43, @u32=0x197}]}, 0x1090}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020808}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r5, 0x200, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0x41) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffe4c, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c001f0000200100cd15", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008001b0000000000"], 0x3c}}, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000480)={0x16000, &(0x7f0000000440), 0x8, r4, 0x2}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vga_arbiter\x00', 0x204000, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setresgid(r6, r7, r8) [ 216.526415] CPU: 0 PID: 11227 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 216.533480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.542843] Call Trace: [ 216.545447] dump_stack+0x138/0x19c [ 216.549180] should_fail.cold+0x10f/0x159 [ 216.553343] should_failslab+0xdb/0x130 [ 216.557330] __kmalloc+0x2f3/0x7a0 [ 216.560873] ? __sb_end_write+0xc1/0x100 [ 216.564942] ? strnlen_user+0x120/0x1a0 [ 216.568917] ? SyS_memfd_create+0xba/0x3a0 [ 216.573156] SyS_memfd_create+0xba/0x3a0 [ 216.577220] ? shmem_fcntl+0x130/0x130 [ 216.581194] ? do_syscall_64+0x53/0x630 [ 216.585171] ? shmem_fcntl+0x130/0x130 [ 216.589061] do_syscall_64+0x1eb/0x630 [ 216.592950] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 216.597800] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 216.603073] RIP: 0033:0x458c29 [ 216.606261] RSP: 002b:00007f781ddffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 216.613970] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:36:01 executing program 5: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) userfaultfd(0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000280)=""/77, 0x4d}, {0x0}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x1, 0x6, &(0x7f0000003700)={0x77359400}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff98) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f00000001c0)={0x10001, 0x4}) [ 216.621241] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 216.628518] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 216.635791] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f781de006d4 [ 216.637483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pig=11245 comm=syz-executor.2 [ 216.643058] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:01 executing program 3: pipe(0x0) r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r3, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) write$P9_RREADDIR(r0, &(0x7f00000006c0)=ANY=[], 0x0) r4 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="447433e87dc0138287d8adeb46b989449e0142a722f7fcd6a4b27f3de53c69b314d1af0dc22d1898609125c68dcc6af1d8a5a4de254f6e56da21f63f16f64e30d2702d460e1cd44e32a6a978a52d70bc91e8e3ffdf559103ee9fe5230aad2e920d8fac84af3e135c70cae096bb386883ba8aa266b0e38c81d34a4b4452f628e5040a4e81501de85926854c2766b12db3ef74f00079c17ce25515919cdea21db77d07d4b18a10a53a548734e565662cb51caedb6f57c651954fb469e105281fae9847c21cc97ecd88c2fac782ef28d6208951ae4835e8f06cd9dcc42c77e8", 0xde, 0xfffffffffffffffb) r5 = request_key(&(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='\x00', 0x0) fcntl$setpipe(r1, 0x407, 0x6) request_key(&(0x7f00000006c0)='logon\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)='.request_key_auth\x00', r4) keyctl$instantiate(0xc, r4, &(0x7f0000000240)=ANY=[@ANYBLOB="6e6577206519952605fb18f5c3ba665d29a96372797074667320747275737465643a5449504376320020303030303030303030303030303030333237363900"], 0x32, r5) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8320}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x0, 0x7, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x98, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x475662ca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x5}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x801}, 0x810) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6b2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) sendfile(r2, r3, 0x0, 0x20000102000007) 15:36:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40c400, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') recvfrom$packet(r0, &(0x7f0000000200)=""/147, 0x93, 0x2100, 0x0, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3000100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r1, 0x110, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x27}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8800}, 0x4000004) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) setuid(r3) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x8}}, 0x7, 0x1a24, 0xfffffffffffffffb, 0x8, 0x399b}, &(0x7f0000000400)=0x98) 15:36:02 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x100000000000082, 0x0) read(r0, &(0x7f0000000200)=""/182, 0xb6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xdd) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, 0x1, {0x8000000000000007, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x78) socket$inet(0x2, 0x80000, 0x6d) 15:36:02 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="b73cde6b9b3eaaaaaaaaaa0008004500001c000000000002907800000000ffffffff16009078e0000001"], 0x0) 15:36:02 executing program 4 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0xc, 0x13, @l2={'ib', 0x3a, 'bpq0\x00'}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000340)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000200)={0x3, 0x2, {0xffffffffffffffff, 0x2, 0x200, 0x3, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000019000100000000000000000080000000000000000000"], 0x1c}}, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x6, 0x400080) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f00000002c0)) [ 216.949700] CUSE: unknown device info "" [ 216.950953] FAULT_INJECTION: forcing a failure. [ 216.950953] name failslab, interval 1, probability 0, space 0, times 0 [ 216.955456] CUSE: DEVNAME unspecified [ 216.974343] CPU: 1 PID: 11268 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 216.981397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.981403] Call Trace: [ 216.981422] dump_stack+0x138/0x19c 15:36:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x2) ioctl$TCGETS(r0, 0x40087101, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000240)={{0x5000, 0x2, 0xb, 0xfffffffffffffffa, 0xfffffffffffffff8, 0x9, 0x401, 0x3, 0x7, 0xa10, 0x80000000, 0x1}, {0x10f000, 0x2000, 0xe, 0x4, 0x401, 0xc7af, 0x26, 0x7793f8bc, 0x3, 0x9ba, 0x1, 0xfffffffffffffe00}, {0x4, 0x10d000, 0xb, 0x7000, 0x2, 0xdeb6, 0x2, 0x3, 0x80000000, 0x5, 0x4, 0xb6}, {0x0, 0x2, 0x13, 0x2, 0xf2, 0x3, 0x6, 0x1ff, 0x7fffffff, 0x3ff, 0x7, 0xffffffff}, {0x2004, 0xd005, 0xf, 0xfff, 0x6, 0xfffffffffffffff7, 0x3ff, 0x9, 0x0, 0x0, 0x6, 0x5}, {0x6000, 0x4000, 0x3, 0xb883, 0x4, 0x0, 0x4, 0x8, 0x7, 0x3, 0x20, 0x8}, {0xf000, 0x0, 0xf, 0x5, 0x6feb, 0x0, 0x7ff, 0xe1, 0x6, 0x2, 0x6, 0x26f}, {0x3000, 0x11f000, 0xa, 0x8, 0x0, 0x1ff, 0x447, 0x5, 0x4, 0x4, 0x20, 0x8}, {0x0, 0x6000}, {0x16000, 0x3000}, 0x0, 0x0, 0xf000, 0x4, 0x7, 0x1000, 0xf001, [0x1, 0x9, 0x7, 0x3]}) bind$isdn_base(r1, &(0x7f0000000080)={0x22, 0x7, 0x0, 0x2, 0x1}, 0x6) [ 216.981439] should_fail.cold+0x10f/0x159 [ 216.981455] should_failslab+0xdb/0x130 [ 216.981468] kmem_cache_alloc+0x2d9/0x780 [ 216.981478] ? __alloc_fd+0x1d4/0x4a0 [ 216.981493] __d_alloc+0x2d/0x9f0 [ 216.981503] ? lock_downgrade+0x6e0/0x6e0 [ 216.981516] d_alloc_pseudo+0x1e/0x30 [ 216.981525] __shmem_file_setup.part.0+0xd8/0x400 [ 216.981535] ? __alloc_fd+0x1d4/0x4a0 [ 216.981544] ? shmem_fill_super+0x8c0/0x8c0 [ 216.981558] SyS_memfd_create+0x1f9/0x3a0 [ 216.981566] ? shmem_fcntl+0x130/0x130 [ 216.981581] ? do_syscall_64+0x53/0x630 [ 216.981592] ? shmem_fcntl+0x130/0x130 [ 216.981604] do_syscall_64+0x1eb/0x630 [ 216.981614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 216.981629] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 216.981635] RIP: 0033:0x458c29 [ 216.981640] RSP: 002b:00007f781ddffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 216.981659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 216.981665] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 217.002246] audit: type=1400 audit(1555428962.086:84): avc: denied { create } for pid=11271 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 217.005679] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 217.005686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f781de006d4 [ 217.005692] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 217.081734] CUSE: unknown device info "" [ 217.157933] CUSE: DEVNAME unspecified [ 217.180588] audit: type=1400 audit(1555428962.206:85): avc: denied { write } for pid=11271 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 217.206533] audit: type=1400 audit(1555428962.226:86): avc: denied { ioctl } for pid=11271 comm="syz-executor.5" path="socket:[39627]" dev="sockfs" ino=39627 ioctlcmd=0x5345 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 15:36:02 executing program 4 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:02 executing program 2: r0 = mq_open(&(0x7f00000000c0)='/$cgrouplo\x00', 0x42, 0x0, &(0x7f000004b000)={0x0, 0x600001, 0xa, 0x4}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r2 = dup(r0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x2733) r3 = getpgrp(0xffffffffffffffff) tgkill(r1, r3, 0x28) setxattr$trusted_overlay_nlink(&(0x7f0000000780)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U-', 0xa0}, 0x28, 0x2) syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8000, 0x7, &(0x7f0000000680)=[{&(0x7f0000000200)="4b907cb9ac56979f87dbdad664e982df63d7a0c6067ec98bd271bef3b24a596687ae33a09f962ad05c3b4636fa0ee281fb233f423c45d1f37dbd553b602aa1e0b9204fc95e835cb09a73903ff9c0d51052bc85ee39c6c5b8e0b89c80deb8df110b48bdc33edddc595bc4ed325904e37973dd4a87f6f2772bba3c1f8d78fbed6be3bc4f3d850e", 0x86, 0x5a}, {&(0x7f00000002c0)="937ae278c6548aa339238d87fdc8d701f040daf9e89669b3a478167f41de1cdf8bf4b6264b8f02a5d01173022368753569f2b7a02636c8c88e01a98246e2c8657aaf991131156ee2a21c45d25426ff862d0ec096b1de3a671bd07b125bfbf2ce7d6c26037f7bd1b2d9191305c0d557cee56e2f994ff3924c", 0x78, 0x200}, {&(0x7f0000000340)="2f33ca5b906d1a61c89659459949fcd34e1a5ac961a54550018681b1edd8aee05fbdb8e25ccf58daed201f2cb4", 0x2d}, {&(0x7f0000000380)="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", 0xfd, 0x9a9}, {&(0x7f0000000480)="4c270e4ec5e10faf512bf84b68704ee499a7bf484e60f4f7b62ff6f29c6fdfaf4636e14a12a17144f03f0a316cffe7348119204f3e1766dd7a22d284467e88508b5cab023d92caaa568500a354229e5b08795eb0cad86924b9fc39631cca0c4032186e674ac8183e1666b49a6f819db4017145025b705e6b4780e941b01ce8186fcf692af3fe8dbd4fad8ab40e84ea2fecd9d72192871126d947a9", 0x9b, 0x10001}, {&(0x7f0000000540)="359b00e5c9829dde7374f5f60917d2c47ced595e3ff77212962904242b827d3181dbde281bf7c041e6c224fcd01fe4b80c3c554c7f2d27e9ce5b204b37250a44daaf8c08fb3d90c54bb8867968ae12f5f9722f1a7f49d6d0450f1bfd3a0871ac0b70bad89ea8336c81ba455070a3f5f3bcf47b5ea3e37771d6dccdc90c0dcaec78812a4f88234957ba32c824488f33b5992cfb3ba595855a32f28199215ac800aefbcf483a497aac72679eb504c618014d80bec8086d4b467f7ead7706ca7c2e2808e242820b11cc68f5ac599f9dc73838c7b2d97fbc0043c3b0516b7ceb28ae36994bea12fb6a2c84ca", 0xea, 0xfff}, {&(0x7f0000000640)="cdecff84effe2f2c39edbcea8f3cede289038cc901e07de4ad", 0x19, 0x6}], 0x80008, &(0x7f0000000800)=ANY=[@ANYBLOB="6772706a71756f74612c757365725f1cbdd9ed67ea78617474722c02626a5f747970653d2c2c736d618402a08c763344e6c649636b66737255214bc532b12a0fdb312a6ed638e0674e67f9fd27a58bdf7477b0107be54d02ce09ab5b091964d431963d50f911b7071fa6cacdb121ec0202ebdc1314dde35c2f0ff300b9b4b6cd63461fc512ca8e1cff987178fdad3c48a4f29081e8d9d9aa0ba21889ed6d43abe4d2859c3b67c69c77c50ce480b0ab0c1b39"]) 15:36:02 executing program 3: r0 = socket(0x12, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') sendfile(r0, r1, 0x0, 0x80000001) 15:36:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x22000, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000800)={0x5, 0x1, 0x89f, 0x7, 0x8, 0x4, 0x800}) syncfs(r0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet(0x2, 0x3, 0x19) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x200001) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000002c0)=0xf3f52d76cc2a2d0e) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x480, 0x258, 0x0, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000240), {[{{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff0000ff, @mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x1, 0x226, 0x6, 0x3, 0x0, 0x9748, 'syzkaller1\x00', 'syzkaller0\x00', {0xff}}, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x401, 0x6, 0x3}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0xfffffffffffffffb, @dev={0xac, 0x14, 0x14, 0x1b}}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @local, @dev={0xac, 0x14, 0x14, 0x1f}, 0x1, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000200), 0x2ea) 15:36:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp\x00') write$selinux_create(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="73797374426d5f753a6f62040000005f723a6c6f67726f746174655f7661725f6c69625f743a73302073797374656d5f753a73797374656d5f723a6b65726e658f5f743a25aa6da830303030303030303030303030303030303031008a4786a04e60df6bcb7e3b675f1a370239cb86d52e8d7911b395d89f8aceaa733bed23c15a676c9d609093086303286d751ed9cdb428c1e5edb6f82613ceb8dd8e77e8b14de03f88ca5bc49faf07eea74731e1fd4880e8e5a43108516f9b51725102f977bd39956b0e9e755fbd09e3004970d5dc7af8b74487b375dd807dd3269cb8598b6f37fe4d23b3e40dc4dff4558c7d5001d5fcdad6ec2af0784ef192ee089f2c8686847baa6f20f2ebe916f39f67b47d5040c4eef5dcdd7aac4c10cbc16ca887f10deec0a4fb5b5a0ed719146bca26843caec75b012661742d83ed3077ee86a6ce423903baf24063f400a8466144a701a1d71c223fc9e5ecfc9db339884d351e63545f3a6bcdcea5748e9771ac2e27282c44e104a95ae79063823c82c9b4fc89615bb427cd481fd2697c420471b41374a87c995b14802f8b58140424233a744fb87580c61b81172d615352f621cd7021c7d65ba16a4ce848184e7f0d08f34cf48f670edab00688582a86"], 0x1c9) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(&(0x7f0000000400), 0x0, 0x400007f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000280), 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="d51835cec3214a89cac8b1da190768f469a26ca02e6d041a657d74cf168562c527e3870d4edbaadd2949a7872d38cfe3b0509c2f7a4eadf1799d0d8f3025d921ddb7adbaa4265fe82f5cc46b722ec5f767b12330df22f34202b050e519bd46d22f0044390666bb64e022251f2a57b69948677cd1606883f35e37025147e4617b65003c56ec1eefc0de74b7311ccf9155f00ee2d17684185f98c07f93754ba391f913016b123efada576e", 0xaa}], 0x1, 0x8) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000440)=""/97, &(0x7f00000004c0)=0x61) 15:36:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xffffffffffffff04, 0x420ffe0, 0x0, 0x37) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'team_slave_0\x00', 0x80}) 15:36:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KVM_CREATE_VCPU(r1, 0x4010ae42, 0x0) [ 217.445355] FAULT_INJECTION: forcing a failure. [ 217.445355] name failslab, interval 1, probability 0, space 0, times 0 [ 217.462551] CPU: 0 PID: 11306 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 217.469610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.469624] Call Trace: [ 217.469643] dump_stack+0x138/0x19c [ 217.469660] should_fail.cold+0x10f/0x159 [ 217.469675] should_failslab+0xdb/0x130 [ 217.493334] kmem_cache_alloc+0x2d9/0x780 [ 217.493347] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 217.493360] ? rcu_read_lock_sched_held+0x110/0x130 [ 217.493374] ? shmem_destroy_callback+0xa0/0xa0 [ 217.493384] shmem_alloc_inode+0x1c/0x50 [ 217.493394] alloc_inode+0x66/0x190 [ 217.502978] new_inode_pseudo+0x19/0xf0 [ 217.502989] new_inode+0x1f/0x40 [ 217.503000] shmem_get_inode+0x75/0x750 [ 217.503015] __shmem_file_setup.part.0+0x111/0x400 [ 217.536552] ? __alloc_fd+0x1d4/0x4a0 [ 217.540361] ? shmem_fill_super+0x8c0/0x8c0 [ 217.544702] SyS_memfd_create+0x1f9/0x3a0 [ 217.548858] ? shmem_fcntl+0x130/0x130 [ 217.552752] ? do_syscall_64+0x53/0x630 [ 217.556723] ? shmem_fcntl+0x130/0x130 [ 217.556738] do_syscall_64+0x1eb/0x630 [ 217.556749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 217.564509] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 217.564518] RIP: 0033:0x458c29 [ 217.564524] RSP: 002b:00007f781ddffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 217.564535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:36:02 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0xfffffffffffffffd, @ipv4}, 0x1c) listen(r0, 0x7ffffffe) r1 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f00000001c0)=0x10) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x9, @remote, 0x6}, 0x1c) 15:36:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") set_mempolicy(0x4003, &(0x7f0000000140)=0x4, 0x1) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x2ad1}, &(0x7f0000000240)=0x8) splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x2, 0x1) 15:36:02 executing program 0: mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) connect$ax25(r1, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@bcast, @default, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={r2, r3}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) [ 217.564540] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 217.564548] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 217.607202] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f781de006d4 [ 217.614470] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:02 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x802, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newroute={0x2c, 0x18, 0x0, 0x70bd27, 0x25dfdbfb, {0xa, 0xb4, 0x14, 0x8000, 0xfc, 0x4, 0xfe, 0xb, 0xa00}, [@RTA_PREF={0x8, 0x14, 0x3}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x5}]}, 0xfffffffffffffdda}}, 0x0) 15:36:02 executing program 2: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000100)=0x3, 0xfff0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) timer_create(0x0, 0x0, 0x0) times(0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) timer_create(0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r3, 0x10, &(0x7f0000000040)={&(0x7f00000002c0)=""/254, 0xfe, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r4, 0x4) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000200)={0x1, 0xd, 0x17, "ff0c83502176d85ee2cde9bea8d71761dfdd071a2d07e48d71f0bf0ecfdc897b049c62fb43d58deb878c3c63a694b136422c60133946186158238918", 0x4, "1f466fbbca4b88e47efcab9bb700103d04cae263fe0490e9ade4af96bf2342f96bbc9d0f3852a9b2fb2fc3315792a9e83cbd4c2712a3ea0cf569eabf", 0x20}) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp\x00\xcdWq\xe9*\a4g\a^\x90\xb6\xe4kH2\x80/\x88\xb6\xbb\xeb`\xb8@#\x83tH\xae\xa4y\x1d\\]\x93\x93\xb5e\xd9\xd4\xb8A# \xc8*s\xd0g>\x16\xabM\x7foK\xec\x17f\xb9x\x11\xbf\xab\x16\xc5\xcb\x94\xff\x1c\xa0\x01\xb3I\x1c\xb9\xcc\xbb\xbe\x9c\xd0!\x13\xe1\xbc.\xfaG3\x85\xe0,') sendfile(r2, r5, &(0x7f0000000080), 0x80000003) 15:36:02 executing program 4 (fault-call:2 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:02 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x400, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000000)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0xfd37890, 0x0, 0x1, 0x4, 0x9}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") renameat2(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={r2, r3/1000+10000}, 0x10) fcntl$setstatus(r0, 0x4, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x7, 0x2, @raw_data=[0x1000, 0x6, 0x9, 0x7, 0x3f, 0xffffffff, 0x0, 0x6, 0x3f, 0x6, 0x1ff, 0x4, 0x4, 0x4, 0x800, 0x1000]}) openat(r0, &(0x7f0000000180)='./file0/../file0\x00', 0x8000, 0x148) 15:36:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8001) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1218cf1ac6fa1348, 0x10, r1, 0x0) keyctl$assume_authority(0x10, 0x0) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, 0x0) mknod(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x100, 0x1, 0x8f14, 0x1ff, 0x3, 0x2, 0x9, {0x0, @in6={{0xa, 0x4e22, 0xff, @local, 0x5}}, 0x1, 0x3ff, 0xfffffffffffffbca, 0x5}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x46, 0x1, 0x1, 0xffffffff, r3}, 0x10) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) r4 = open(0x0, 0x0, 0x0) r5 = creat(0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x80112, r4, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ftruncate(r2, 0x2007fff) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) sendfile(r1, r2, 0x0, 0x87ff7) 15:36:02 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400, 0x100) write$selinux_validatetrans(r1, &(0x7f0000000100)={'system_u:object_r:dmidecode_exec_t:s0', 0x20, 'system_u:object_r:ld_so_t:s0', 0x20, 0xfffffffffffffffd, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x6f) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, &(0x7f0000000040)=0x29b) [ 217.873967] audit: type=1400 audit(1555428962.946:87): avc: denied { map } for pid=11341 comm="syz-executor.0" path="socket:[39728]" dev="sockfs" ino=39728 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 [ 217.909250] FAULT_INJECTION: forcing a failure. [ 217.909250] name failslab, interval 1, probability 0, space 0, times 0 [ 217.930638] CPU: 1 PID: 11348 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 217.937715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.947075] Call Trace: [ 217.949671] dump_stack+0x138/0x19c [ 217.953345] should_fail.cold+0x10f/0x159 [ 217.957506] should_failslab+0xdb/0x130 [ 217.961493] kmem_cache_alloc+0x2d9/0x780 [ 217.965650] ? shmem_alloc_inode+0x1c/0x50 [ 217.969884] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 217.975335] selinux_inode_alloc_security+0xb6/0x2a0 [ 217.980541] security_inode_alloc+0x9a/0xe0 [ 217.984870] inode_init_always+0x552/0xaf0 [ 217.989101] alloc_inode+0x83/0x190 [ 217.992723] new_inode_pseudo+0x19/0xf0 [ 217.996689] new_inode+0x1f/0x40 [ 218.000073] shmem_get_inode+0x75/0x750 [ 218.004051] __shmem_file_setup.part.0+0x111/0x400 [ 218.008983] ? __alloc_fd+0x1d4/0x4a0 [ 218.012780] ? shmem_fill_super+0x8c0/0x8c0 [ 218.017101] SyS_memfd_create+0x1f9/0x3a0 [ 218.021247] ? shmem_fcntl+0x130/0x130 [ 218.025126] ? do_syscall_64+0x53/0x630 [ 218.029093] ? shmem_fcntl+0x130/0x130 [ 218.033052] do_syscall_64+0x1eb/0x630 [ 218.036938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.041792] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.046977] RIP: 0033:0x458c29 [ 218.050187] RSP: 002b:00007f781ddffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 218.057902] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 218.065182] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 218.072460] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 218.079736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f781de006d4 [ 218.087003] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp\x00') write$selinux_create(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="73797374426d5f753a6f62040000005f723a6c6f67726f746174655f7661725f6c69625f743a73302073797374656d5f753a73797374656d5f723a6b65726e658f5f743a25aa6da830303030303030303030303030303030303031008a4786a04e60df6bcb7e3b675f1a370239cb86d52e8d7911b395d89f8aceaa733bed23c15a676c9d609093086303286d751ed9cdb428c1e5edb6f82613ceb8dd8e77e8b14de03f88ca5bc49faf07eea74731e1fd4880e8e5a43108516f9b51725102f977bd39956b0e9e755fbd09e3004970d5dc7af8b74487b375dd807dd3269cb8598b6f37fe4d23b3e40dc4dff4558c7d5001d5fcdad6ec2af0784ef192ee089f2c8686847baa6f20f2ebe916f39f67b47d5040c4eef5dcdd7aac4c10cbc16ca887f10deec0a4fb5b5a0ed719146bca26843caec75b012661742d83ed3077ee86a6ce423903baf24063f400a8466144a701a1d71c223fc9e5ecfc9db339884d351e63545f3a6bcdcea5748e9771ac2e27282c44e104a95ae79063823c82c9b4fc89615bb427cd481fd2697c420471b41374a87c995b14802f8b58140424233a744fb87580c61b81172d615352f621cd7021c7d65ba16a4ce848184e7f0d08f34cf48f670edab00688582a86"], 0x1c9) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(&(0x7f0000000400), 0x0, 0x400007f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000280), 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="d51835cec3214a89cac8b1da190768f469a26ca02e6d041a657d74cf168562c527e3870d4edbaadd2949a7872d38cfe3b0509c2f7a4eadf1799d0d8f3025d921ddb7adbaa4265fe82f5cc46b722ec5f767b12330df22f34202b050e519bd46d22f0044390666bb64e022251f2a57b69948677cd1606883f35e37025147e4617b65003c56ec1eefc0de74b7311ccf9155f00ee2d17684185f98c07f93754ba391f913016b123efada576e", 0xaa}], 0x1, 0x8) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000440)=""/97, &(0x7f00000004c0)=0x61) 15:36:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) 15:36:03 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x427, 0xc0000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0xff, 0x846e, 0xffffffff, 0x92}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xfffffffffffffffd}, 0x8) 15:36:03 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000040)=@ipx, 0xff78, 0x0, 0xffffffe5, 0x0, 0x12e}}], 0x1, 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') preadv(r3, &(0x7f00000017c0), 0x2f5, 0x7ffff000) 15:36:03 executing program 4 (fault-call:2 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:03 executing program 2: syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) 15:36:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xff, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x1, &(0x7f0000000080)=0x3, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) 15:36:03 executing program 0: mknod(&(0x7f0000000180)='./file0\x00', 0x1420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x95) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x3) dup2(r2, r1) [ 218.475875] FAULT_INJECTION: forcing a failure. [ 218.475875] name failslab, interval 1, probability 0, space 0, times 0 [ 218.541616] CPU: 1 PID: 11363 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 218.548685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.548691] Call Trace: [ 218.548710] dump_stack+0x138/0x19c [ 218.548732] should_fail.cold+0x10f/0x159 [ 218.568433] should_failslab+0xdb/0x130 [ 218.572412] kmem_cache_alloc+0x2d9/0x780 [ 218.576575] ? lock_downgrade+0x6e0/0x6e0 [ 218.576589] get_empty_filp+0x8c/0x3b0 [ 218.576601] alloc_file+0x23/0x440 [ 218.584616] __shmem_file_setup.part.0+0x1b1/0x400 [ 218.584627] ? __alloc_fd+0x1d4/0x4a0 [ 218.584636] ? shmem_fill_super+0x8c0/0x8c0 [ 218.593086] SyS_memfd_create+0x1f9/0x3a0 [ 218.593096] ? shmem_fcntl+0x130/0x130 [ 218.593109] ? do_syscall_64+0x53/0x630 [ 218.605356] ? shmem_fcntl+0x130/0x130 [ 218.605372] do_syscall_64+0x1eb/0x630 [ 218.605383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.613270] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.613278] RIP: 0033:0x458c29 [ 218.613282] RSP: 002b:00007f781ddffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 15:36:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") personality(0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xda4a, 0x100000000, 0x400, 0x6}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x404c1, 0x28) accept$packet(0xffffffffffffff9c, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) connect$packet(r3, &(0x7f0000000580)={0x11, 0x6, r4, 0x1, 0x8001, 0x6, @random="a09fa3ca8974"}, 0x14) uname(&(0x7f0000000340)=""/176) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') setsockopt$rose(r5, 0x104, 0x0, &(0x7f0000000400)=0xffffffffffffffff, 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x57}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9f9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x6306122f831fc75d}, 0x24000055) 15:36:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4100, 0x0) fallocate(r2, 0x8, 0x6, 0x101) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180)={0x6, 0x7, 0x100000000, 0xffff}, 0x6) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r3, 0x8040ae69, &(0x7f0000000040)={0x8000, 0x8, 0x80000001, 0x0, 0x9d000000}) close(r0) prctl$PR_SET_TSC(0x1a, 0x0) 15:36:03 executing program 0: clone(0x2122005ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = gettid() exit_group(0x0) process_vm_readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/230, 0xe6}], 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/102, 0x66}], 0x1, 0x0) 15:36:03 executing program 4 (fault-call:2 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 218.613292] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 218.613297] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 218.613303] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 218.613309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f781de006d4 [ 218.613315] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 218.759899] FAULT_INJECTION: forcing a failure. [ 218.759899] name failslab, interval 1, probability 0, space 0, times 0 [ 218.830629] CPU: 1 PID: 11395 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 218.837696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 218.847232] Call Trace: [ 218.849829] dump_stack+0x138/0x19c [ 218.853479] should_fail.cold+0x10f/0x159 [ 218.857640] should_failslab+0xdb/0x130 [ 218.861625] kmem_cache_alloc+0x2d9/0x780 [ 218.865777] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 218.871231] ? check_preemption_disabled+0x3c/0x250 [ 218.876251] selinux_file_alloc_security+0xb4/0x190 [ 218.881274] security_file_alloc+0x73/0xb0 [ 218.885515] get_empty_filp+0x130/0x3b0 [ 218.889506] alloc_file+0x23/0x440 [ 218.893058] __shmem_file_setup.part.0+0x1b1/0x400 [ 218.897987] ? __alloc_fd+0x1d4/0x4a0 [ 218.901790] ? shmem_fill_super+0x8c0/0x8c0 [ 218.906119] SyS_memfd_create+0x1f9/0x3a0 [ 218.910272] ? shmem_fcntl+0x130/0x130 [ 218.914156] ? do_syscall_64+0x53/0x630 [ 218.918129] ? shmem_fcntl+0x130/0x130 [ 218.922015] do_syscall_64+0x1eb/0x630 [ 218.925899] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 218.930745] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 218.935927] RIP: 0033:0x458c29 [ 218.939113] RSP: 002b:00007f781ddffa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 218.946822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 218.954088] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 218.961354] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 218.968619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f781de006d4 [ 218.976785] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x40000000000000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/snmp\x00') write$selinux_create(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1c9) mount(&(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(&(0x7f0000000400), 0x0, 0x400007f) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x0, &(0x7f0000000280), 0x4) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="d51835cec3214a89cac8b1da190768f469a26ca02e6d041a657d74cf168562c527e3870d4edbaadd2949a7872d38cfe3b0509c2f7a4eadf1799d0d8f3025d921ddb7adbaa4265fe82f5cc46b722ec5f767b12330df22f34202b050e519bd46d22f0044390666bb64e022251f2a57b69948677cd1606883f35e37025147e4617b65003c56ec1eefc0de74b7311ccf9155f00ee2d17684185f98c07f93754ba391f913016b123efada576e", 0xaa}], 0x1, 0x8) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000100)) getsockopt$bt_hci(r3, 0x0, 0x0, &(0x7f0000000440)=""/97, &(0x7f00000004c0)=0x61) 15:36:04 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000340)="2400000021002551071c0165ff00fc020200000500100f000ee1000c08000f0000000000", 0x24) signalfd4(r0, &(0x7f0000000100), 0x8, 0x0) read(r0, &(0x7f0000000040)=""/129, 0x81) 15:36:04 executing program 0: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000280)=0x8fce, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x5}) 15:36:04 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x0) fchdir(r0) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500001}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x320, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x400}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0x5, {0x400, 0x8, 0x1}, {0x5, 0x7, 0x3, 0x5}, {0xf5, 0x2}}) syncfs(0xffffffffffffffff) 15:36:04 executing program 4 (fault-call:2 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:04 executing program 5: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) fcntl$addseals(r1, 0x409, 0xa) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x4000000020000000) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) r3 = socket$inet6(0xa, 0x3, 0xfffffffffffffffc) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2000000000002900, {}, 0x1600}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) [ 219.408113] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 219.417755] FAULT_INJECTION: forcing a failure. [ 219.417755] name failslab, interval 1, probability 0, space 0, times 0 [ 219.429417] FAT-fs (loop2): Filesystem has been set read-only [ 219.437165] CPU: 0 PID: 11414 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 219.444201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 219.453586] Call Trace: [ 219.456182] dump_stack+0x138/0x19c [ 219.459826] should_fail.cold+0x10f/0x159 [ 219.463994] should_failslab+0xdb/0x130 [ 219.467980] kmem_cache_alloc+0x2d9/0x780 [ 219.472142] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 219.477526] getname_flags+0xcb/0x580 [ 219.481340] getname+0x1a/0x20 [ 219.484541] do_sys_open+0x1e7/0x430 [ 219.488259] ? filp_open+0x70/0x70 [ 219.491806] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 219.497171] SyS_open+0x2d/0x40 [ 219.497181] ? do_sys_open+0x430/0x430 [ 219.497195] do_syscall_64+0x1eb/0x630 15:36:04 executing program 5: msgget$private(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) fcntl$addseals(r1, 0x409, 0xa) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x4000000020000000) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='\x00', 0x1) r3 = socket$inet6(0xa, 0x3, 0xfffffffffffffffc) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2000000000002900, {}, 0x1600}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 15:36:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xf0ffffffffffffff) [ 219.497205] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 219.497222] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 219.513351] RIP: 0033:0x412bc1 [ 219.513357] RSP: 002b:00007f781ddffa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 219.513370] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 219.521718] RDX: 00007f781ddffb0a RSI: 0000000000000002 RDI: 00007f781ddffb00 [ 219.521724] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 219.521728] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 219.521733] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 219.522036] audit: type=1400 audit(1555428964.526:88): avc: denied { name_bind } for pid=11409 comm="syz-executor.5" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 15:36:04 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000080)={{0x7fffffff, 0xa}, {}, 0xfdfdffff, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 219.597413] audit: type=1400 audit(1555428964.526:89): avc: denied { node_bind } for pid=11409 comm="syz-executor.5" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 219.622267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) [ 219.632902] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006500) 15:36:04 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 15:36:04 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x3}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) mknod$loop(0x0, 0x0, 0xffffffffffffffff) 15:36:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000000c0)=0x5) [ 219.742895] audit: type=1400 audit(1555428964.826:90): avc: denied { name_connect } for pid=11436 comm="syz-executor.3" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 220.230140] protocol 88fb is buggy, dev hsr_slave_0 [ 220.235355] protocol 88fb is buggy, dev hsr_slave_1 15:36:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @pic={0x0, 0x70c, 0x0, 0x9}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:36:05 executing program 4 (fault-call:2 fault-nth:7): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYPTR64, @ANYRES16=0x0], 0x35}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000300)=""/230) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') 15:36:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x1df, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) 15:36:05 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRESOCT=r0, @ANYRESHEX, @ANYPTR64, @ANYRES16=0x0], 0x47}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) execve(0x0, &(0x7f00000005c0)=[0x0, 0x0], 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_to_bond\x00'}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) [ 220.341487] FAULT_INJECTION: forcing a failure. [ 220.341487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.353339] CPU: 0 PID: 11461 Comm: syz-executor.4 Not tainted 4.14.111 #1 [ 220.360377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.369728] Call Trace: [ 220.372342] dump_stack+0x138/0x19c [ 220.375961] should_fail.cold+0x10f/0x159 [ 220.380101] __alloc_pages_nodemask+0x1d6/0x7a0 [ 220.384754] ? fs_reclaim_acquire+0x20/0x20 [ 220.389063] ? __alloc_pages_slowpath+0x2930/0x2930 [ 220.394091] cache_grow_begin+0x80/0x410 [ 220.398138] kmem_cache_alloc+0x6a8/0x780 [ 220.402270] getname_flags+0xcb/0x580 [ 220.406139] getname+0x1a/0x20 [ 220.409321] do_sys_open+0x1e7/0x430 [ 220.413021] ? filp_open+0x70/0x70 [ 220.416564] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 220.421916] SyS_open+0x2d/0x40 [ 220.425180] ? do_sys_open+0x430/0x430 [ 220.429053] do_syscall_64+0x1eb/0x630 [ 220.432926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 220.437774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 220.442948] RIP: 0033:0x412bc1 [ 220.446120] RSP: 002b:00007f781ddffa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 220.453814] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 220.461083] RDX: 00007f781ddffb0a RSI: 0000000000000002 RDI: 00007f781ddffb00 [ 220.468355] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 220.475610] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 220.482867] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 220.500197] protocol 88fb is buggy, dev hsr_slave_0 [ 220.505308] protocol 88fb is buggy, dev hsr_slave_1 15:36:05 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) dup2(r1, r0) 15:36:05 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000280)={0x4}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x2000000080803, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @empty, 0x7ff}, 0x1c) [ 220.678259] kvm: pic: level sensitive irq not supported [ 220.681522] kvm: pic: single mode not supported [ 220.716694] kvm: pic: single mode not supported [ 220.721545] kvm: pic: level sensitive irq not supported 15:36:05 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) [ 220.756488] kvm: pic: level sensitive irq not supported [ 220.756701] kvm: pic: single mode not supported [ 220.762261] kvm: pic: level sensitive irq not supported [ 220.808176] kvm: pic: level sensitive irq not supported 15:36:05 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0xc, 0x0, 0x6, 0x4}) [ 220.813437] kvm: pic: level sensitive irq not supported [ 220.859817] kvm: pic: level sensitive irq not supported [ 220.897714] kvm: pic: level sensitive irq not supported [ 220.919031] kvm: pic: single mode not supported 15:36:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x1df, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048d]}) [ 220.919041] kvm: pic: level sensitive irq not supported [ 220.941608] kvm: pic: level sensitive irq not supported 15:36:06 executing program 5: [ 220.979048] kvm: pic: single mode not supported [ 220.986998] kvm: pic: single mode not supported [ 220.999402] kvm: pic: single mode not supported 15:36:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000033c0)={0x1, &(0x7f0000003400)=[{0x16}]}, 0x10) [ 221.023010] kvm: pic: single mode not supported [ 221.146270] kvm: pic: single mode not supported [ 221.147108] kvm: pic: single mode not supported 15:36:06 executing program 1: 15:36:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) 15:36:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlink(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fchdir(r0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$RTC_AIE_ON(r1, 0x7001) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="00000077b9633aea304c8b49248a8b00000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809aa0063b8f24252b1d85cbf000000000038f70f653f0ffb09f0d536b56400000acad550fe203534da91b4b9fb501e1ac4d9a3841f9d66e232b9b2500fb1d96033ccfdff066428eb4cb7860c131aef785f25df8e62f84facf3fbe2b90847de6a88512301a50fb20767c9b8b69819d787ea7c347d56028313c3905f4d1eb3bbc205397585b9d9494289512dca45d6b5283db159655e19bbabc3ad722139d8d1a2938d0d39bcf9c13b72544d06cf11bbd9b2843e76e19f8eb31623487332e356b7861e5a599993b72d5e3352d01c5da9"], 0xf9) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x0, 0x57c}) pivot_root(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='./bus\x00') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./bus\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000380)={'TPROXY\x00'}, 0x0) alarm(0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000740)='./file0\x00', 0x4000000000000) inotify_add_watch(r1, 0x0, 0x0) inotify_rm_watch(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x40000, 0x8) ioctl$TIOCNXCL(r2, 0x540d) readlinkat(r0, 0x0, &(0x7f00000003c0)=""/122, 0x7a) 15:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x6) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$tipc2(0x0) 15:36:06 executing program 0: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) wait4(0x0, 0x0, 0x0, 0x0) 15:36:06 executing program 0: 15:36:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x600000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0xac88, 0x2}]}, 0xc, 0x1) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000380)={0x200, 0x1000}) 15:36:06 executing program 1: 15:36:06 executing program 0: [ 221.405396] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 15:36:06 executing program 1: 15:36:06 executing program 0: [ 221.502832] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 221.515881] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) 15:36:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x6) sendto(r0, &(0x7f0000000340)="120000001200e7ef007b00005380a79a9e58", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0), 0x320, 0x0, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$tipc2(0x0) [ 221.548935] FAT-fs (loop3): Filesystem has been set read-only 15:36:06 executing program 0: [ 221.629259] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 221.646845] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. 15:36:06 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x28) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000140)=0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x1000, 0x2000) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB="755a726a7157c1c54b2a9e2a"]) getsockname$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000280)=0xc4, 0x8) 15:36:06 executing program 1: 15:36:06 executing program 0: 15:36:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlink(0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fchdir(r0) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x1) ioctl$RTC_AIE_ON(r1, 0x7001) write$binfmt_aout(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="00000077b9633aea304c8b49248a8b00000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809aa0063b8f24252b1d85cbf000000000038f70f653f0ffb09f0d536b56400000acad550fe203534da91b4b9fb501e1ac4d9a3841f9d66e232b9b2500fb1d96033ccfdff066428eb4cb7860c131aef785f25df8e62f84facf3fbe2b90847de6a88512301a50fb20767c9b8b69819d787ea7c347d56028313c3905f4d1eb3bbc205397585b9d9494289512dca45d6b5283db159655e19bbabc3ad722139d8d1a2938d0d39bcf9c13b72544d06cf11bbd9b2843e76e19f8eb31623487332e356b7861e5a599993b72d5e3352d01c5da9"], 0xf9) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x0, 0x57c}) pivot_root(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000240)='./bus\x00') perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000040)='./bus\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000380)={'TPROXY\x00'}, 0x0) alarm(0x2) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) mkdir(&(0x7f0000000740)='./file0\x00', 0x4000000000000) inotify_add_watch(r1, 0x0, 0x0) inotify_rm_watch(r0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x40000, 0x8) ioctl$TIOCNXCL(r2, 0x540d) readlinkat(r0, 0x0, &(0x7f00000003c0)=""/122, 0x7a) 15:36:06 executing program 2: [ 221.701730] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 221.722152] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) 15:36:06 executing program 0: 15:36:06 executing program 1: 15:36:06 executing program 2: r0 = creat(0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) times(&(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000001380)=ANY=[], 0xffffffe0) 15:36:06 executing program 0: 15:36:06 executing program 0: 15:36:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 221.869019] EXT4-fs (sda1): Unrecognized mount option "uZrjqWÁÅK*ž*" or missing value 15:36:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x1) 15:36:07 executing program 1: 15:36:07 executing program 0: 15:36:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 221.995432] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 222.004984] FAT-fs (loop3): Filesystem has been set read-only [ 222.065402] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 222.112670] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) 15:36:07 executing program 3: 15:36:07 executing program 1: 15:36:07 executing program 0: 15:36:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 222.200599] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 222.208014] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 222.305253] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:07 executing program 2: 15:36:07 executing program 1: 15:36:07 executing program 0: 15:36:07 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:07 executing program 3: 15:36:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffffffffffff, 0x422000) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:07 executing program 1: 15:36:07 executing program 3: 15:36:07 executing program 0: 15:36:07 executing program 1: 15:36:07 executing program 2: 15:36:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 15:36:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x0, 0x8de7d8f023d06bd7}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 222.855480] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x253) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000001c0)="410f01f9c4e1f573d50664ff0941c3c4e2c99758423e46d8731266420fe2e33e0f1110d4b842419dcccc") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140), 0x10) connect$inet(r1, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="2265162d6c36d2d553b535288f726cee2343cd3da80438bbe33926e61647fc7fcab63c030ef325ad0f899dcc3d1baefa9b3b5a978b1e8319bcc3c41f139590cb2be0b46092dbd2174e400b05", 0x4c}], 0x1, 0x0) 15:36:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="7573546a7180000000a6cfc87efa7fdbb78e1caecce57fe6a67965f5231dc2a8f75e580dc487814e060000274233040527493fc06dff1c0100000000006632463d949971ad4b47a5f83d6939fe4de2e4570c4da3d785e4cfd191c9230f79a961ece05254f3d2f52944e50dab63de3a4f16"]) 15:36:08 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) times(&(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x3}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000002dc0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file2\x00') 15:36:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xffff, @empty, 0x400}}, [0x2c2, 0x72bb, 0x3ff, 0x9, 0x9, 0x5, 0x54e78be9, 0x44ee, 0x5, 0x4c67, 0x6, 0x3, 0x400, 0x1f, 0x9]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e23, 0xa465, @mcast2, 0xf}}}, 0x84) 15:36:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x80400, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000180)=0x1) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x80) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/77) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x4], 0x1) ioctl$KVM_SMI(r2, 0xaeb7) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x7f, 0x0, 0xfffffffffffffffb, 0x1, 0x6}, 0xc) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) 15:36:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x80000001, 0x80000) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/124, 0x7c}], 0x1) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) recvfrom$inet6(r1, &(0x7f0000000080)=""/11, 0xb, 0x40000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x86, @loopback, 0x8}, 0x1c) [ 223.190357] protocol 88fb is buggy, dev hsr_slave_0 [ 223.195519] protocol 88fb is buggy, dev hsr_slave_1 15:36:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") listen(r0, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) [ 223.282232] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.294242] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 223.296910] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.590133] protocol 88fb is buggy, dev hsr_slave_0 [ 223.595300] protocol 88fb is buggy, dev hsr_slave_1 [ 223.670125] protocol 88fb is buggy, dev hsr_slave_0 [ 223.675289] protocol 88fb is buggy, dev hsr_slave_1 15:36:08 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x401, &(0x7f00000000c0)=""/19) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) tkill(r0, 0x8001004000000016) 15:36:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x804}, 0x40000) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffd, 0xffffffffffffff9f, 0x0, 0x100020, &(0x7f0000000200)={[{@dioread_nolock='dioread_nolock'}], [{@smackfshat={'smackfshat', 0x3d, 'selfbdevGPLsecurity%'}}, {@subj_role={'subj_role', 0x3d, 'GPLvmnet0+wlan1\xc5posix_acl_access,bdev#,[]'}}, {@subj_type={'subj_type', 0x3d, 'securityself*'}}]}) 15:36:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4001) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002) fallocate(r1, 0x10, 0x3, 0x8001) 15:36:09 executing program 0: socket$nl_crypto(0x10, 0x3, 0x15) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000003c0)={'veth1_to_bond\x00', 0xffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./control\x00', 0x6, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="1119203baf4cc228a1f0412497fbb55b886e752e89688b493bdc3d74723d6c10904ac2701c70e881d0e667d29e9e027ea61ee5e88639cce966fb313cd546a772512fe5b8f8b9de82b078bbb8712237397618c66be81a532d79d035ebdbf7fca5573f864a9984aae3527d31313d82ec00ef8b8318f258189e899e0761a9f7ba45ec828a0fe05d066d7cff8ee336eb6df842a36a0e0391703a1449ddb22463868b5dc8f14974369b3aa1299f2b", 0xac, 0x3}, {&(0x7f0000000200)="db10b7e23b8c4ddde72ece2ec82a742d821a362cec4a742916de62108c777bc0e6b04200ae2da76c170be50d2840e0bcd67381e1fe783d76b3c2d263bdc796bc", 0x40, 0x1}], 0x100004, &(0x7f0000000440)={[{@nodecompose='nodecompose'}, {@nobarrier='nobarrier'}, {@uid={'uid', 0x3d, r1}}, {@type={'type', 0x3d, "e2166dfb"}}, {@decompose='decompose'}, {@decompose='decompose'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, 'securityem1$^nodev'}}]}) r2 = msgget(0x1, 0x50) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000500)=""/227) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000100)='./control\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='dmask=']) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000600)='/proc/capi/capi20ncci\x00', 0x101040, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000640)=0x3, 0x4) 15:36:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x2005040, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 223.904816] audit: type=1804 audit(1555428968.986:91): pid=11722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir056561209/syzkaller.GLNGOG/70/bus" dev="sda1" ino=17050 res=1 15:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x8001) 15:36:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f01240466010000ea01000086fd00007803000001800000000000000000000051a613dae77ab68c254aef1fafe7ca82cf6bfa6d8e951b0a78ae4fd2340d423f7d2d6526dcfd687ee82894e8a10b34ed5ee56c2f3079e40057df67a8aa43633c607296b909b5bac7904cbfdd62dbf6ba8924fe2fdd796239f2cac5167647884677ccb441d7f0260e9eea45e8afae01258e04c76ac3606dffb1e619726597040683a0fb40b78e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000590760d932ce6442772dd9e10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003b00f5f08d6dfd26cc3ffffdd0cd2f026d15887db2f05cdf4416a1f3989dc0413e71ab308ab4331e2ad270604f51a28b6bfd20f29e094fda9dff8fff4ae596daad246c02d88dcfa671c722d309894871106720cc7a573c5e7a78923d67a2ff8f253c07c4b039b6f817fd2f15a0b6adf7ea8c1a44f1d1123745f30a51e9b5aaab5df9b953d1f1737fb5eb7fe52c764c13b328c16ffd0c7a18038e5519449a579cb058acc653b9a2ce6f06d306a03ffd4e048109a41f38c81458aaf11ca110873794dcff007e70e946153e2292d6618c6270610f777cf99991f4cbf134"], 0x172) sendfile(r0, r2, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) [ 223.982279] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 223.997012] audit: type=1804 audit(1555428969.076:92): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir056561209/syzkaller.GLNGOG/70/bus" dev="sda1" ino=17050 res=1 [ 224.028082] audit: type=1400 audit(1555428969.076:93): avc: denied { create } for pid=11729 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 224.146962] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:09 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f00000001c0)="1dfdfda98484d5de910c41b748f5905b8256265f54f2823baf7fc0a87df519359e331389729d00383d0f9752eaefb907335611f909b1bce35a0ea54445a17f6ad6de9c67d1170b3788cd3a7410b5180c6d75c0ae17d0d47cbb85ba952cfae3cfbd059402553e5827224e25a4c9f414ece2f24c7ab58c61b69b5be8849c182483e48c6e6beb8b5e69733dde9befd9041cf53afa0a81291949258ceefefd021202c80a6cfc548844282615164c4755a59f91fa2440cb80dcb26125ed664b75bde8c4f56e439cb3eba07ffa81c3eecd1e6f37bd1876fe09b2d1ef", 0xd9) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000300)={{0x1, 0x3, 0x3, 0x9, '\x00', 0x3}, 0x0, [0x4b1, 0x0, 0x10000, 0x1, 0x9, 0x0, 0x5, 0x1, 0x4000000000000000, 0x401, 0x7fffffff, 0x16, 0x6, 0x0, 0x3, 0xae7, 0x5, 0x5, 0x109, 0xfff, 0x9, 0xffff, 0x9, 0x7, 0x92c, 0x3, 0x7f, 0x9, 0xe7, 0x7f, 0x0, 0x5, 0x0, 0x81, 0x1, 0x4, 0x2, 0xd5a, 0x7, 0x6b4b, 0x352, 0x100000001, 0xfff, 0x7, 0x7, 0x400, 0xf2b, 0x674d, 0x10000, 0x80000001, 0x800000000, 0x4, 0x0, 0x3, 0x4, 0x9, 0x4, 0x6, 0xb43, 0x6, 0x100, 0xffffffffffffffff, 0x5671, 0x4, 0x296b, 0x1, 0x8, 0x6, 0x80000000, 0xffffffffffffff01, 0x7ff, 0x9, 0x3, 0x40, 0x1, 0x7, 0xaf0b, 0x5, 0x0, 0x40, 0x800, 0x1, 0x1, 0xe92a, 0x9, 0x8000, 0x8a, 0x100000001, 0x5, 0x2, 0xffffffffffff469c, 0x5, 0x7, 0x1f, 0x9, 0x5, 0x6, 0x2, 0x5, 0x4, 0x2, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x1, 0xfffffffffffffffa, 0xff, 0x0, 0xc5, 0x7, 0x6, 0x9, 0x4, 0x27, 0x8, 0x4, 0x9, 0xfff, 0x8, 0x80000000, 0x1f, 0x6, 0x8, 0x0, 0x0, 0x0, 0x4, 0x28000000000, 0x100000001], {r2, r3+10000000}}) 15:36:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x80, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:09 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x9) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x172) sendfile(r0, r2, &(0x7f0000d83ff8)=0x2, 0x8000fffffffe) 15:36:09 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./bus/../file0\x00', 0xf, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000300)={0x15, 0x110, 0xfa00, {r2, 0x3f, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @multicast2}}}, 0x118) fchdir(r1) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00c0efbd462dee05a900080000ee8b08b7960ff7aa6e041a7700fdff863809aa0063b8f24252b1d85cbf000000000038f70f653f0ffb09f0d536b564df5e0acad550fe203534da9100ffffffffffffffa3841f9d63e232b9b2500fb1d96033ccfdff0664280bcd73bb53fa83267249c5db2f8065356ac6d408d91543009d09e9071806d148430c99263e6411bd281fafa597bf9cca18f0442e0577afe0ee67d2ca11082e42de9d7b7c0f50de4efe7150fa14a34f20e75408a11ae9be3938a7ebbec34ac1b923bf1d815c88dcf295851915989482bbeb086341d3cb"], 0xdb) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) ioctl$TCSETXW(r3, 0x5435, &(0x7f0000000440)={0x7f, 0x101, [0x6, 0x0, 0x100, 0xde72, 0x7], 0xffffffffffffffff}) 15:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x17) r2 = socket$packet(0x11, 0x0, 0x300) fcntl$setstatus(r0, 0x4, 0x400) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x80000006}]}, 0x10) 15:36:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000540)={'filter\x00'}, &(0x7f0000000600)=0x8) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x2, 0x2f8, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x3, 0x4, 0x2, 'ip6gre0\x00', 'hwsim0\x00', '\x00', 'bond0\x00', @broadcast, [0x0, 0x0, 0xff], @random="2eaf0d603f36", [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0xa0, 0xf0, 0x168, [@cpu={'cpu\x00', 0x8, {{0x1f, 0x1}}}]}, [@common=@log={'log\x00', 0x28, {{0x0, "266352d092694042bb09ef839c9af73cf43564e5403e0b870306a12965ef", 0x4}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x4, 0x9, 0x0, 0x0, "8fba3ba48a9796090b03be5401d3fdff0609328229caeb3d208f239f1697e0528b26e26dfc77838c986d3c41c14221f710ddefd2336c017e85e052bc7854d8c7"}}}}, {{{0x5, 0x40, 0xa05, 'bpq0\x00', 'vlan0\x00', 'dummy0\x00', 'ip6gretap0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0xd0, 0x100}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xbf9}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x370) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:09 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_pts(r0, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23}, 0x20) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) 15:36:09 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x1, @default, @bpq0='bpq0\x00', 0x100000001, 'syz0\x00', @bcast, 0x8, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x100, 0x0) r2 = dup2(r0, r0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 15:36:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x8400100000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="030002000300070008000600"], &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={r3, 0x6, 0x30, 0xfffffffffffffff8, 0x7}, &(0x7f0000000300)=0x18) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@rand_addr="29d41af49e1c34e1d8d59d85ecd6f884", @local, @local, 0x74, 0x8, 0x138, 0x500, 0x8, 0x1000000, r4}) clone(0x21020017ec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000100)) rt_sigqueueinfo(r5, 0x3c, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffe03c}) 15:36:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xff, 0x4000) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000001c0)={r4, 0x12}) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003580)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 224.464597] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffed4, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) [ 224.612881] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x82) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400000, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x0, 0x7f, 0x6a5, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e21, 0x1, @mcast1, 0x1e44}}, 0x285, 0x9}, 0x90) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:09 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xd1, "529a74ed7ec2bc229e45bdb3d961f11f22e6a516c9dcee103c76f8c9bcc8f5c0aa499a11a39505075efbba066ee34c23e9e50ad0b9e30945021fc94ff8f1425addd74a4ee5d6a564f8ddd84bfe1516a8a95faf130a8b8dd25ebf77c769f61b631bf16959620dbd03c01ba33d2e46c1467835c1b72a7d4251681ced21bf7dcf91037a081bd0a1230622e94b4b463efede00907b63eccf8da02ec8fe461e1040b6b2f9421f9eb8cf6975581193162334c51d4086911ffd9bf5b6a4128db889650dfaec97d10b4740a867a408d8189007efb2"}, &(0x7f0000000000)=0xd9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0xa0, @local, 0x7}}, 0x3, 0x4, 0x80000001, 0x7, 0xffffffff}, &(0x7f0000000240)=0x98) close(r0) 15:36:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r0], @ANYRES64=r0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32, @ANYRESDEC=r0], @ANYRES64=r0, @ANYRES64=r0], 0x28) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7fffffff}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 15:36:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x4, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, &(0x7f0000000200)="facf3dfa0033c53ac774c04b2eeb5f33d218e807391ce8a7ef623dc6335074e28aaab014fbd576314ce851549e0177894228f36be30b8b2b1eab6b4bcddc8aeefb0d88cfb96ffc7b6518ea9f7c65322db20865160757c1458871db4882b61914d0f6bcb7c17b60789d9be9c65945a430bc07", &(0x7f0000000280)=""/94}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000400)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x73, r2}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x202000, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000140)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x301000, 0x0) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000080)=@null) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x20, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000180)={r2, &(0x7f00000000c0)=""/153}) connect(r0, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0xb0}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:36:09 executing program 2: r0 = socket$inet6(0xa, 0x5, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vcs\x00', 0x200000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000540)) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000140)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000600)={0xd4d, 0x0, 0x3fe7, 'queue1\x00', 0x40000}) 15:36:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendto$inet(r0, &(0x7f00000002c0)="a9298c44b14656d300e4a6c26d3c0e8af0c1cf2f63412d0de3954df977394dc34d18ae275a3213aae1f580528d5856dc933bb7a265060a206b99fd80fa79b435dc2ed199cf8bf985ae97acc6868c43b54e2ea5b094e1af2c53579fee93819f9258127dae88a8a15b12c21024362d460ba10c1f9b782d41f4c2690fb64472a1f5d43ce4a73eff9be71e82ba86e0e38bbc2ec0e681bc808c651ea933386e5bafd780b11e5e7f9a4e684bb0bc55fd6067b10a1f4ebd41c7802c76514b14fb1f7f31e41557", 0xc3, 0x4000080, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffc50f, 0x0, &(0x7f0000000100), 0x40000, &(0x7f0000000240)=ANY=[@ANYBLOB='journal_dev=0x0000000000000081,nouid32,resgid=', @ANYRESHEX=r1, @ANYBLOB="2c7063723d30303030303030303030053030303030303034302c646566636f6e746578743d73630061646d5f752c636f6e746578744a757365725f752c00"]) r2 = socket$inet(0x10, 0x3, 0xc) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="24000000000b07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:09 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x5420) lseek(r2, 0x0, 0x0) 15:36:09 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002ff0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000100000000000000000000008e15adecfc04aba1"], 0x48}}, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}}, 0x3c, 0x0}}], 0x82382f710e0569ff, 0x10000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) migrate_pages(r1, 0x81, &(0x7f0000000040), &(0x7f0000000080)=0x5) 15:36:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x4, 0x23a, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file1\x00', 0x0, 0x400, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x3b0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:10 executing program 3: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xfffffffffffffffe) 15:36:10 executing program 0: capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000240)) r0 = bpf$PROG_LOAD(0x9, 0x0, 0x0) fsetxattr(r0, &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)='\x00', 0x1, 0x1) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000080)=0x80) accept(r1, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000280)=0x80) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="64143ea5f6770f7a584647fdedc3f71281d17d0b73db38711cdfc5f9635c3f79c66024e1ce9868c1888bfe84417f3175c147831f7ad36eb73ff89d3a71e1426997cbf6e41289010bf290fce8ec74a31abfd74f63a0da26c75141cf6142483afb8dd87cc88de467", 0x67) 15:36:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="7758081889ae23062d4fd02a037106ce4d3a99fa0a5b4b062f2c4114f72df05e8ded23084e3d2bf09369947c0e44eabb7da05182ef59230ad99110e65a453cbdd7f09bb8719f041f6058525b5f4d92dc31b38188f2489e3c30965aca09765a21cbccf96b7c9533c37784f6e9d4adaf18eb1f75cf748cfa0d8609b063471cccf3b63f16b98a9995cce1b4ce6c61997445975b97009ab9eeda17"]) 15:36:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x36) setuid(0xee01) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f0000000180)='./file0/file1/file0\x00', 0x2, 0x9, &(0x7f0000001680)=[{&(0x7f00000001c0)="72cba8a6cec50e8afbfb912d58c6e0f0bda1ae243e8c7f488d5ce8bd77254bf8b0a167c580b6cb3cdfa2908e367aed5ad1f5864a2f7c719f89c3b0963e93e12b6f00751bc3445808674c7511a8f0df400d14830263bb0098b4eb7f9bca740851d0ed69488abb75da13c8ca44b9b0117e951a6593876b18e2dd7a66617ca5c6afa9c6d5e44bd3b16b274cc58fe8", 0x8d, 0x9}, {&(0x7f0000000280)="e448fe6552e3c1c7c1fc4fb1ae45bcb3b5573509124c408e6af649099a170b977cec0bd2a15afdf556e2862e3c4973c671cb3b797227282b85d90aba8f7cf3fa5eaf97e29a238d7f486ed195a72cc5044d67fc21408ac68fab1fe81706e18ddad4dd452458792a", 0x67, 0xf3b}, {&(0x7f0000000300)="14ce5973dfb511569d94ec062d6f0b6fbb26cfee285e56c64b515f13f92b2648b728edcf84f8e2b3f8eb3315d1230b1741111bf643f1f156fb7b6b69e3c8d553cd82d31e8b269da3c019f34b824f4bcea4a44b7fe65f406d2e8f19777ce7eb3723e76c3e077d8562d3d9d04fb5bf769204f2efdf5d4effdb4082225f1ddca5f69c041ac44455b8159b3231d6cb11e0ef90ece632119a835b7ef0e210270065109f68ae2d4b482ec5f361a31c76d5ff745a8fcf02bd3766a764dd", 0xba, 0x6}, {&(0x7f00000003c0)="7b58925241c10cd938f5643201c5d94a9b75c15286454c363e73acd2290eb2b7606e84c66c5b8d055aae42a39da99861a50b7c27b7bd3dcc9a7d68167d975bea50de3acc148da074b43252702a14875c07446340e6f4cda8e15f23ab8dbe3ba04b290eaf2f04a82f7c2bd9034b73a238149e5c65c75ef3ca01e4d403e40a56dbc68a70eb89d83a786d4fb2b3a46b9b87cc74295d19a9f0f54d8cbef4281d11dc2e9f461013b7064e1f", 0xa9, 0x1000}, {&(0x7f0000000480)="c826c4f5aaaecb8a71b67a3f2d5d41d2916feb8479c89b5317e6680b21683c8ddd75da944bf6c7a1314ce6d52448995332a82243733bbefdf79329642111381d9aace613a3ce44329085bf5fbbe934a298cd01f117b8e372e628faa055858c59d3f9b4be66d388e1bc3a164c988bb5c3c187e16e", 0x74, 0xffffffff}, {&(0x7f0000000500)="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", 0x1000, 0x6}, {&(0x7f0000001500)="8241bd9ea2a9efabbcc2aa2ab713af5a2f908c854aa90956be72f73a4dee95a3b41cdd34c5de7e09f674eba0f956edcdada94eabac06961d41d002f91fe392280c1cff703a5384c0a7f3763bd852d22f7b1abc573cf65a3173ffe05c90432cd61f3245d008509a27707b3e2840548e95c11f0fcb99bdd83b14c610efb645f2aa9b91e68538e7e4d441f91af3844348603d2300863c5327fceacf16b462b31d58aaa73135aec2f6aa21cd1640a3959505ff81e5c94f919c890ecc33b8da9211afc8ea076c45", 0xc5, 0xffff}, {&(0x7f0000001600)="3cd8e7267cfa06b28a562f7a5b5d34ab3654", 0x12, 0x2f}, {&(0x7f0000001640)="d8ae13297af881babe009111cc76a58a2a1b442724191b1bc15e4655435a276f765cdd085a11025853f518a10f54c6b2b5f6c3f3daec8654da3ab556b0", 0x3d, 0x2}], 0x4, &(0x7f0000001780)='nodev\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x40, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) fstatfs(r0, &(0x7f00000017c0)=""/106) 15:36:10 executing program 2: clone(0x8041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0)=0x5, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x80000001, 0x30}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x2, 0x9, 0xfffffffffffff0db, 0x6, 0xee5d, 0x3, {r3, @in6={{0xa, 0x4e21, 0x3, @mcast2, 0xee}}, 0x100000000, 0xf91, 0x0, 0x9, 0x2}}, &(0x7f0000000280)=0xb0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x7f, 0x4, 0x20, 0xe1c3}) 15:36:10 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa680, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x3a, 0x17, 0x13, 0x3, 0x9, 0x1, 0x74, 0x1}}) 15:36:10 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) connect(r0, &(0x7f0000000000)=@nfc={0x27, 0x1, 0x0, 0x7}, 0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x182, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000180)={0x9, 0x108, 0xfa00, {r2, 0xb9, "bd65c9", "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"}}, 0x110) r3 = socket$netlink(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="2400000024007fffffff9e0000007701000000ff010000000000008af1ffffff0100ff10", 0x24) 15:36:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="14001900"/20], 0x14}}, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x5, 0x4, 0x0, 0x20, r3}, &(0x7f0000000240)=0x10) 15:36:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x80) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000100)={r3, 0x18}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r4, r2}}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo:,\x00\x00\x81\x80\x00\x00\xfa\xff\xdf\xf7\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) [ 225.563584] EXT4-fs (sda1): Unrecognized mount option "wX‰®#-OÐ*qÎM:™ú [ 225.563584] [K/" or missing value 15:36:10 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x69, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x9) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000080)={{0x3c, @empty, 0x4e23, 0x4, 'lblc\x00', 0xe, 0x3f, 0x6e}, {@remote, 0x4e22, 0x4, 0xffffffff, 0x4, 0xfffffffffffffffc}}, 0x44) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x106, 0x6}}, 0x20) mq_timedreceive(r2, &(0x7f0000000500)=""/4096, 0x4aa, 0x3, &(0x7f0000000040)={0x0, 0x989680}) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x9e, @local, 0x7}, @in6={0xa, 0x4e20, 0x55, @remote, 0x400000000}, @in6={0xa, 0x4e24, 0xbc, @mcast2, 0x401}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x17}, 0xffffffffffff754a}, @in6={0xa, 0x4e20, 0x7, @local, 0x8}], 0x8c) recvmmsg(r1, &(0x7f00000004c0)=[{{&(0x7f00000002c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x381}}], 0x6fdaec, 0x22, 0x0) 15:36:10 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xa680, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x3a, 0x17, 0x13, 0x3, 0x9, 0x1, 0x74, 0x1}}) 15:36:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:10 executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) listen(r0, 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x400) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x8}, 0x10) 15:36:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:10 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pkey_alloc(0x0, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") listen(r0, 0x18) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x4e23, @local}], 0x2c) [ 225.762465] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 15:36:10 executing program 3: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffd66) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000000c0)) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$kcm(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x654}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) close(r3) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1102400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) mkdirat$cgroup(r1, &(0x7f00000002c0)='syz0\x00', 0x1ff) 15:36:10 executing program 2: r0 = socket$inet(0x2, 0x7, 0x0) bind$inet(r0, &(0x7f0000001400)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000100)={0x2, 0x1000004e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r1 = memfd_create(&(0x7f00000000c0)='}E.ppp0.\x00', 0x0) ftruncate(r1, 0x4000b) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x200000002000d) 15:36:10 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:11 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:11 executing program 0: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x400000, 0x0) mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000000c0)={0x9, 0x200000000000}) ptrace$setregset(0x4205, r1, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x20, 0x17, {0x14, 0x7, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}}}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) syz_genetlink_get_family_id$ipvs(0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) bind$tipc(r4, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0x3}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r4, &(0x7f00000002c0)=r1, 0x12) ioctl$VT_DISALLOCATE(r4, 0x5608) close(r4) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) 15:36:11 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 226.531161] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003 15:36:12 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$int_out(r0, 0xa00000227e, &(0x7f0000fd3ffc)) keyctl$session_to_parent(0x12) 15:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000100)=0x8000, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 15:36:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="1af168e959db8b4007821ebfb501c02dcb0bf4397ff342b93e76f50b99527210833dd0e2e0e0f7d5a0db13a0794ebaeb8604d86bf9de4825bd4a9bdee68c513c2b4a27890b0ffa21cb16312b74d41b799a8627a57ed510e6f3f18f4581d7f1a8f37000f0eb3727012c87a116d3d8e7146cbc", 0x72, 0xfffffffffffffffe) 15:36:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:12 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x15, [], 0x0, &(0x7f0000000000), &(0x7f0000000080)=""/21}, &(0x7f00000000c0)=0x78) 15:36:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4200, 0x0, 0x8001, 0x20) r1 = memfd_create(&(0x7f00000005c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x004\xdd\x0e\xad\xb4\x83\x0f?Y\x94q\xbe\v=\\\xe9[n\xa3\xc6b\x8a\x92,\xddz\xe8\xd0\x88O\xd4\\\xd2\x9c\x90\x84\x9fP)|\xde\xb3E1\xf7\xbc\xbe~G{$\xad\xf7\xc8\xd4\x80\xce\x94\xd3\xbe\xae\xf7\xbb\xc2\x1d\xf0\xafZ\x99\x7f\xb8^z=\x83\xb5\xe5y1.c++\x9aW\xb2\x94\x89-j\xa1\'\x1f\x19k\xb3Q\xa6\x18\x8d\xe4\rR\a\x1b)\xc0s\xa9u\xb1x\xf5c\xd3\a\xeb\x7f\xb1&a\xfa\xdcZ\xfc\x80D\r\xac\r\xcbVfYT`\x8c\xeauW\xd6\x93\x02M\xd8\xbea\xe4\xa1\xdb\xbf7^\x1ch\xa2\xc9Ux*\x03\xbd7\xebFi\xa3\xc0\x81\xe2\x85~\xefP\x12\x90\xce+q\x9a\x86\x8c\xf3{\xd6\xed\x9a\xf3\xc9\xe8\xf1\xda\x1a\xbb\x95\xaaR\x11\xb6\xfa\xa9\x1d\x12\xa3\xc3\xe7B\x14\xa6`\xdd\x83\xde\xb6\xabB\xb9\xed\xd6U\xa5#-\xe1@\xf7\xf7\x8et\xd6H\x9bF\\oF\xba\xcb\x0erJD\xf9\xd6\xd2\xd0vG\xfe\xb6\xae\xc8\x9f\x89 \xff\x9c\x04\xf5\x86\xfbM\xfd\xcc:\vQ\xdd\x1f0:\x06\xf5\xda\xfb\xc9\x86p\xd4\xb7\f\xb7\xaa]\x05N0\xb9o\'^\x117d<\xbd\x1f\xac\xf4\xc8\x15%\x1f\x9c\xd1\xb9B\x84\xa1;\x85\"\xd4\x92\xa3\x1f\x87Z\x9a', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20000057d) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x3d0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = dup2(r2, r1) write$P9_RLINK(r3, &(0x7f0000000040)={0x7}, 0x3ed) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000240)={0xe2, @time}) 15:36:12 executing program 2: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x800, 0xa0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080)) 15:36:12 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0xffbf) truncate(&(0x7f0000000340)='./file0\x00', 0x8) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '/dev/fuse\x00'}, 0x0, 0x0, 0x0) socketpair(0x8, 0x800, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xee5d}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xfffffffffffffffc, 0x9, 0x8001, 0x0, 0x7, 0x5, 0x40, 0x100000000, r2}, &(0x7f0000000280)=0x20) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_INTERRUPT(r0, &(0x7f0000000380)={0x10, 0x0, 0x2}, 0x10) [ 227.498124] EXT4-fs: 3 callbacks suppressed [ 227.498133] EXT4-fs (sda1): can't enable nombcache during remount 15:36:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:12 executing program 0: syz_mount_image$ntfs(&(0x7f00000002c0)='ntfs\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fmask=']) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 227.582631] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 227.616896] EXT4-fs (sda1): can't enable nombcache during remount 15:36:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) 15:36:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="1af168e959db8b4007821ebfb501c02dcb0bf4397ff342b93e76f50b99527210833dd0e2e0e0f7d5a0db13a0794ebaeb8604d86bf9de4825bd4a9bdee68c513c2b4a27890b0ffa21cb16312b74d41b799a8627a57ed510e6f3f18f4581d7f1a8f37000f0eb3727012c87a116d3d8e7146cbc", 0x72, 0xfffffffffffffffe) 15:36:12 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x7}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x2c) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 15:36:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) 15:36:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$inet(r0, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x8, 0x7d60, 0x8}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0xffffffffffffffe1}, &(0x7f0000000100)=0xffffff8e) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x444001, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={r3, r4, 0xf, 0x1}, 0x10) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r5 = creat(&(0x7f0000000140)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, r5, 0x0, 0x12, &(0x7f0000000680)='posix_acl_access)\x00'}, 0x30) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000700)={{{@in=@empty, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000800)=0xe8) getgroups(0x1, &(0x7f0000000840)=[0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000880)=0x0) geteuid() getegid() fcntl$getown(r3, 0x9) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) fstat(r5, &(0x7f0000000940)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000009c0)) geteuid() fstat(r5, &(0x7f0000000a00)) getpgid(r6) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000002000)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@empty, @in=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000000cc0)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000d00), &(0x7f0000000d40)=0xfffffffffffffff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000dc0)={0x0, r5, 0x0, 0x16, &(0x7f0000000d80)='7mime_typenodevvmnet0\x00'}, 0x30) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)) fstat(r1, &(0x7f0000000300)) 15:36:12 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 227.779659] ntfs: (device loop0): parse_options(): The fmask option requires an argument. [ 227.810612] EXT4-fs (sda1): can't enable nombcache during remount 15:36:12 executing program 4: lsetxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64MMAP\x00', &(0x7f0000000180)='usrjquota=', 0xa, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:13 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) inotify_init1(0x80800) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000040)={@empty, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@empty, 0x59, r2}) ioctl$NBD_DO_IT(r1, 0xab03) 15:36:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="1af168e959db8b4007821ebfb501c02dcb0bf4397ff342b93e76f50b99527210833dd0e2e0e0f7d5a0db13a0794ebaeb8604d86bf9de4825bd4a9bdee68c513c2b4a27890b0ffa21cb16312b74d41b799a8627a57ed510e6f3f18f4581d7f1a8f37000f0eb3727012c87a116d3d8e7146cbc", 0x72, 0xfffffffffffffffe) [ 227.938678] ntfs: (device loop0): parse_options(): The fmask option requires an argument. 15:36:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r1 = dup(r0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0x4008af03, &(0x7f0000000140)=0x40) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 15:36:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0x9, 0xe, 0xb182, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl(r0, 0x8, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x1c8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x353) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) 15:36:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4000101000008912, &(0x7f0000000040)="0adc060000003f319bc070") setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x5, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000080)={@broadcast, @dev, [{[], {0x8100, 0x8, 0x200, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) 15:36:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1000002, 0x40800000000031, 0xffffffffffffffff, 0x0) [ 228.083971] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$minix(&(0x7f0000000100)='minix\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x6, &(0x7f0000000540)=[{&(0x7f0000000180)="50950822dbe7e8a7588bf89b18a437e841e32c5671d4d8ce0c0ea5b2712a12c15f6e10fd6d2220ee7ed71151b4cc8c3b791800107276b3184c69f3bdd4c6d09fdc92ec0a51c85383f658f1930c1fbb6e80531664e27509854e3f9bb4b3e88ba9724694c429b3b52949cfc07c2a3cff", 0x6f, 0x1}, {&(0x7f0000000200)="55ef064718b4a15a204ef6b373c490e84093d9dc87ad7a", 0x17, 0x4dd}, {&(0x7f0000000240)="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", 0xfb, 0x5}, {&(0x7f0000000340)="62552a5c547a808a9ad80fc09cfc834c870385de56cc127bc389c3c923b9a05b3eac63e6610d0ba1632b3fd0fd8502253b042b4e4b730155eb113b868daa4dc57cb19bb57a7f057c22fdb805f37359ed12d90c9c16dd6c1f4cd32ea850818b86716aecaccdbc5be3423e42c9573f119ee3df0f383c596400b2d5255118ca24ba0d15401d3d2f86010142a0ac059ec98879ac1bfa8bb629b58446e209061c55b96b3a0d2bf3a20ee02ac7073b03", 0xad, 0x10000}, {&(0x7f0000000400)="161f027ad7470a6ca9b490", 0xb, 0x6cb}, {&(0x7f0000000440)="c8fac604ed28b15708848c41ae08fc9879027e542147916f00987d9be1b26ab602ec5b63c09f244d10a229a5477ab1fb81340651cdd2d122f0e9b9454adcd7ab0fc05d11509ff5624917c3fbd4a0feba85c9214bc3e83bb76e69003e591088b3767e4c02701cbbd69fe688808c510be55626ec8c493defa5856e9969b5c8afa224c621832a4d292cd1fa3abda4c6f65428012d0d98c90f940a323892b1783c8e428e4d45b5773dda91ce1544fbe10bb9a90cc779559c661f8e0013513382f9edda9345f463454052ee", 0xc9, 0x4}], 0x2000000, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:13 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x80045301, &(0x7f0000000400)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2080, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr="5a6d64bac1bafc359a8da83eac39f39d", @in=@remote, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x5e, r2, r3}, {0xff, 0x0, 0xff, 0x3, 0x7fff, 0x0, 0x9, 0x1}, {0x8, 0x3, 0x9, 0x6}, 0x0, 0x6e6bb5, 0x3, 0x0, 0x3}, {{@in6=@ipv4={[], [], @broadcast}, 0x4d2, 0x3b}, 0x2, @in=@multicast2, 0x3504, 0x7, 0x0, 0x9, 0x0, 0x0, 0x6}}, 0xe8) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) [ 228.147978] EXT4-fs (sda1): can't enable nombcache during remount 15:36:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:13 executing program 1: r0 = socket(0x1e, 0x1, 0x0) getsockopt(r0, 0x111, 0x0, 0x0, &(0x7f00000000c0)=0xfffffffffffffe40) 15:36:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) read(r0, &(0x7f00000001c0)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = epoll_create1(0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) r3 = syz_open_pts(r0, 0x0) close(r1) dup2(r2, r3) 15:36:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="1af168e959db8b4007821ebfb501c02dcb0bf4397ff342b93e76f50b99527210833dd0e2e0e0f7d5a0db13a0794ebaeb8604d86bf9de4825bd4a9bdee68c513c2b4a27890b0ffa21cb16312b74d41b799a8627a57ed510e6f3f18f4581d7f1a8f37000f0eb3727012c87a116d3d8e7146cbc", 0x72, 0xfffffffffffffffe) 15:36:13 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x2000400000000009, 0x0) poll(&(0x7f0000000100)=[{r0, 0x8041}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x1, 0x1, 0x201c, 0x6, 0xf, 0x3, 0x1, 0x3}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x9, "d60700000000000000000032f101000080917149fd661837b011b15f24fc4d12"}) 15:36:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0xe98, 0xffffffffffffff01}) accept$ax25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x400000000000000}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x52}}}}]}, 0x48}}, 0x0) 15:36:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 228.356784] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop4. 15:36:13 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x20000) io_setup(0xb8, &(0x7f0000000000)=0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000000080)="e382e87b17736236192723", 0xb, 0x8, 0x0, 0x2, r2}, &(0x7f00000001c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f00000000c0)={0x0, 0x35e}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0xa, {0x20, 0xffffffbffffff800, 0x8, 0xde}, {0x3, 0x10000, 0x7, 0x2}, {0x7fff, 0x3}}) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000200)={0xac1c, 0x7, 0x3, 0x1, 0xfffffffffffffffe, 0x8}) io_setup(0xfffffffffffffffd, &(0x7f0000000240)) write$FUSE_POLL(r2, &(0x7f0000000280)={0x18, 0xfffffffffffffff5, 0x2, {0x1}}, 0x18) [ 228.455291] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 228.472531] EXT4-fs (sda1): can't enable nombcache during remount 15:36:13 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x1000) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/86, 0x56) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="79d486fa372f2d5896f535d8af37", 0x0, 0x200}, 0x28) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x400, 0x10000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000000c0)={0x8, 0x101, 0x5}) 15:36:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) 15:36:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0xe98, 0xffffffffffffff01}) accept$ax25(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x400000000000000}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x52}}}}]}, 0x48}}, 0x0) 15:36:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:13 executing program 0: mmap(&(0x7f0000000000/0x4cc000)=nil, 0x4cc000, 0x0, 0x65031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000c2a000)='./file0\x00', 0x918, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, &(0x7f0000138000)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x281, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) 15:36:13 executing program 0: mmap(&(0x7f0000000000/0x4cc000)=nil, 0x4cc000, 0x0, 0x65031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000c2a000)='./file0\x00', 0x918, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', 0x0, &(0x7f0000138000)) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x281, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) [ 228.696403] EXT4-fs (sda1): can't enable nombcache during remount [ 228.704196] audit: type=1400 audit(1555428973.786:94): avc: denied { map } for pid=12174 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43201 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 15:36:13 executing program 4: pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x18) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lookup_dcookie(0x400, &(0x7f0000000100)=""/166, 0xa6) utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80, 0x0) 15:36:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r0, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x1052, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080)) 15:36:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x40, 0x0) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/159, 0x9f) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x100000000, 0x8800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)=0x4) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x400, 0x28a95ba5}, {0x2, 0x1400000000}]}, 0x14, 0x3) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 228.921784] audit: type=1400 audit(1555428974.006:95): avc: denied { shutdown } for pid=12196 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:36:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_group_source_req(r1, 0x29, 0x20000002d, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @initdev}}}, 0x108) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42803) tkill(r3, 0x1) 15:36:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:14 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000200)={0x0, 0x1f, 0x0, 0x0}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000080)=0x3ff) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) [ 228.972603] EXT4-fs (sda1): can't enable nombcache during remount 15:36:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) sendmsg$nl_netfilter(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd8, 0x9, 0x8, 0x210, 0x70bd2b, 0x25dfdbfd, {0xc, 0x0, 0x4}, [@generic="b5a6d9b761610015f3f864cb3d04c7643b635f21bac8b63b790e8fdece3caae5a12e395d92bd0cf5b5ab3555f6fc423318bf841a616876deedc34a18a66f586aa6da8d868c7064016211b87b453e0caaee85f1b9c9d62a3e123a8940cf798eb6e35a741a3e438020466824a875478e15832240a20637ffb8c616f3d6bc352649fe426586d8cd8d8b2b0a0d7ec1fe1c7a1f8f92ab65e9e37f40560b545921f162e9d5b45a4f3479d9e76575b9c9635f5bee9194792e9a1df263ea7f30197d1e2dc5"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040084}, 0x80) 15:36:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 229.035036] audit: type=1400 audit(1555428974.016:96): avc: denied { map } for pid=12196 comm="syz-executor.2" path="/dev/bus/usb/004/001" dev="devtmpfs" ino=15176 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file permissive=1 15:36:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:14 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="d712") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r2, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x195) recvmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000080)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/143, 0xfffffdde}], 0x8}, 0x0) [ 229.141565] md: invalid raid superblock magic on mtdblock0 [ 229.157558] md: mtdblock0 does not have a valid v0.0 superblock, not importing! 15:36:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1ff, 0x40000) getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 229.184636] md: md_import_device returned -22 [ 229.263570] md: invalid raid superblock magic on mtdblock0 [ 229.270606] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 229.296012] md: md_import_device returned -22 15:36:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/125, &(0x7f0000000080)=0x7d) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:36:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="240000001a0007041dfffd946f610500020000001f00000000000800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 229.489125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.507114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 15:36:17 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x188000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount(&(0x7f0000000040)=@nullb='.u.:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7f, 0x210000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x418d, 0x280000000, 0x2, 0x0, 0x0, [], [], [], 0xfffffffffffffffc, 0x7}) 15:36:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x2000ffe, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 15:36:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1ff, 0x40000) getpeername$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:17 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) 15:36:17 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='net/netstat\x00') lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2000000000003, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf={0xe, &(0x7f0000000000)="557456b7599326c74a0b21b0a773"}) 15:36:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 232.087909] libceph: resolve '.u.' (ret=-3): failed [ 232.093191] libceph: parse_ips bad ip '.u.:d]:.,[' [ 232.105661] libceph: resolve '.u.' (ret=-3): failed 15:36:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB='ujquota=,\x00\x00\x00']) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x480000, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x9, 0xe5, 0x10000}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0xffff, 0x3, 0xc, 0x9, 0x0, 0x20, 0x4, 0x2, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x2}, &(0x7f0000000340)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4000000, @mcast2, 0x7f}, {0xa, 0x4e22, 0x3, @remote, 0x200}, r2, 0x7}}, 0x48) 15:36:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 232.160707] libceph: parse_ips bad ip '.u.:d]:.,[' 15:36:17 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) fcntl$getown(r0, 0x9) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x1}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r2, 0x80, 0x5, 0x1}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000000280)) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000040)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=0x12) 15:36:17 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x600400, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x1308b) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000000c0)=0x8031008) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='0.\n:d]:.,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 15:36:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$peekuser(0x3, 0x0, 0x3) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x9, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) accept$alg(r1, 0x0, 0x0) 15:36:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:17 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xb6, 0x280000) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="04692ca77b1660c6b82852e5c901f2c82ee0713330acbf0f01b45ffe13a1b03efc1c1b2854a2fc661396422db53e66ce67ec0624", @ANYRES16=r1, @ANYBLOB="040128bd7000fcdbdf2502000000080002000a000000080004000100000004000500"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) [ 232.387470] libceph: resolve '0. [ 232.387470] ' (ret=-3): failed [ 232.397553] libceph: parse_ips bad ip '0. [ 232.397553] :d]:.,[' [ 232.412330] libceph: resolve '0. [ 232.412330] ' (ret=-3): failed 15:36:17 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$UHID_INPUT(r0, &(0x7f0000000100)={0x8, "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", 0x1000}, 0x1006) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000003) 15:36:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 232.443427] libceph: parse_ips bad ip '0. [ 232.443427] :d]:.,[' 15:36:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/udp6\x00') ioctl$SG_SET_RESERVED_SIZE(r0, 0x5385, 0x0) 15:36:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000100)=0x80, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, 0x19, 0x201, 0x0, 0x0, {0x1d, 0xd601}, [@nested={0x18, 0x4, [@generic="13319101344862428f476a5fe6551c8da7"]}]}, 0x2c}}, 0x0) 15:36:17 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:17 executing program 1: syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="2e65660f73f7b5b96c0b0000b800200000ba000000000f3066ba410066b8000066ef360f35c4e2512e98d9102485efb87ac400000f23d80f21f835400000000f23f866ba4200b0b2ee260f0096311d8e2466ba4100b0c8ee", 0x58}], 0x1, 0x48, &(0x7f0000000100)=[@cstype3={0x5, 0x5}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe5f, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x0, 0xfc698b8692517f15, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x0, 0x6, [@TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_ADDR={0x0, 0x1, 0x6}]}, @TIPC_NLA_MON={0x0, 0x9, [@TIPC_NLA_MON_REF, @TIPC_NLA_MON_REF={0x0, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x0, 0x6, [@TIPC_NLA_NODE_ADDR={0x0, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NODE_UP]}, @TIPC_NLA_SOCK={0x0, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x0, 0x1, 0xfb}, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_HAS_PUBL, @TIPC_NLA_SOCK_REF={0x0, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x0, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL]}, @TIPC_NLA_BEARER={0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x0, 0x3, 0xef}]}]}, 0x14}}, 0x20000000000) 15:36:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r0, &(0x7f0000000140)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x80080001, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000100)=0xff, 0x4, 0x4) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000180)=ANY=[@ANYBLOB="338b4eb941bc990b6fcd8cdb5af191acbf3b4a8da2c53f086420046bef8acf1fc2fe6ccc8366f442cfebf2f616f380734097a4c2e65484b4c82cd69414587fd3"]) 15:36:17 executing program 0: mlockall(0x1) clone(0xfffefffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) [ 232.747575] EXT4-fs: 6 callbacks suppressed [ 232.747585] EXT4-fs (sda1): Unrecognized mount option "3‹N¹A¼™ oÍŒÛZñ‘¬¿;J¢Å?d kïŠÏÂþl̃fôBÏëòöó€s@—¤ÂæT„´È" or missing value 15:36:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:17 executing program 3: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:17 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a84831", 0x3) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x400) r2 = accept$alg(r1, 0x0, 0x0) signalfd(r2, &(0x7f0000000040)={0xffff}, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 15:36:18 executing program 1: capset(&(0x7f0000000000)={0x8020080522}, &(0x7f0000000040)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008953, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x503, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x14) getresuid(&(0x7f0000001a80), &(0x7f0000001ac0)=0x0, &(0x7f0000001b00)) sendmsg$nl_xfrm(r1, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)=@report={0xa0, 0x20, 0x0, 0x70bd2c, 0x25dfdbfd, {0x32, {@in6=@local, @in6=@dev={0xfe, 0x80, [], 0x12}, 0x4e20, 0x7ff, 0x4e24, 0x401, 0xa, 0xa0, 0x80, 0xff, r2, r3}}, [@replay_val={0x10, 0xa, {0x70bd26, 0x70bd2c, 0x81}}, @srcaddr={0x14, 0xd, @in6=@empty}, @migrate={0x30, 0x11, [{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, @in6=@ipv4={[], [], @loopback}, 0x33, 0x4, 0x0, 0x34ff, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x840) 15:36:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x4000, 0x0) sendmsg(r0, &(0x7f0000001900)={&(0x7f0000000140)=@sco={0x1f, {0x401, 0x4, 0x7, 0x38f, 0x81c5, 0x5}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="3e5c60e6496088cd8173e7d0d6e8416230c7d0591bf92d46cad9fb151d67037ffeecaa4378a9f286d9dabb54292bb22fa3fac8f650845b8c5e3fdde2191ffe055a5901b6ed4be4a3", 0x48}, {&(0x7f0000000240)="f2ad987e24362959aba8db1596121d4f8380e77a97118f85df6aaa8b4a5be1563bdfeeb8acf4e2d999a87389cb1553cdfe9a86ecb67c41158b4103b881e50dccace99d386fbbf3b0805de63d7012dacc6c90bc0745bc32d99d4fc3e15c3a58e7473dca2bac", 0x65}, {&(0x7f00000002c0)="423639c62a755b5491f9dcb1a5a660fe892a02a3d6683c26e37e0416279588798eb359b4ed3260dc03d6d60b1547d5e51f8c2cadbf178bc34656fc17bf2cd8309ed21f86eeda826087591c55554f3aa2eec533b3d9fb9bc096d1bef190a853f0fd45905e597bc4641d4ced49081a5919b5221cebf674aa4b2f46c9261280b34ca95619593183f6f6e3a8cb281942393cf5ac8fea29f34a46022035ccc0b5bcf0a76170cfa8a842d5c7e0e384596ac6a8d973aa6e0d1e178aaa9db2ef778f0a1b269462d037", 0xc5}, {&(0x7f00000003c0)="505c4ffd984f4b162509760065256018d223cbde0fb29ad31f4fad0947cd0f2aba38106dd2bb6515a80435e7a5e7af4dec549c3ced2e08dd583e7820b7f644797a0fa5ffb86e833cf85143259ffe1d83668e3ffc77e621c43f68ff8f12315acdd2a3ba4fa3", 0x65}], 0x4, &(0x7f0000000480)=[{0x1010, 0x11b, 0x4c, "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"}, {0x88, 0x10e, 0x100, "ca8183d9c3b022758b1e000cc3454e1a4fb81e51fa012e90d7673a9a626fa30cc50f1dd079811ef018d526f8128351c85bde618a9037f43c431630f64bb4ecb2b87208ac69635262d33e2288ab6b9c8cdeb6f36bfd3a21f32d3144e17f0fc5ce724fc06f6a574c9cd5766ee9253a08ea2a3f244e62bc2bcd"}, {0x100, 0x12f, 0xeb78, "5afbeb93014f980cabc8b6ab7cfc7ef9043e099855e75309d8259483703252add7c8dfd2746de5a00f216fa468b3b67e4a1d14969f264d1dffda4be49a7dbc21131bd87b648dfba74e473cb84da23a7b41f9de3bac6d6e3fd7bef2ef16336f829471ef860fa3442e0f96b07158fbbe7d150621279a04337b03a7189a63a50962e3877ee2aa6b2fca7cc4a5c0720cb08579da4fc9e7d4c2154e68abbd3cc766135addf4ea880b88803c11b94a908a6b3d4fc4801c54ec75208695990e85621df3d89c35501127ed7cc11ec10b879273cffba338b36fc012703682b848fb7a2015d9aa78b76e25b9ff59"}, {0x68, 0x185, 0x6, "59fa78fe350cb11da62d53df94ff98739d1dd4cf05f9146b2aa023f886b102db40ecbab3e9d13a241d91312909507cd2fd8be7b37d06d974f69209da5e92937bd3c0e4d6580fac71d5fe8a29c3181b25053314959351"}, {0xe8, 0x116, 0x6, "f690f4bc99f9145b17da3308c322ad9a2425b4bfadf7d38d99621df34a0debd9ea3dfbd14d42458afaf97f30bc532dc9b2c1b76fb88f9df8b354583bd57c928bd52319679955c3e12d4853843103fb78033f388cc5a0fc2d71ddb64eaf26bf75031b30251e2fb5b02907be2da5c9128434d5e895b72f40f23ece5067b6d3ebeb9d9f36aae00b9355b81e16f2f0d2c1bb139fc75a208296dd8fb8e67087d43f9f3b1d4aaa60403ad9f37b089fc819a3e790eeb4414c3da7685a1a0597060745dc017037a3431b9d17963cb0d73ca56dd87a0daee11a15"}, {0x98, 0x11f, 0x0, "89f474c299319bf3049db7e2de90ebb22c689ef5605725a848766d9ce22f2781f6ee14ee88cddbeb69b8d93d8582be479f3895770e5f55e4cb5dab75b77249b93830df4980656241f067b7f28be80bac9f3a01f9c4d5170e15d0e2a04ac88c0d9c09354bbe0bce2dd4a062783ada1d60d2b43b903e2326278f319f723a50c23127a3f80f"}, {0x98, 0x104, 0xfffffffffffffffe, "9acca27d19ed32c62f29e5c8a9fc8e88dbee83f95c39a3d5c64c33122202b5676244f61cecbc19cf926de0dac595d60a7b4a8596e7e9a9376dadd0f8925dbfdc4cd7953bebac7829b7fc25f4b48ec46e2587c2c6ae5a9b41f74f56a92ef5c19e2032422ad68f6d1239756446fdb7de0efdc6f7dd9536317ed7ceb70a7ecaeb96e6639ecbbb"}, {0x68, 0x118, 0x7fff, "8e21bedd854423b436b9a7e1ea0abab7ff2d7b0a593e8eacc6619d6c9319294035a719d95cb3083f885f34482fa8019f25c6c011a4d6dc8a3fc0d483e38bb36fbf63bc4bacd7f74efeda2630f5e8d35f5d1f5ef7a9a9"}], 0x1480}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:18 executing program 2: getpgid(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000000)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devpts\x00', 0x0, 0x0) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 15:36:18 executing program 3: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:18 executing program 3: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:18 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x34100) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000080)) close(r1) 15:36:18 executing program 2: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000001c0)={0x6, [0xda, 0x3, 0x9, 0xa3, 0x4dc8b439, 0x9]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x20) [ 233.144808] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 233.320214] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a1e207a1efec581a1698eb116c10d80929052d91e63123c") r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x227c, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) 15:36:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:18 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xe31, 0x20000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x7, 0x84000, 0xffffffffffffff9c}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x8, 0x6, 0xfff, 0x800, r3}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x8, {0x77359400}, {0x2, 0x2, 0xffffffffffffff80, 0x3f, 0x8001, 0x3ff, "c57b25b9"}, 0x4, 0x7, @fd=r0, 0x4}) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000000c0)={0x2, "dbead4533d56683ccc0f7b0e9a2af0783e735df988019a642a5e9c6d17cd3cbe", 0x3, 0x1}) 15:36:18 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0fc74c05"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000000c0)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:36:18 executing program 3: mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:18 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10000, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}, {}], 0x2, 0x2, &(0x7f0000000180)={0x5}, 0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x9}, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r2, r3, 0x0, 0x7f7ffffc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000328bd7000fcdbdf2501000000000000000741000000140018000000097564703a73797a3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4) 15:36:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:18 executing program 0: getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xc8, 0x0, 0x0, 0x70bd27, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa420000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffffe}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x97}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x3f}}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x11}, 0x4000) ioctl$TCSBRKP(r1, 0x5425, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801910c0}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x2}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) [ 233.668926] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:18 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) dup3(r0, r0, 0x3) preadv(r0, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/146, 0x92}], 0x1, 0x0) 15:36:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 233.769095] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 233.789783] audit: type=1400 audit(1555428978.866:97): avc: denied { map } for pid=12494 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:36:18 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x10002, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000140)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x9f, "88dab49b2aab765fb6c571282d4b81f4a5cbe6fe0ad8fadaf809052bccdec246c75beece631caa32963540e8e90afa51e076cdb08b7ebd8f6508080153844bc652cd961c56202f968c1178eea4e7652c5c31cd472614830d40c1e49bf9b87a92fee5f45865267fb82ef62f370f2003e33dc17a7519c1187cfc2960539c4218aac0e0c9519f63c165d59e283b9e879016295c5e67b175de3d6848b7d1aae1df"}, &(0x7f0000000200)=0xa7) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={r3, 0x5ac6}, &(0x7f0000000480)=0x8) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000280)={0x3, 0xe7, "2c455fe539f572ae4f404ba6139654ecf72e0222b0a5add8d981c9de4cdfcde96222179fe4d53d99164208102593155b87edbc5cf7b70861db0d71f5c4f19cd580e7e5a1ef0639c39a57bb3ff107a19969925f062a95199260d4ca124ebe2b478b292b663707b8ca7dd657e67a7372c5e96448558c4a1e0509e191c4de0694d769e3144cc4c0dca1cb0acf6efb85ee9f3dbacec0af26c70b2aefa27197a770d4cb5d9d9d42d96b9437ee17c22ff501e05f3f24b844346dfcd923afba35d43e07787d435e8b65c21b9e21ebcc5a400d2e1cf6465194cdd817fbe0540d73e6327707ab4b3e90b79e"}) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000180)={0x1, 0x0, {0xa200000000, 0x9, 0x9, 0x8}}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:18 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 233.839477] Unknown ioctl 21541 15:36:19 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="5cf30fa078410227a95ddaa96316188ee16d135e14624e3955cc40c933ead4ad6b80ec3a6921a5f46265db17f52be216f1d617af9bda23b827f6a7934cbc6e72c6b8b072a85c6bf3ab4f89ff34a696705c5c4a44fca16d8c00ff071149edb62e9c2489022d22afdf29c9ed16b660fc91bcd3d65f0bfaf978f504c8e946ca569b9950a8c5ce7d345b90b828364ae8488ca09bd5608fecfbdffcd400feb78fcca6a552ffd4c6276537c83ece92a101b4ed9c644b17d63b511431a86c9b36fd3d2c1a5acc27a1e3ae2821b08db7"]) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0x1e, &(0x7f0000000000)='securitymd5sumppp0loeth1wlan0\x00'}, 0x30) ioprio_get$pid(0x2, r2) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000140)=0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x3, "795baea3958be644"}) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) 15:36:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 233.918468] audit: type=1400 audit(1555428978.896:98): avc: denied { create } for pid=12487 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:36:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:19 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x103003, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x58880, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x8, 0x1, 0x8000}, 0x4) [ 234.032472] Unknown ioctl 21541 15:36:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) accept(r0, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@rose, @netrom, @remote, @null, @netrom, @bcast, @null, @netrom]}, &(0x7f0000000180)=0x80) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:19 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='n\x18\xf7\xffS\x87\xe2\xb8c\x00\x06X\xf7\x95\x86O\xd7\xdeB\"\xfcm\x8e\x16\x04!/dz\xef\x86p\x8d\x8c{\xe2\xbd\xbf~9\v\x0eVMG$\x0fH\x17\x9dc\xc2\xb9A\xa1\x91\x17C>\xf6\x13\xea\x1bB\x11\x06\xa6\xd9\xf2\x1cf\x80\x8e\xf7\xbe\xcd\xcc\x16l\xea\xbfM\xd4\xd96ES\xc5\xcf\x18\xdf\xeb\xf2^z\xd0\xc7i\xb7\xf2\xa3\xb9zzvT\xbd\x8e\x05\xdd\xc8\xcdy[\xff\xe00\x8cD\xc0\xa6\x9e\x91\xb64\xf1o2NA]\xefx d\xdcCcdI\xaa \x8bi\xa1\xd1\x1b0\x84\xe5\xde\x83\xa5E\x85\xa8\xa1\x8aC\x83\xa6\xae(\xa8o\x12\x10\xfa\xe7\xc5\xdd\x04\xa8\xbf\xb9N$\x18\xb5\n=\xfd\x1d\x99\x90tb\xc3`J\x90\xbd\x0f\xff\as\xd2\x1a\x1b\x8bNo~\xceq\xcfs6\xca\x8d') readv(r2, &(0x7f0000000080), 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'batadv0\x00'}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/226, 0xffffffffffffffd1}], 0x1) fsetxattr$security_ima(r3, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@ng={0x4, 0xa, '5'}, 0x3, 0x3) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f00000001c0)={{0x0, 0x2, 0x16d, 0x0, 0x1}, 0x80, 0x7}) 15:36:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200)={0x3, 0x2}, 0x2) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x20, 0x7, 0xfffffffffffffffe, 0x5}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r3, &(0x7f0000000080), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) poll(&(0x7f00000000c0)=[{r1, 0xffd}], 0x2000000000000096, 0x7) [ 234.084660] audit: type=1400 audit(1555428978.906:100): avc: denied { read } for pid=12483 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:36:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:19 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e22, 0x9, @local, 0x1}, r1}}, 0x38) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaff07aa86dd60ca819d00088800fe800000000000000000000000000000fe8000000000000000000000000000726677b68383111b074fe36dce13c4565fb6d8bb5367675a5585efcca9e5cdc16e9f85cab7ee28d7f0e6d1f70df1f9006b68312f5507ef43cdf5feefd384f856ef58662660ba82620f01c1da95ddee43d6a41b749b1537e74ac8ce672380cc9403c68db0cad87a2a6b7e597aec4991b5fe29c7d6db"], 0x0) 15:36:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 234.254434] audit: type=1400 audit(1555428978.896:99): avc: denied { write } for pid=12487 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:36:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 234.393664] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 234.403524] audit: type=1400 audit(1555428978.976:101): avc: denied { create } for pid=12483 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 15:36:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 234.436702] audit: type=1400 audit(1555428978.976:102): avc: denied { write } for pid=12483 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 234.470359] audit: type=1400 audit(1555428978.986:103): avc: denied { read } for pid=12483 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 234.503851] audit: type=1400 audit(1555428978.996:104): avc: denied { map } for pid=12506 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 15:36:19 executing program 4: mkdir(&(0x7f0000000b80)='./file0\x00', 0x4) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000e80)='/selinux/checkreqprot\x00', 0x400000, 0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f0000000ec0)="cb6377eb633f04d250c8ec9f5489e1ff191ee062e72181e54ae40e2d07d6e2be785a534bc796", 0x26) r2 = getuid() r3 = syz_open_dev$vbi(&(0x7f0000000940)='/dev/vbi#\x00', 0x0, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a80)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010428bd7000fedbdf25010000000000000007410000004ce3a650b02abb73797a30000000000000000000000000000000000000000000000000000000004900000000000000000000fae1361a2307985f0000000000000000000000000000000000862debbbc77896e464a3f37aeedff817ee5ffe3e7216158ddd75025f76007dfe302e76a87cc6f15292a0c79da6b2ef685caac70b9170c8d5a5c5e2d5ce0c11449c23456d91a389925a2b2f55b782f18211c05a485a3fa3dd4f3dffebfd97318e0a6c34107a52601064fb0415026cc3eac850570e40944b89d9d05542e484eab7c31ea0006099e2697b5bf78357ad74dd3e1131a313473d641c5ede0a"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40001) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000b00)={0x2, 0x0, [0x6, 0x5, 0x0, 0x885b, 0x75, 0x87, 0x10001, 0x1]}) prctl$PR_GET_SECUREBITS(0x1b) getpeername(r3, &(0x7f0000000840)=@nl=@proc, &(0x7f00000008c0)=0x80) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x521200, 0x4) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="7192dd2688228fdef3b6146b7463dab8d00e68c194b2b39a50a7648f06a3be9ae403ea2eee4bf017a2a562d87517d6052402be8317c6ccf43a1df298eddb6965f4054ed78181e4bea498eff32cf8f04be507c3d63bbe4c60ffa57507f70f3b171ea28292bf9dbef08ac1f6933b0d08374839f66e808b726da0ac39a7f8eb53c43651e9e56067cb2a10e40084827a551429e57501a0810af12afb9049ee20303d0d23792edc4f403fa07c33954d4e02aab27fb99af306d886413bda068b913d3f19ce08985a3c6f22ab57a415759e293b025a80600f23959cbdfe6e2983b8e4768e65c091efab6021f1cbbe2a", 0xec, 0x87e}, {&(0x7f0000000340)="30fc92c08e7f6c345a79c4bcc4e0c2611fa8813368cb0a8cbf24cb8acf8fe5f1197be91685523ab038ef19a82d0fdc72392d998a029457e1e4f9d541e1400b4da051d2c7a8045d9ef75efb5f553c9df4e4bd04c4cf3bd643ecf7c03c6ff9e0b693bbfcf8c209a28f9e7e478cb7b2e5eee2af65a8732253e3a3feb6a67d362de948344f408767bc6858892bed05dc6d8a646d4899b63fd2c5ca160afeadd8b3c384755da619416d6c844f660a5b42b22bffc8809004994b42a47b045f", 0xbc, 0x3}, {&(0x7f0000000400)="2d8dac84f13667d60eb186e11a1b5b9482fdbea1854ab8d118b4fdf0bf63eedbda4ed44c84be2d1e401bfbd628e4ae18ba28ce7d20fafd204e4689e38f0f2286c76ae76693e08eded3dd4ccfe0310f3afa08465016163a6b99e80b4e05ad3727de63d28849b5f6f571651ee679379aa6b40ed87494a07cc3de3d9863cf480ea573eb8db9078f839330fcb63e91d8b69413a324c01b35a1b4ca9273844e781b03433934644e2f5d899e62f81c709587711164376d7d476e8cb04d4b6499883257ca3779c6127d8801a1d56b811e01ebdab219fc7f926e", 0xd6, 0x7}, {&(0x7f0000000500)="7e9e8a3a31a31a3c2abe1b58d62e5a9882280d4c99463a5eb7695629e09700ff8bfe6ef698fca98659c31d86f2b0ad0922fa31ccc1c8b98c28", 0x39, 0x800}, {&(0x7f0000000540)="08cd29f5aaf5498009bbfd1464bcea73d3db5fd14ea198e8129441bb7ce11a0faaa90316efad5d07219a7d22d923ceb09eba5db735683e920d976dd052a766734a140194d88e55300873324248bd27598eccf3d970b184b85076d274417b15f49915de9290580b2ee283702c44c3f039da649ee1e6b7d0390480972b726f8d6a76239210591a95f95e78ab55d5a3f6fa4e6c0f44c02372fbe8592d47e935ec7e9ef7639ee8a56c6017bac02abe9dc722bc595e8f5aaa0b53c9e2e1", 0xbb, 0x3}, {&(0x7f0000000600)="b6769a76f06adce0270d1187f683635a7507e70633ebfa8b52b7e5ed537f21d0563bd5d8dcfff60ddbc685e3aef1a7e118ebdf4d850f6a9bbc1f9af63e723bb8337d301115546ca6a9eabb76c1d054bf0cfcba740b547eb693b1d8e9314719ec1dcc3dd3f0fff36dd6f4e67ca99ba0ae434e589328626712aac9554993a4de2c66e1", 0x82, 0xffffffffffffff01}], 0x800400, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7231832757178c08aba664427dcb6573697a653d3078303030303030303030303030303030342c6572726f72733d726f2d72656d6f756e742c6461746124b6220675f6a9bf1034386c1affffffd1f50c5e0f", @ANYRESDEC=r0, @ANYBLOB=',context=user_u,dont_hash,smackfsfloor=trusted.overlay.origin\x00,permit_directio,defcontext=staff_u,fowner<', @ANYRESDEC=r2, @ANYBLOB="0100f1ebe891cebbc1043ceccd6042ca1c39fe9515153014ec82fdb00cc85fcf925c8f70e6285dbca1d920ad29705da4a56e6fc3173280988eca678e74a62bc08bcc58798a55bcb37892681f"]) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000f00)=0x800c) getsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000900), &(0x7f0000000bc0)=0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000000d40)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@empty, @in=@remote, 0x4e23, 0x0, 0x4e21, 0x34, 0xa, 0xa0, 0x80, 0x84, r6, r2}, {0x2, 0x80, 0xfffffffffffff001, 0x3, 0x7fff, 0xc7, 0x57, 0xa6}, {0x2, 0x4, 0x20, 0x3}, 0x4, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}, 0x4d2, 0x6c}, 0x2, @in6=@rand_addr="4b16b6a56da413f813bbf424f169257c", 0x3506, 0x7, 0x3, 0xc4a, 0x9, 0x0, 0x8000}}, 0xe8) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000c00)={@multicast1, @local, r6}, 0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 234.621845] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:19 executing program 2: r0 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x0, 0xfffffffffffffffe, 0x2000000000000001, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3ff, 0x24100) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000100)={0x88, &(0x7f0000000040)=""/136}) 15:36:19 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) r1 = socket$kcm(0x29, 0x80000000000005, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000148eeae0000ab20de6dd84c08cb3eaeaae74e4119e42d37893e7d89f0189703d51e979b853e5b7b2d7d08dd911fcf2f8b30f109eff6747def111a78b3127bfd416e79d776e9b9a68b42bb43bda58caebe"], 0xfdef) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f00000001c0)=0x80000001) syz_open_procfs(r2, &(0x7f0000000180)='net/dev\x00') 15:36:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000140)=ANY=[@ANYBLOB="7573726a71756f74613d2c0022a8456468c6c5ec9d82812dce2da5cc1fb0ae46a2a479beae547e6382b63edbde0561b3dba7849100000000b84131a47f5a00cca815a704f24e439ecbe930a030c63722ac3cd05334e80947452245462c0ffc24947bd7acce516102de3cc0d50475fe8d0ca9a56aeb0ff87633c7a87253bea0f217d888f4d4032adf6d8be37bea7ac1736498a3ddd6e556ce0f3c87b0f95e820cd1e4f52899d8e5381835de38175961a8b92813456708dbabf0d6840165bacb7071fd48b3a2db813403ab1781f4ffb4d355bf4d5dab"]) 15:36:22 executing program 0: r0 = memfd_create(&(0x7f0000000240)='iwlan1]eth0{vmnet0$\x00', 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x51, r0, 0x0) fcntl$addseals(r0, 0x409, 0xf) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x4, @rand_addr="e30706926c1780bc0e45805115ef959e", 0x40}}, 0x6, 0x8, 0x0, 0x2, 0x9}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x8000, 0x3, [0x3227f911, 0x1000, 0x1]}, &(0x7f0000000180)=0xe) 15:36:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:22 executing program 2: pipe(0x0) socket$inet6(0xa, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) r2 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="447433e87dc0138287d8adeb46b989449e0142a722f7fcd6a4b27f3de53c69b314d1af0dc22d1898609125c68dcc6af1d8a5a4de254f6e56da21f63f16f64e30d2702d460e1cd44e32a6a978a52d70bc91e8e3ffdf559103ee9fe5230aad2e920d8fac84af3e135c70cae096bb386883ba8aa266b0e38c81d34a4b4452f628e5040a4e81501de85926854c2766b12db3ef74f00079c17ce25515919cdea21db77d07d4b18a10a53a548734e565662cb51caedb6f57c651954fb469e105281fae9847c21cc97ecd88c2fac782ef28d6208951ae4835e8f06cd9dcc42c77e8", 0xde, 0xfffffffffffffffb) request_key(&(0x7f00000006c0)='logon\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)='.request_key_auth\x00', r2) keyctl$instantiate(0xc, r2, &(0x7f0000000580)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'TIPCv2\x00', 0x20, 0x8001}, 0x32, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x810) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6b2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000000)) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xa9d, 0x80000) sendfile(r0, r1, 0x0, 0x20000102000007) 15:36:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 237.444127] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:22 executing program 0: r0 = socket(0x22, 0x2, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4, @rand_addr=0x1}, 0x10) [ 237.513296] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 237.532570] audit: type=1400 audit(1555428982.616:105): avc: denied { map } for pid=12635 comm="syz-executor.0" path=2F6D656D66643A69776C616E315D657468307B766D6E65743024202864656C6574656429 dev="tmpfs" ino=44548 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 15:36:22 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x0, 0xff, 0xffffffff, [], &(0x7f0000000140)=0x7}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x3f, 0x8, 0x9, {0x0, 0x1c9c380}, 0x40, 0xffffffff}) 15:36:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2000, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x7f, 0x0, [0x40000073]}) 15:36:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4ded, 0x10ac1) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x3, {0xadb, 0x80, 0x5, 0x8}}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB='usrjqu\x00\x00a=,\x00']) 15:36:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 240.412419] EXT4-fs (sda1): Unrecognized mount option "usrjqu" or missing value 15:36:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0xff}, 0x1c) writev(r0, &(0x7f0000000540), 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, 0x0) listen(r0, 0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='schedstat\x00') r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) write$P9_RFSYNC(r2, &(0x7f0000000240)={0xffffffffffffff67, 0x33, 0x1}, 0x7) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}, 0x80000}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='\x00\x00\x00\x1a\xe3\npL\xa9\xf9\xe5\x9c\xfb0\x97%/|(\xc5\x8d t/R\v\xdbxl\xa9H\x82\x00\x00\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r4 = open(0x0, 0x80000, 0x0) write$selinux_context(r4, &(0x7f0000000400)='system_u:object_r:hald_log_t:s0\x00', 0x20) ioctl$RTC_AIE_ON(r3, 0x7001) getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000005c0)=""/216, &(0x7f00000000c0)=0xd8) write(r3, &(0x7f0000000000), 0x11f) ioctl$int_out(r4, 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, 0x400000000000, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, &(0x7f00000001c0)={0x0, 0x0, 0x1f, 0x1000000, 0x3}, &(0x7f0000000280)={0x77359400}) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) listen(0xffffffffffffffff, 0x0) r5 = open(0x0, 0x1, 0x3) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000740)={0x10000000000, {{0xa, 0x4e23, 0x5, @local, 0x10100}}}, 0x27b) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) setsockopt$inet6_tcp_buf(r1, 0x6, 0x40000000000013, &(0x7f00000003c0)="a511d63ef4328d3e4e043d386651e7940518d24e023cb7ca79b352ec9c89ca98636cdabf44898afe5b15b35abfcbfc6f5c60b89080", 0x35) 15:36:25 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6264, 0x4001) setsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f00000001c0)="57ae3492427c9e9ce182d348f8f22d5f5767d92b59c4cfed952a74723f7465b065bf006ed539a48990c04304fe60b4d21e9d9dae4fbd6ce908b34a27f290edc756cc03873a310055bebd18829314cd6c5fb931c7e2399ac56e0da57d4e54b5a4e5d13fcb54091acae72646bc6981e0656754ea96413e42b86a7fac18", 0x7c) r1 = memfd_create(&(0x7f00000000c0)='\x00'/10, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="ecad70145d510009e8106af838db6b7090ecdf000000000000"], 0x19) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x4}) clone(0x8020002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x42030}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xec, r2, 0xe0c, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8df}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) r3 = dup2(r1, r1) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000440)) execveat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000080)={0xf000, 0xf004, 0x9d, 0x7fffffff}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x6, 0x0, [{0xbf7}, {0x988, 0x0, 0x2}, {0xbbb}, {0xbfb, 0x0, 0x8}, {0xbff, 0x0, 0x2}, {0xf8e, 0x0, 0x1}]}) 15:36:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:25 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:25 executing program 4: r0 = accept4$inet(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000001740)=0x10, 0x800) fgetxattr(r0, &(0x7f0000001780)=@random={'system.', '/selinux/avc/cache_stats\x00'}, &(0x7f00000017c0)=""/153, 0x99) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000016c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x5, 0xa000}, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000001680)=0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) recvmsg(r1, &(0x7f0000001640)={&(0x7f0000001280)=@nfc, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001300)=""/159, 0x9f}, {&(0x7f00000013c0)=""/222, 0xde}, {&(0x7f00000014c0)=""/245, 0xf5}], 0x3, &(0x7f0000001600)=""/63, 0x3f}, 0x2022) mount$bpf(0x20000000, &(0x7f0000001700)='./file0\x00', 0x0, 0x2001003, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000140)=ANY=[@ANYBLOB="7573726a0000000000000f27dd0b3b21f1548232933174ed37ee9a4543a21fdbb69a80de9ec6c064c5882203703b41fbf1c40f496bbad28964371d656b3d7681e839f1f1b5d01536d7d5643da7249328ceb5312dcabe1f21a148be1b8b22666ee06db59d1f6b5cf64b4409ef8f0949247f8d7b962aa97d3e00f090d582410f7e224e9825191158e5fd39f459a69d857a526dd1988e91e58c9a4e15743f79a12b813aff5e1ba3ec2ae8090d970162031cf85ed8fad38451bf95342cd86dc88f2f59d19e900d26b19e3f"]) [ 240.751555] EXT4-fs (sda1): Unrecognized mount option "usrj" or missing value [ 240.861360] EXT4-fs (sda1): Unrecognized mount option "usrj" or missing value 15:36:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000100)=[@dead_binder_done={0x40406300}], 0x0, 0xfffffdfd, 0x0}) 15:36:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000280)=0x3, 0x4) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/253, 0xfd) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:28 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x10000, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4040ae79, &(0x7f0000000140)=ANY=[@ANYBLOB="00001b9b6c3f63978300"/22]) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x101000, 0x0) [ 243.455819] audit: type=1400 audit(1555428988.536:106): avc: denied { set_context_mgr } for pid=12752 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 243.484849] binder: 12752:12760 got transaction to context manager from process owning it [ 243.495255] binder: 12752:12760 transaction failed 29201/-22, size 0-0 line 2793 15:36:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 243.516232] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.524529] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 243.549023] binder: 12752:12772 got transaction to context manager from process owning it 15:36:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0xc008af12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x100) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000140)={0x5, 0x0, [{0xc0011a75, 0x0, 0x10001}, {0x9c7, 0x0, 0xe7}, {0x249, 0x0, 0x100000001}, {0x3c5, 0x0, 0x8c}, {0x8d8, 0x0, 0x5}]}) modify_ldt$read(0x0, &(0x7f0000000080)=""/103, 0x67) 15:36:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000ffe, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 243.577540] binder: 12752:12772 transaction failed 29201/-22, size 0-0 line 2793 [ 243.591628] binder: undelivered TRANSACTION_ERROR: 29201 15:36:28 executing program 0: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x101}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x0, 0x80000) fanotify_mark(0xffffffffffffffff, 0x10, 0x40001002, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') write(0xffffffffffffffff, 0x0, 0x0) 15:36:28 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 243.729568] EXT4-fs (sda1): re-mounted. Opts: 15:36:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:31 executing program 0: syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty=0xffffffffa0008000, @dev, @local={0xac, 0x223}}}}}, 0x0) io_setup(0x40087, &(0x7f0000000000)=0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200100, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x2, 0x200000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4}, 0x68) r4 = socket$tipc(0x1e, 0x5, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="58c3309ad60a8b0414b352ecf00b627ae404126576ecce8b0beb9c4db4f14d631300e5c98e11c919d1c303581dcdf3b1febb5feb265e957ea0a8", 0x3a, 0x7, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x100000001, r2, &(0x7f0000000180)="7c243687586d523ea8d3a92d1c113c41ebc9c24ca3abaf19dee95e8781d07824cbb121b8bbad3d7aa2d9ebc1003c3c2de8b48c15d3f537ebae06ec5682e41db4a81f0ffdf52be4ccad9007c512a63240f05f9a781999f316a949f94e0643d70ef45942dbd03a5fd7abcfa6db94881488f2ff9f15c3dd6c9d6f8808365a3c16c16e48460fac9e86", 0x87, 0x3, 0x0, 0x0, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0xf0c4, r4, &(0x7f00000002c0)="c1b09628dab5f1e8454a33302595eff2170bb26113f29e0f8e067de85213326ec73ce2998c22657e1d449e8bc0bfbda2b04b29881cbe64b0fdabdcc1b80e8072fc8d1610d9beda39571c6af49a0f5a21cf55c0daa6fe3c52d72b4b0f80293fedec9bab390a09f9c04ca036b839f8c5ac0d22db24ebe034", 0x77, 0x4e6, 0x0, 0x1, r5}]) 15:36:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x8200, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000140)=0x4) 15:36:31 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) open_by_handle_at(r0, &(0x7f0000000180)={0x3a, 0xe0cc, "433b102fff409c40b4a97fa323477e48acc9ceee9013b252c1e76bff47e534c6b3df9a8e7bc75f7ab84a9a1b0e15862ba30d"}, 0x200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x78, r3, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x91f}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000340)) lsetxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0xff, 0x2, 0x2, "277b0459091e5641af76619cae522c97", "c2d4a3bbbe4c48f4d5587aed4c396b70c46485b73b7e7d73d04d7e759f0af4666ec0546819646bf7f954f64843d2d3ca2ae534ffc01caf9369f8b052cbf55238eec568580f2a3f9bc38a3f39fb3dfa2ea02a8f718eddf7fd84ff5e688adc5d1e9a1c9d84baaf7d22378171980fbe88d8ec16bdcfed61bcd60df29cc1de2383c3720d515f69a12501d59abfd1617df4e570b98722ca0d7fc3aaf56972227cfc4ca61255b97d2c0c506459d66aec5509ff28290ecb6d8b9f92f09baa0e5312820c14d441d5bff65361c88b7f0d099a5141d7e6becdbafe34a00933ec9ce3d7c5cb8703320f9b99f3398092"}, 0xff, 0x3) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000500)) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000580)={0x3, 0xd, 0x4, 0x10, {0x77359400}, {0x7, 0x2, 0x3ff, 0x9, 0x1, 0x0, "07e431e6"}, 0x5, 0x2, @planes=&(0x7f0000000540)={0x7f, 0x3, @fd=r0, 0x8000}, 0x4}) write$P9_RLERRORu(r0, &(0x7f0000000600)={0x26, 0x7, 0x2, {{0x19, '/selinux/avc/cache_stats\x00'}, 0x8}}, 0x26) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) write$P9_ROPEN(r0, &(0x7f0000000640)={0x18, 0x71, 0x2, {{0x92, 0x4, 0x7}, 0xed9}}, 0x18) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000680)) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000740)={0x3, 0x0, [{}, {}, {}]}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000007c0)={0xfffffffffffffffd, "4813a906ed2217285ae0d3de8e54369456d81012a52260da5890fc0e86260db9", 0x3, 0x1}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a40)=0x0) r6 = perf_event_open(&(0x7f00000009c0)={0x5, 0x70, 0x3, 0x8, 0x2, 0x400, 0x0, 0x1, 0x1000, 0x1, 0x8000, 0xb26, 0x5, 0x8, 0x3, 0x10000, 0x81, 0x400, 0x0, 0x10000, 0x5, 0xffffffffffff31cc, 0x185, 0x5, 0xff, 0x5, 0x9, 0xa3f, 0x44c, 0x6, 0x5, 0x800, 0x1d41, 0x7, 0x8, 0x5, 0x400, 0x6, 0x0, 0x5b02a405, 0x0, @perf_bp={&(0x7f0000000980), 0x2}, 0x4000, 0x2, 0x80, 0x9, 0x100, 0x2, 0x4}, r5, 0xc, r0, 0x2) shmget$private(0x0, 0x3000, 0x182, &(0x7f0000ffc000/0x3000)=nil) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, r6, 0x0) removexattr(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)=@random={'user.', '(:@*\x00'}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xb4, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1f, 0x28}}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f06}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000c80)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x32, r2}) 15:36:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:36:31 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) ioctl$int_in(r0, 0x5453, &(0x7f0000000040)=0x2) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)=0x20000000000000) poll(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000004180), 0x1000) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000001c0)={r0, r0, 0x7, 0xc4, &(0x7f00000000c0)="f7e241af290eae64a651d7705c508eb6e1a121dd15290e9f60034aa40c09c7f412307a2aee432bc83cb0632b405e98151c14394ef049d00803bab2ba0a74cc5d69cfba4a92ab409a78423ba8624bc23237dd1f3b575310ba75abbbcabfbdb1e6e44adf4e0a6f56e4a572d505d468255092ccc85ec2c898c47177a301ed8174c71bd3129210a48ed607ec76aac982c74a4a75b346a0cce6b28390858116c1bfbcc9c83399fd07885229b3ee4956fe2411f22363d5b689507a0f77b36768f3e2426b393cb3", 0x1000, 0x6, 0x6, 0x1ff, 0x81, 0x3, 0x1, 'syz1\x00'}) 15:36:31 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt(r0, 0xffffffffffffffff, 0x0, 0x0, 0x26d) 15:36:31 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 246.483874] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 246.498933] EXT4-fs (sda1): re-mounted. Opts: 15:36:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:36:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x1}}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc684e00000010") kexec_load(0x0, 0x1, &(0x7f0000000340)=[{0x0}], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'team_slave_1\x00', 0x600}) socket$inet_dccp(0x2, 0x6, 0x0) 15:36:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000300)={0x4, &(0x7f00000002c0)=[0x1, 0x80, 0x0, 0x800]}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000180)={0x1, 0x0, @ioapic={0x100000, 0x6, 0x7fc, 0x0, 0x0, [{0x7f, 0x10001, 0x3, [], 0x7f}, {0x20, 0x5, 0x0, [], 0x6}, {0xfffffffffffffffb, 0x6, 0x8001, [], 0x8dc3}, {0x0, 0x1, 0x989, [], 0x6}, {0x8, 0x100000000, 0xff, [], 0x5}, {0xffffffffffffffff, 0x64, 0xffffffffffff63d1, [], 0xffffffff}, {0x7, 0xffffffff, 0x9, [], 0x6}, {0x4, 0x6, 0xe66a, [], 0xffffffff}, {0xdc, 0x0, 0x10000, [], 0x18629ec600000}, {0xc2, 0x6, 0x800}, {0x8000, 0x81, 0xcfd, [], 0x4}, {0x3, 0xebb00000000000, 0x9, [], 0x800}, {0xffffffffffffffff, 0x400, 0x3, [], 0x8001}, {0x401, 0x1, 0x3, [], 0x800}, {0x80000001, 0x7f, 0x20, [], 0x7ff}, {0xf9a1, 0x45d5, 0x7, [], 0x3}, {0xfffffffffffffffd, 0x8, 0x9, [], 0x400}, {0x101, 0x69f, 0xfffffffffffffffa, [], 0x2}, {0x8001, 0x8780, 0x1, [], 0x9}, {0x1, 0x12e4, 0x5}, {0x8, 0x400, 0x6, [], 0x3}, {0x8, 0x34ef, 0x0, [], 0xf9}, {0x8000, 0x2, 0x7, [], 0x5}, {0x8e, 0x1, 0x0, [], 0x4}]}}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'ip_vti0\x00', 0x800}) [ 246.597114] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 246.661589] EXT4-fs (sda1): re-mounted. Opts: [ 246.793875] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 246.906829] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)) 15:36:34 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) signalfd4(r0, &(0x7f0000000000)={0x800}, 0x8, 0x80800) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) writev(r0, &(0x7f0000000140), 0x100000000000007a) 15:36:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 15:36:34 executing program 0: ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x6, &(0x7f0000ffa000/0x4000)=nil, 0x4) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0xee6d, 0x2ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) 15:36:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f319bd050") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x1000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) ioctl$EVIOCGPROP(r1, 0x80404509, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) 15:36:34 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180)={0x2, 0x0, [{0x7001, 0x5c, &(0x7f0000000100)=""/92}, {0x3000, 0xc6, &(0x7f0000000340)=""/198}]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x20000, 0x0) recvmsg$kcm(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/225, 0xe1}, {&(0x7f0000001600)=""/174, 0xae}], 0x3, &(0x7f00000016c0)=""/4096, 0x1000}, 0x10040) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200002, 0x0) close(r2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000027c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0xfffffffffffffffc, @empty, 0x2}, @in6={0xa, 0x4e23, 0xffffffff, @local, 0x9}], 0x48) r3 = socket$packet(0x11, 0x3, 0x300) syncfs(r3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000002700)=[@in={0x2, 0x40, @multicast1}, @in6={0xa, 0x4e21, 0x0, @remote, 0xa28}, @in6={0xa, 0x4e23, 0x2, @local, 0x828}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x4, @loopback, 0x10000}], 0x84) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x4, 0x9}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) syz_genetlink_get_family_id$tipc(0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000440)=""/137) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)) [ 249.502659] EXT4-fs (sda1): re-mounted. Opts: 15:36:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)) [ 249.545824] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0xd7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000180)="5e4c4ba1e00dc8ca3682a2ac19d72274dc27087980f617eb1ecb8b750e0cdf2b9c24160e44de536c54e6eb5c", 0x2c, 0x2}], 0x40000, &(0x7f0000000200)={[], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsmagic={'fsmagic', 0x3d, 0x45e33309}}]}) [ 249.675680] EXT4-fs (sda1): re-mounted. Opts: 15:36:34 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 249.853524] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000840)={0x0, 0x1, 0x1, {0xb, @pix_mp={0x0, 0x9}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0xb) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f000000e3171bfbaf668bf5b66941c1e352e044345552a4989eb79a561a0bb5962c9bdf9b07cd475ead3a20ed90670500eebf96ff522b"], &(0x7f0000000000)=0x3b) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0xb78}, 0x8) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @dev={[], 0x1f}, 'rose0\x00'}}) 15:36:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)) 15:36:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x101000) r1 = getuid() ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x5b55da97a0a854e4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x200, 'syz1\x00', @null, 0x80000001, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) r2 = getgid() r3 = geteuid() mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x4ea3e299396cbfae, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfff}}], [{@pcr={'pcr', 0x3d, 0xa}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'usrjquota='}}, {@uid_gt={'uid>', r3}}, {@subj_role={'subj_role', 0x3d, 'usrjquota='}}, {@audit='audit'}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, 'eth1/.),)['}}, {@obj_type={'obj_type', 0x3d, 'usrjquota='}}]}}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0x4, &(0x7f0000000640)=[{&(0x7f00000003c0)="978827e48c6b19eb553642cbdca36a8342cfbe0a83fa8997d4cffc2228c91f588902d96a7fb4a0120ba85c87d1841d6fd22f1e6c949d566ec6838c2ae1ebf5a87a6fc218511d6d1260a7ac3f98ac10606eb6a115006997bb0bfbd7360b7f8f0aafbe9b04496875cf77095969fd38216def4ec54a104abebdc69643bc667d801c2d20671aa8532e83c3cfefcde1001b9b020b1a28c1bf032cb48f20b57c1f5f23442aa33e069949dca68a5c2042336ece6dd79b2ead2503c20aeae630d23a0b158122088b23931e67ca94", 0xca, 0x2}, {&(0x7f00000004c0)="44aa0f1448", 0x5, 0xff}, {&(0x7f0000000500)="47ad7b7f6d533d23da6073bc67bf1a4aa380470a8979258898d7ab8565de73fd32d7923228284093bf661c578be013ce049d050ef7150e7d81966a348cf9490d2a3d7f4e05192076a390343ba98f8ae8d7729b0d", 0x54, 0x2}, {&(0x7f0000000580)="ae3a9884e0f2ebc1e2027fbd52a4e441c6840480f4c36b0feecdb5f2449668747a7a27cb9ea1b1e8e3ff624c0b77c9d4c60db8ad2ca8e2d133772b51e1f5c68ff4783488ae307ace7a626e2658029c190297a352da8160a2caced61e2a33c9d7f5cc328de66b6de15a768ee60807386d1597f71a856ba33ab09de6d0d319a169eb3ad4f9cb7e282bae10b70530fc72f9ae585fa101d16f", 0x97, 0xfffffffffffffffa}], 0x0, &(0x7f00000006c0)={[{@locktable={'locktable', 0x3d, 'obj_type'}}, {@data_writeback='data=writeback'}], [{@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}, {@subj_role={'subj_role', 0x3d, 'smackfsfloor'}}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000340)=""/148, 0x300}], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vsock\x00', 0x20000, 0x0) pipe(&(0x7f0000000a00)) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000a80)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) process_vm_writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000ac0)=""/41, 0x29}, {&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000000bc0)=""/162, 0xa2}, {&(0x7f0000000c80)=""/13, 0xd}], 0x5, &(0x7f0000000f40)=[{&(0x7f0000000d40)=""/48, 0x30}, {&(0x7f0000000d80)=""/85, 0x55}, {&(0x7f0000000e00)=""/15, 0xf}, {&(0x7f0000000e40)=""/252, 0xfc}], 0x4, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fb4"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) signalfd(r2, &(0x7f0000000980)={0x5}, 0x8) r5 = syz_open_procfs(r1, &(0x7f0000000180)='comm\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) openat$vfio(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/vfio/vfio\x00', 0x2000, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000000)='net/mcfilter6\x00\xd2\xa5\xf26\x17\xc8\xe7f\xb1\x9f\r\x91\xf4\xf3\xf5\x8c9\f\'^*\xc9_\x18\xc6\xf3T\xeen\"\xc4\t\xb9-\xd5\xf4c\x1b\xb9\x06\xfcE\x81%)\xc5\xe2\x7f\xc9\x05\xde\xeb\xa0\xdc\xf6\xc22\x02=\xcd\xeenp\x10\xadR\xdf\xc3\xbc\xef\x8f\x1d\xedX\xb7\x06c-T\xcb\xaf\x999\xbc9mR\xed\xfd\xac6\xb1.\xb9\x17A\xfcQ\x1d\x16\xb7c\x7f0\x00\x00\x00\x80iD4\x82\xe0x\xa6|\xb6f\xc3C\xa2y\x90&a\xb9f>\xa9G7\x18 \aK\xde[\xa1\xc0\x10\xc1') preadv(r7, &(0x7f0000000480), 0x10000000000002a1, 0x0) recvmmsg(r5, &(0x7f00000008c0)=[{{&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000700)=[{&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f00000004c0)=""/118, 0x76}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/228, 0xe4}], 0x5, &(0x7f0000000780)=""/66, 0x42}, 0x7}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/17, 0x11}], 0x1, &(0x7f0000000880)=""/36, 0x24}, 0x20}], 0x2, 0x10001, &(0x7f0000000940)={0x0, 0x989680}) [ 252.538469] gfs2: invalid mount option: dont_hash [ 252.551671] gfs2: can't parse mount arguments [ 252.584497] EXT4-fs: 1 callbacks suppressed [ 252.584507] EXT4-fs (sda1): re-mounted. Opts: 15:36:37 executing program 0: r0 = socket$kcm(0xa, 0x100003, 0x73) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x59, 0x200) recvfrom$ax25(r2, &(0x7f00000001c0)=""/224, 0xe0, 0x10100, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14400010}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, r4, 0x24, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x51a2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd70}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @multicast1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x5}, 0x10) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000002c0)=0xeb5) syz_open_pts(r3, 0x111040) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$kcm(r0, &(0x7f0000001700)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}, 0x100000001}, 0x80, 0x0}, 0x0) 15:36:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:37 executing program 3 (fault-call:2 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x8) close(r1) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0xb701, 0x0) 15:36:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:37 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 252.755270] FAULT_INJECTION: forcing a failure. [ 252.755270] name failslab, interval 1, probability 0, space 0, times 0 15:36:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x1, 0x101000) r1 = getuid() ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000740)={0x5b55da97a0a854e4, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x200, 'syz1\x00', @null, 0x80000001, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) r2 = getgid() r3 = geteuid() mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x4ea3e299396cbfae, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfff}}], [{@pcr={'pcr', 0x3d, 0xa}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'usrjquota='}}, {@uid_gt={'uid>', r3}}, {@subj_role={'subj_role', 0x3d, 'usrjquota='}}, {@audit='audit'}, {@permit_directio='permit_directio'}, {@obj_role={'obj_role', 0x3d, 'eth1/.),)['}}, {@obj_type={'obj_type', 0x3d, 'usrjquota='}}]}}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x3, 0x4, &(0x7f0000000640)=[{&(0x7f00000003c0)="978827e48c6b19eb553642cbdca36a8342cfbe0a83fa8997d4cffc2228c91f588902d96a7fb4a0120ba85c87d1841d6fd22f1e6c949d566ec6838c2ae1ebf5a87a6fc218511d6d1260a7ac3f98ac10606eb6a115006997bb0bfbd7360b7f8f0aafbe9b04496875cf77095969fd38216def4ec54a104abebdc69643bc667d801c2d20671aa8532e83c3cfefcde1001b9b020b1a28c1bf032cb48f20b57c1f5f23442aa33e069949dca68a5c2042336ece6dd79b2ead2503c20aeae630d23a0b158122088b23931e67ca94", 0xca, 0x2}, {&(0x7f00000004c0)="44aa0f1448", 0x5, 0xff}, {&(0x7f0000000500)="47ad7b7f6d533d23da6073bc67bf1a4aa380470a8979258898d7ab8565de73fd32d7923228284093bf661c578be013ce049d050ef7150e7d81966a348cf9490d2a3d7f4e05192076a390343ba98f8ae8d7729b0d", 0x54, 0x2}, {&(0x7f0000000580)="ae3a9884e0f2ebc1e2027fbd52a4e441c6840480f4c36b0feecdb5f2449668747a7a27cb9ea1b1e8e3ff624c0b77c9d4c60db8ad2ca8e2d133772b51e1f5c68ff4783488ae307ace7a626e2658029c190297a352da8160a2caced61e2a33c9d7f5cc328de66b6de15a768ee60807386d1597f71a856ba33ab09de6d0d319a169eb3ad4f9cb7e282bae10b70530fc72f9ae585fa101d16f", 0x97, 0xfffffffffffffffa}], 0x0, &(0x7f00000006c0)={[{@locktable={'locktable', 0x3d, 'obj_type'}}, {@data_writeback='data=writeback'}], [{@dont_hash='dont_hash'}, {@permit_directio='permit_directio'}, {@subj_role={'subj_role', 0x3d, 'smackfsfloor'}}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 252.804016] CPU: 1 PID: 12972 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 252.811115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.820492] Call Trace: [ 252.823092] dump_stack+0x138/0x19c [ 252.826745] should_fail.cold+0x10f/0x159 [ 252.831177] should_failslab+0xdb/0x130 [ 252.835173] __kmalloc+0x2f3/0x7a0 [ 252.838729] ? __sb_end_write+0xc1/0x100 [ 252.843075] ? strnlen_user+0x120/0x1a0 [ 252.847062] ? SyS_memfd_create+0xba/0x3a0 [ 252.851312] SyS_memfd_create+0xba/0x3a0 [ 252.851325] ? shmem_fcntl+0x130/0x130 [ 252.851336] ? do_syscall_64+0x53/0x630 [ 252.851345] ? shmem_fcntl+0x130/0x130 [ 252.851355] do_syscall_64+0x1eb/0x630 [ 252.851363] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.851391] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 252.859323] RIP: 0033:0x458c29 [ 252.859329] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 252.859340] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 252.859346] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 252.859352] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 252.859358] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f7c6606d4 [ 252.859364] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 252.864220] gfs2: invalid mount option: dont_hash [ 252.871259] gfs2: can't parse mount arguments 15:36:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:40 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f00000024c0)={&(0x7f0000000b80)=@abs, 0x6e, 0x0}, 0x20000000) 15:36:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:40 executing program 3 (fault-call:2 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:40 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) r3 = dup2(r2, r1) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, 0x0) syz_open_pts(r3, 0x80) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) 15:36:40 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000100)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x30, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 255.562352] QAT: Invalid ioctl [ 255.574142] FAULT_INJECTION: forcing a failure. [ 255.574142] name failslab, interval 1, probability 0, space 0, times 0 [ 255.622485] QAT: Invalid ioctl [ 255.625195] CPU: 0 PID: 13017 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 255.632773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.642140] Call Trace: [ 255.644833] dump_stack+0x138/0x19c [ 255.648479] should_fail.cold+0x10f/0x159 [ 255.652650] should_failslab+0xdb/0x130 [ 255.656647] kmem_cache_alloc+0x2d9/0x780 [ 255.660830] ? __alloc_fd+0x1d4/0x4a0 [ 255.664645] __d_alloc+0x2d/0x9f0 [ 255.668391] ? lock_downgrade+0x6e0/0x6e0 [ 255.672544] d_alloc_pseudo+0x1e/0x30 [ 255.676343] __shmem_file_setup.part.0+0xd8/0x400 [ 255.681473] ? __alloc_fd+0x1d4/0x4a0 [ 255.685286] ? shmem_fill_super+0x8c0/0x8c0 [ 255.689703] SyS_memfd_create+0x1f9/0x3a0 [ 255.693837] ? shmem_fcntl+0x130/0x130 [ 255.697712] ? do_syscall_64+0x53/0x630 [ 255.701748] ? shmem_fcntl+0x130/0x130 [ 255.705621] do_syscall_64+0x1eb/0x630 [ 255.709491] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.714382] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.719558] RIP: 0033:0x458c29 15:36:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40bc0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000000c0)) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 15:36:40 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:40 executing program 3 (fault-call:2 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 255.722736] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 255.730427] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 255.737681] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 255.745127] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 255.752395] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f7c6606d4 [ 255.759912] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:40 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000048c0)='./file0\x00', 0x0, 0x200000, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000052c0)='./file0\x00', 0x0, 0x1d7, 0x0, 0x100020, &(0x7f0000004900)=ANY=[@ANYBLOB="752a2a792f3041c445ae73726a71756551f03e5910a5a03d050f58a8ea9d6ce86979604c5db6694ce8515f0ae49b077221262548474fe4e4b3795f0f954d5867c4f20000bba55c91f9084c8654eb94755ad7"]) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000002840)={0x0, 0x1, 0x20, 0x9, 0x8}, 0xfffffffffffffffe) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004880)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000004b80)=r2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000047c0)={r1, 0x6}, &(0x7f0000004800)=0x8) mknod$loop(&(0x7f0000004840)='./file0\x00', 0x2000, 0x1) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x2000000001001) r3 = socket$isdn(0x22, 0x3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005280)={r0, 0x0, 0x75, 0x65, &(0x7f0000005180)="5362d69a79a3c2c5e156176fee1298bd93d7725e34c4110923100820563e3f4291625d2a6e3e169374f741a4bbcf5934641a599a527db9449a3585e620b6be307f7152d7c8ace0c9d3fe676a270d7df291d8ef5739b00460a309d69894028361e4e08f62cdaa7d774c3a8c345a16863df379d401de", &(0x7f0000005200)=""/101}, 0x28) recvmmsg(r3, &(0x7f0000004600)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4}, 0x7}, {{&(0x7f00000013c0)=@hci, 0x80, &(0x7f0000002500)=[{&(0x7f0000001440)=""/62, 0x3e}, {&(0x7f0000001480)=""/91, 0x5b}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3, &(0x7f0000002540)=""/115, 0x73}, 0x7}, {{&(0x7f00000025c0)=@hci, 0x80, &(0x7f0000002800)=[{&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/21, 0x15}, {&(0x7f0000002740)=""/189, 0xbd}], 0x3, &(0x7f0000002840)}, 0x40}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002880)=""/161, 0xa1}, {&(0x7f0000002940)=""/204, 0xcc}, {&(0x7f0000002a40)=""/232, 0xe8}, {&(0x7f0000002b40)=""/43, 0x2b}, {&(0x7f0000002b80)=""/204, 0xcc}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x6}, 0x1}, {{&(0x7f0000003d00)=@ll, 0x80, &(0x7f00000041c0)=[{&(0x7f0000003d80)=""/168, 0xa8}, {&(0x7f0000003e40)=""/83, 0x53}, {&(0x7f0000003ec0)=""/103, 0x67}, {&(0x7f0000003f40)=""/182, 0xb6}, {&(0x7f0000004000)=""/140, 0xfffffffffffffdee}, {&(0x7f00000040c0)=""/240, 0xf0}], 0x6, &(0x7f0000004240)=""/160, 0xa0}}, {{0x0, 0x0, &(0x7f0000004580)=[{&(0x7f0000004300)=""/247, 0xf7}, {&(0x7f0000004400)=""/49, 0x31}, {&(0x7f0000004440)=""/2, 0x2}, {&(0x7f0000004480)=""/227, 0xe3}], 0x4, &(0x7f00000045c0)=""/26, 0x1a}, 0x7}], 0x6, 0x2000, &(0x7f0000004780)={0x0, 0x1c9c380}) preadv(r0, &(0x7f0000005100)=[{&(0x7f0000004c00)=""/166, 0xa6}, {&(0x7f0000004cc0)=""/178, 0xb2}, {&(0x7f0000004d80)=""/152, 0x98}, {&(0x7f0000004e40)=""/244, 0xf4}, {&(0x7f0000004f40)=""/35, 0x23}, {&(0x7f0000004f80)=""/143, 0x8f}, {&(0x7f0000005040)=""/146, 0x92}], 0x7, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000004980)={0x0, 0x0, 0x5, 0x0, [], [{0x56, 0x380, 0x8, 0x7ff, 0x8, 0x10001}, {0x5, 0x101, 0x9, 0x7b3a655, 0x3, 0x5}], [[], [], [], [], []]}) ioctl$int_out(r3, 0x5462, &(0x7f0000004bc0)) [ 255.839644] FAULT_INJECTION: forcing a failure. [ 255.839644] name failslab, interval 1, probability 0, space 0, times 0 [ 255.851717] CPU: 1 PID: 13039 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 255.858757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.868221] Call Trace: [ 255.870822] dump_stack+0x138/0x19c [ 255.874463] should_fail.cold+0x10f/0x159 [ 255.878613] should_failslab+0xdb/0x130 [ 255.878629] kmem_cache_alloc+0x2d9/0x780 [ 255.878641] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 255.878652] ? rcu_read_lock_sched_held+0x110/0x130 [ 255.897237] ? shmem_destroy_callback+0xa0/0xa0 [ 255.901913] shmem_alloc_inode+0x1c/0x50 [ 255.901925] alloc_inode+0x66/0x190 [ 255.901936] new_inode_pseudo+0x19/0xf0 [ 255.901946] new_inode+0x1f/0x40 [ 255.901955] shmem_get_inode+0x75/0x750 [ 255.901967] __shmem_file_setup.part.0+0x111/0x400 [ 255.901974] ? __alloc_fd+0x1d4/0x4a0 [ 255.901982] ? shmem_fill_super+0x8c0/0x8c0 [ 255.901997] SyS_memfd_create+0x1f9/0x3a0 15:36:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 255.913635] ? shmem_fcntl+0x130/0x130 [ 255.913646] ? do_syscall_64+0x53/0x630 [ 255.913657] ? shmem_fcntl+0x130/0x130 [ 255.913669] do_syscall_64+0x1eb/0x630 [ 255.913679] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 255.913697] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 255.913704] RIP: 0033:0x458c29 [ 255.913711] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 [ 255.921033] ORIG_RAX: 000000000000013f [ 255.921039] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:36:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r1, &(0x7f00000001c0)=""/22}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB='\b']) 15:36:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x16200, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x101, 0x4) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3190dcacbef890910e1900000000000000030618ff0100eb56b184f3806703a605e7e307560cb7eebb24a6202a36e11dff79b96147978946b6aac6a5a468a28c9e8e"], 0x45) recvmmsg(r0, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x114}}], 0x789, 0x2, 0x0) 15:36:41 executing program 3 (fault-call:2 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 255.921044] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 255.921050] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 255.921056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f7c6606d4 [ 255.921062] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:41 executing program 4: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="757300000000000000012c00"]) [ 256.135282] FAULT_INJECTION: forcing a failure. [ 256.135282] name failslab, interval 1, probability 0, space 0, times 0 [ 256.169348] CPU: 1 PID: 13065 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 256.176422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.185784] Call Trace: [ 256.188383] dump_stack+0x138/0x19c [ 256.192021] should_fail.cold+0x10f/0x159 [ 256.196186] should_failslab+0xdb/0x130 [ 256.200177] kmem_cache_alloc+0x2d9/0x780 [ 256.204330] ? shmem_alloc_inode+0x1c/0x50 [ 256.208567] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 256.214974] selinux_inode_alloc_security+0xb6/0x2a0 [ 256.223151] security_inode_alloc+0x9a/0xe0 [ 256.227767] inode_init_always+0x552/0xaf0 [ 256.232035] alloc_inode+0x83/0x190 [ 256.235887] new_inode_pseudo+0x19/0xf0 [ 256.239984] new_inode+0x1f/0x40 [ 256.243384] shmem_get_inode+0x75/0x750 [ 256.247380] __shmem_file_setup.part.0+0x111/0x400 [ 256.252308] ? __alloc_fd+0x1d4/0x4a0 [ 256.252320] ? shmem_fill_super+0x8c0/0x8c0 [ 256.252336] SyS_memfd_create+0x1f9/0x3a0 [ 256.260529] ? shmem_fcntl+0x130/0x130 [ 256.260539] ? do_syscall_64+0x53/0x630 [ 256.260548] ? shmem_fcntl+0x130/0x130 [ 256.260558] do_syscall_64+0x1eb/0x630 [ 256.260565] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:36:41 executing program 0: getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', '&\appp0^-mime_typemime_type%\\\\securitybdevvmnet0systemnodev-\x00'}, &(0x7f00000000c0)=""/88, 0x58) syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x3a, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="c0da7762e328940258a0a0776f32302f5ad730b05bc529b0b97bc827861d05949b336b90f5b80d2849635c5e52e3f80c53c631e16a72ab90", 0x38, 0x40}, {&(0x7f0000000200)="adf9ccb6ca971a7fed1e89f16acc9920c49a68a62292c8e70e59203469b0e64c589ed2655346abe09362098c284870da4be480687266805b303de1d8de1f96b3b1a5ef32e7c69d06cbcd4fc7f0fd59f39072ff18532c9c50b8900d323ffc4ada7da2537f02f9b633aa970631b3a6a36dd58df005839cf26329a04d03c33221821c189079b09fc0d8630e547c11a47832cdb874ddf29cc1a790d63937ac1873772287d827fa6a2834d5eacac490172ce478de6014549faaae781a3f454495c58233e6ecdea428044cbfc6329a1b47b4ac2cde", 0xd2, 0x7ff}], 0x1000, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000380)={0x100000001, 0x5}) getsockopt$packet_int(r0, 0x107, 0x10, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syncfs(r0) connect$rose(r0, &(0x7f0000000440)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x5, @remote, 0x77c7}}, [0x40, 0x0, 0xb94, 0x3, 0x6, 0xa5, 0x265, 0x3, 0x9, 0x2, 0x10001, 0x6, 0x6, 0x4, 0x441c]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={r1, 0x1, 0x101}, &(0x7f0000000600)=0xc) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000640)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000680)={r2}, &(0x7f00000006c0)=0x8) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000700)={0x2, 0x1, @raw_data=[0x81, 0x1, 0x6, 0xff, 0x9f0, 0xfffffffffffffff8, 0x8, 0x20, 0x6, 0x100, 0x1f, 0x4, 0x5, 0x7ff, 0x8000, 0x5]}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000780)) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000007c0)=0x1000) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000800)={0x0, 0x2}) sendmsg$nfc_llcp(r0, &(0x7f0000002c40)={&(0x7f0000000880)={0x27, 0x0, 0x0, 0x3, 0x798a, 0x8, "f88345448ae2bb45b2e5e726c3920246c5fd36dbe33039ca08270b1d5ffe0db5f5012a979b8e8d6c7f23c6e29f91fc58100f5abe8d43534ff40490a41430e4", 0x18}, 0x60, &(0x7f0000002b80)=[{&(0x7f0000000900)="fd0f9ddbd9e39d81d02acebab3365ff2681b30ea34e6143c133708acf4be26c8b7a4bcdb1f3e1e8f9c35dda3b74c1d4819b9f3f1e8ca844252445a3cd42ceacb24432fec92bb103e1b987e775ec183a3120ce6", 0x53}, {&(0x7f0000000980)="c525321d3ec3947067589d2f53ce1b6d6523b869ea81d09b76f1403a7b12f5a57c560d8c781a3a071fa68e4d6eb6544a3397d93a0362dfddff5105b26ea5783ebba549a351a8dc1fe696f9d08ca8f0e1df702b431314da025730e785dbb229fb09", 0x61}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="5b80852b88bb1d6b92a6851054a36e15fe164c7cbe6486d6249e749b99d44babf37396e70991dec9abd009cd62ace3ff73d7e8dedc97a3521f", 0x39}, {&(0x7f0000001a40)="fa34f4796fa88b863dc8df411deaf0323d5b9320f6b7da2865b50b6e8ad5cbddc69b25a89662c8a4991a840186f4e7d757a1a8249618bd3eb2372c2b5983727b1314f40983dd5afb6944b4e12ddcfe3d5799b8eb6a2ad16b9db045841398dc0fff8f2da9948bdaeafd60692020945093aebd1855ee3e1887b76c0514efa30390a5123e82ae8d0c967984eb3b3b82d1d899755750696685efe49783f168ce4f820015f67a67ea4c8308f09e0abc9008d3c36b3ea197997623768fe94dfec80deb27a24a75465d1d388884723cefd014c18cd60bfc9f824fbad6ccc1daa423286013612210788c65948d4fc037fef88738d104e157c7592780d8aa069edf", 0xfd}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="82c5ed966dd0d5e727e0dff5d85b00de2784e916d6522f5805f52a8f3057e1677382759454712e2c8ce54bca391d45f70d22265c3d02", 0x36}], 0x7, &(0x7f0000002c00)={0x38, 0x0, 0x2, "8c64900fa39be6d23897f2700c4a85392f3f498ed30e5346ceb6ce7c94784fade4fe24abf3fa"}, 0x38, 0x1}, 0x408c0) getsockname$ax25(r0, &(0x7f0000002c80)={{0x3, @default}, [@remote, @null, @default, @bcast, @null, @netrom, @null, @default]}, &(0x7f0000002d00)=0x48) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000002d40)={0xf009, 0x80000001, 0xe9, 0x7ff, 0x2, 0x1}) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000002d80)={0x0, 0x3, 0x54}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e00)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000003040)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0xc}, 0xc, &(0x7f0000003000)={&(0x7f0000002e40)={0x188, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x24, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4727}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x48000000000000}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x86}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x4}]}, 0x188}, 0x1, 0x0, 0x0, 0x4090}, 0x40000) io_setup(0xcd, &(0x7f0000003080)=0x0) io_cancel(r5, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0xf, 0x2000000, r0, &(0x7f00000030c0)="9fdabfc41f9b0ee31a9c979b7d61a899c5bd4ef8157b865f8498d1c7f173af2d8cb8a914e9a13c5f82d3bb65dd7b7fda64269e6b258951b546c4738f43280ac7e143b7931e72bb90910f9342ee72bdae187e4346352c2326e483f7f25831cf7a42298d3d5a87418298a7d9fa7ad509549c55b58fa9a2d4769214b0666e6cb4e2c1e280b7fa7f1e2654a55929ec35546a901c11b9f850bf8ebfab35a20b63d0c17d112333d9a01c03562fd9e16eb8f4574afd77fcfe4fa9d9bff57605ab328165b428286f5c08b90966d608d0b83922f67237", 0xd2, 0x1, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000003200)) r6 = getpgid(0x0) move_pages(r6, 0x4, &(0x7f0000003240)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000003280)=[0x400], &(0x7f00000032c0), 0x2) sendmsg$inet_sctp(r0, &(0x7f0000005780)={&(0x7f0000003300)=@in6={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000005640)=[{&(0x7f0000003340)="510b26ec813be69d6d9e93db24057e095f7ff3a37b8d3c77592b4452fa5592878119e81bf061f659811a1b9edce3ff0b12216ee5c516d69def9291e44cd03cc765294ea5d70c313474a05ab2162434c16ba16065d0b9740a1b178a330635ad7df5946bf5cdb9adc20d853ecdcf023c6f120056796d696fa171581641b7ba2a4d72e83ae4fc19427b5597f8c598fdc1d3d316f20e91add42f378238d826335078af511477f8397561c32ea187a1de9740703559ee8ee3", 0xb6}, {&(0x7f0000003400)="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", 0x1000}, {&(0x7f0000004400)="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", 0x1000}, {&(0x7f0000005400)="e2817fd17bde1cc0abe083feec3dafb1c39d31553b2a0bddf44c631e808ad79ef12da8ef36079afc47adfdd00dcbc241d8189d367bef53181debf2d59023fd1069ebdacc46c3f3669ba8553fd08a0ded837eb95dc60a52a6c88bd908b8e3490a48f876af1df46c26352ca3833e2c9999547613fe47f94100823c5ff225a3c705fc65434b6872e08f9f47db0636bbf36686666e7789", 0x95}, {&(0x7f00000054c0)="c511bb6910d6ba06f780a2a5a1b7633879133e8edfe2566ae4463b0723aa0cc9cd29e420d39fa032b40f2014f5a290f4aac0c7517b7befc6479824d18586423868292b3aeebc3a04b3eba86d15b1f3eb912578f0c649fac4586dcb28b0c7cb9cbf7688147f128b8221683a8841c7d71b2b49a9fc6aa13b9189fcc8815c3d32784baa7a94d9fcb84d2282bb8aab22de5988c97df7abbc13e6bf001fd6db8564f092f5c5a13b7d76a556e04321c8bbaf300c5caebe13b9c63a6f348fd56a5af79a784d010e4c8f9422dd9043b567b9e995f8ab8f", 0xd3}, {&(0x7f00000055c0)="c8dc6b2766f859ec9293996045532b5fd11e913461e448ee85313ffbbfe82a6bb8ce60b023d968a84837182d1ad6af043629c180c7bda6a4f5e179a2be40b1bd236e63dad59403576a0b9a2e8f4358d2d27fe84a707e879dd463a8210ec9797822f7105e25a732f73ad355ea", 0x6c}], 0x6, &(0x7f00000056c0)=[@sndinfo={0x20, 0x84, 0x2, {0x588000000, 0x4, 0x3, 0x3, r1}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="37b7a6095d9870df98c933f4659e3491"}, @sndinfo={0x20, 0x84, 0x2, {0x200, 0x0, 0x4, 0x9, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0xffffffff, 0x8205, 0x8a, 0x2, r2}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0xb0, 0x80}, 0x4048044) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5adf97f1) getsockopt$inet6_opts(r0, 0x29, 0xa3050bdeb9937da3, &(0x7f00000057c0)=""/16, &(0x7f0000005800)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000005840)={r3, 0x1}, 0x8) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000005880)='trusted.overlay.nlink\x00', &(0x7f00000058c0)={'L+', 0x4}, 0x28, 0x1) 15:36:41 executing program 3 (fault-call:2 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 256.260581] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.260597] RIP: 0033:0x458c29 [ 256.271446] EXT4-fs (sda1): Unrecognized mount option "us" or missing value [ 256.272691] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 256.272704] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 256.272710] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 256.272716] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 15:36:41 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 256.272721] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f7c6606d4 [ 256.272726] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 256.522410] FAULT_INJECTION: forcing a failure. [ 256.522410] name failslab, interval 1, probability 0, space 0, times 0 [ 256.537276] CPU: 1 PID: 13094 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 256.544436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.553796] Call Trace: [ 256.556445] dump_stack+0x138/0x19c [ 256.560103] should_fail.cold+0x10f/0x159 [ 256.564248] should_failslab+0xdb/0x130 [ 256.568470] kmem_cache_alloc+0x2d9/0x780 [ 256.572614] ? lock_downgrade+0x6e0/0x6e0 [ 256.576798] get_empty_filp+0x8c/0x3b0 [ 256.580677] alloc_file+0x23/0x440 [ 256.584236] __shmem_file_setup.part.0+0x1b1/0x400 [ 256.589161] ? __alloc_fd+0x1d4/0x4a0 [ 256.592954] ? shmem_fill_super+0x8c0/0x8c0 [ 256.597289] SyS_memfd_create+0x1f9/0x3a0 [ 256.597301] ? shmem_fcntl+0x130/0x130 [ 256.605326] ? do_syscall_64+0x53/0x630 [ 256.605340] ? shmem_fcntl+0x130/0x130 [ 256.605355] do_syscall_64+0x1eb/0x630 [ 256.617269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.622123] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.627497] RIP: 0033:0x458c29 [ 256.631539] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 256.639260] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 256.646523] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 256.653784] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 256.661038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f7c6606d4 [ 256.668293] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:36:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:43 executing program 0: sigaltstack(&(0x7f00002dc000/0x1000)=nil, 0x0) r0 = socket$inet6(0xa, 0xbe7e5823e82a5664, 0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps\x00') sendfile(r0, r1, 0x0, 0x88004) 15:36:43 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0xaf9525dfda1b5e6e, 0x0) recvmmsg(r0, &(0x7f0000005840)=[{{&(0x7f0000004a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004ac0)=""/135, 0x87}], 0x1, &(0x7f0000004bc0)=""/24, 0x18}, 0x7fff}, {{&(0x7f0000004c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004c80)=""/173, 0xad}], 0x1, &(0x7f0000004d80)=""/111, 0x6f}, 0x7}, {{&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000004e80)=""/254, 0xfe}], 0x1, &(0x7f0000004fc0)=""/116, 0x74}, 0x1}, {{&(0x7f0000005040)=@ethernet={0x0, @local}, 0x80, &(0x7f0000005380)=[{&(0x7f00000050c0)=""/224, 0xe0}, {&(0x7f00000051c0)=""/245, 0xf5}, {&(0x7f00000052c0)=""/53, 0x35}, {&(0x7f0000005300)=""/100, 0x64}], 0x4, &(0x7f00000053c0)=""/54, 0x36}, 0x7}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f0000005400)=""/54, 0x36}, {&(0x7f0000005440)=""/167, 0xa7}, {&(0x7f0000005500)}, {&(0x7f0000005540)=""/56, 0x38}, {&(0x7f0000005580)=""/220, 0xdc}], 0x5}, 0x1204}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000005700)=""/8, 0x8}], 0x1, &(0x7f0000005780)=""/153, 0x99}}], 0x6, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r3, 0x500, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x93a}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x20000000) getpeername$netrom(r0, &(0x7f0000000200)={{}, [@netrom, @bcast, @remote, @null, @rose, @rose, @null, @default]}, &(0x7f0000000280)=0x48) r4 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x3, 0x7, 0x7, 0x3, 0x0, 0x0, 0x20000, 0x5, 0x80, 0x3, 0x10001, 0x7, 0x3, 0x1, 0x1393, 0xfffffffffffffffb, 0xae, 0x80, 0x9, 0x5, 0x0, 0x5, 0xfff, 0xb247, 0x7, 0x8f, 0x4, 0x7fff, 0x31b, 0x1, 0x1f, 0x0, 0x10001, 0x1, 0x9, 0x2, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0x9}, 0x10000, 0x7ff, 0x3, 0x1, 0x3f, 0xa879, 0x3}, r0, 0x9, r2, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/fscreate\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYRES32=r5]) 15:36:43 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:43 executing program 3 (fault-call:2 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = shmget(0x3, 0x2000, 0x2, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 258.920535] FAULT_INJECTION: forcing a failure. [ 258.920535] name failslab, interval 1, probability 0, space 0, times 0 [ 258.945224] CPU: 0 PID: 13112 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 258.952290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.961643] Call Trace: [ 258.961666] dump_stack+0x138/0x19c 15:36:44 executing program 0: socketpair(0x15, 0x2, 0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x100) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xa3021, 0x0) [ 258.961685] should_fail.cold+0x10f/0x159 [ 258.961700] should_failslab+0xdb/0x130 [ 258.961712] kmem_cache_alloc+0x2d9/0x780 [ 258.961725] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 258.967932] ? check_preemption_disabled+0x3c/0x250 [ 258.969461] selinux_file_alloc_security+0xb4/0x190 [ 258.997519] security_file_alloc+0x73/0xb0 [ 259.001751] get_empty_filp+0x130/0x3b0 [ 259.001762] alloc_file+0x23/0x440 [ 259.001776] __shmem_file_setup.part.0+0x1b1/0x400 [ 259.001786] ? __alloc_fd+0x1d4/0x4a0 [ 259.001797] ? shmem_fill_super+0x8c0/0x8c0 15:36:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) [ 259.001811] SyS_memfd_create+0x1f9/0x3a0 [ 259.001821] ? shmem_fcntl+0x130/0x130 [ 259.001830] ? do_syscall_64+0x53/0x630 [ 259.001842] ? shmem_fcntl+0x130/0x130 [ 259.038333] do_syscall_64+0x1eb/0x630 [ 259.042233] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.047083] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.047093] RIP: 0033:0x458c29 [ 259.047099] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 259.047111] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:36:44 executing program 3 (fault-call:2 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 259.047115] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 259.047123] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 259.063174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4f7c6606d4 [ 259.063181] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 259.175135] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 259.306447] FAULT_INJECTION: forcing a failure. [ 259.306447] name failslab, interval 1, probability 0, space 0, times 0 [ 259.333482] CPU: 0 PID: 13147 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 259.340542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.340547] Call Trace: [ 259.340567] dump_stack+0x138/0x19c [ 259.340586] should_fail.cold+0x10f/0x159 [ 259.340601] should_failslab+0xdb/0x130 [ 259.340613] kmem_cache_alloc+0x2d9/0x780 [ 259.340628] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 259.340641] getname_flags+0xcb/0x580 [ 259.340654] getname+0x1a/0x20 [ 259.340663] do_sys_open+0x1e7/0x430 [ 259.340674] ? filp_open+0x70/0x70 [ 259.340686] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 259.340698] SyS_open+0x2d/0x40 [ 259.340706] ? do_sys_open+0x430/0x430 [ 259.340717] do_syscall_64+0x1eb/0x630 [ 259.340726] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.340741] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 259.340748] RIP: 0033:0x412bc1 [ 259.340753] RSP: 002b:00007f4f7c65fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 259.340763] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 259.340770] RDX: 00007f4f7c65fb0a RSI: 0000000000000002 RDI: 00007f4f7c65fb00 [ 259.340775] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 259.340782] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 259.340787] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 259.343266] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:47 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0x91, "dc8bd0dda2135b428b9dca68438cc0ffabb911c3e3cbe733bf957e96245afc6eb594d9af786d6557d1f25ad044d8a484706248e600674df59025eb044962da7b9991a1becc20a8605375cdceefcaba2aebf22264e47bcf06396dd09592f78a7a50339783cb13fecbefe309d262eb564911e7c494f58831e17cb979f6dfce4bec304547b28f446afc83dde2ecd73393cdd1"}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0945662, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000180)={0x0, {0x1000}}) 15:36:47 executing program 3 (fault-call:2 fault-nth:7): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000940)={0x3, &(0x7f0000000600)=""/80, &(0x7f00000008c0)=[{0x6, 0xd3, 0x7ff, &(0x7f0000000680)=""/211}, {0x1, 0xa, 0x7, &(0x7f0000000780)=""/10}, {0x9, 0xe7, 0x6, &(0x7f00000007c0)=""/231}]}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3bc, r1, 0x0, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xadb8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) semget(0x3, 0x0, 0x8) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000280)=ANY=[@ANYBLOB="e4a812fc5bf92db8e251b0bdb568928ae228f04838a3b388de0d343d679094282498eb88ef78362abaef08320f2043d70fa8ea83d61da38a4f09842410bf216509e6d60780d5c35acf3bd3219e330d68e6ac05dbb6429136dc5d5b53be751e01fc777fd200b08fd1b4f8b463b68ed3e982dc3623eb79e5df9b0aa8"]) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000500)={0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) [ 261.941862] FAULT_INJECTION: forcing a failure. [ 261.941862] name failslab, interval 1, probability 0, space 0, times 0 [ 261.967954] CPU: 1 PID: 13166 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 261.975009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.984373] Call Trace: [ 261.984393] dump_stack+0x138/0x19c [ 261.984412] should_fail.cold+0x10f/0x159 [ 261.984428] should_failslab+0xdb/0x130 [ 261.984443] kmem_cache_alloc+0x2d9/0x780 [ 261.984457] ? save_stack+0xa9/0xd0 [ 261.990664] get_empty_filp+0x8c/0x3b0 [ 261.990677] path_openat+0x8f/0x3f70 [ 261.990700] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 261.990713] ? save_trace+0x290/0x290 [ 261.990735] ? __alloc_fd+0x1d4/0x4a0 15:36:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000140)) signalfd4(r0, &(0x7f0000000000)={0x7ff}, 0x8, 0x80800) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0xc101, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x33c, 0x30, 0x3f, 0xffffffff}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x4, 0x3, 0x9, 0x5, 0x7, 0x81, 0x400, 0x10001, r2}, 0x20) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000380)=0xffffffffffff8001, 0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xfffffffffffffffd, 0x559, 0x8, 0x6, 0xff, 0x9, 0x100000001, 0x8, r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000280)="0c741f695d03c8550a749d9fd89fb4084bc900e5d159f7567de74890e6709f7cc239653c715c66251aae", &(0x7f00000002c0)=""/97}, 0x18) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4002, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000080)={0xff, 0x80000000, 0x74c2, 0x10000}, 0x6) 15:36:47 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f00000000c0)={0x51, &(0x7f0000000180)=""/81}) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000200)=0x2, &(0x7f0000000240)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x101, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0x80000000, 0x400, 0x5d01}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 262.000495] EXT4-fs (sda1): Unrecognized mount option "ä¨ü[ù-¸âQ°½µh’Šâ(ðH8£³ˆÞ 4=g”($˜ëˆïx6*ºï2 CרêƒÖ£ŠO „$¿!e æÖ€ÕÃZÏ;Ó!ž3 hæ¬Û¶B‘6Ü][S¾uüwÒ" or missing value [ 262.003320] do_filp_open+0x18e/0x250 [ 262.003333] ? may_open_dev+0xe0/0xe0 [ 262.003347] ? lock_downgrade+0x6e0/0x6e0 [ 262.003363] ? _raw_spin_unlock+0x2d/0x50 [ 262.043016] ? __alloc_fd+0x1d4/0x4a0 [ 262.043037] do_sys_open+0x2c5/0x430 [ 262.043051] ? filp_open+0x70/0x70 [ 262.058942] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 262.058956] SyS_open+0x2d/0x40 [ 262.058965] ? do_sys_open+0x430/0x430 [ 262.058977] do_syscall_64+0x1eb/0x630 [ 262.058986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.059002] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.096554] RIP: 0033:0x412bc1 [ 262.099750] RSP: 002b:00007f4f7c65fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 262.107479] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 262.114751] RDX: 00007f4f7c65fb0a RSI: 0000000000000002 RDI: 00007f4f7c65fb00 [ 262.122008] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 262.129260] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 15:36:47 executing program 3 (fault-call:2 fault-nth:8): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:47 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 262.136563] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 262.270322] EXT4-fs (sda1): Unrecognized mount option "ä¨ü[ù-¸âQ°½µh’Šâ(ðH8£³ˆÞ 4=g”($˜ëˆïx6*ºï2 CרêƒÖ£ŠO „$¿!e æÖ€ÕÃZÏ;Ó!ž3 hæ¬Û¶B‘6Ü][S¾uüwÒ" or missing value [ 262.294360] FAULT_INJECTION: forcing a failure. [ 262.294360] name failslab, interval 1, probability 0, space 0, times 0 [ 262.312473] CPU: 0 PID: 13196 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 262.319531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.328902] Call Trace: [ 262.331625] dump_stack+0x138/0x19c [ 262.335272] should_fail.cold+0x10f/0x159 [ 262.339419] should_failslab+0xdb/0x130 [ 262.343395] kmem_cache_alloc+0x2d9/0x780 [ 262.347545] ? save_stack+0xa9/0xd0 [ 262.351184] get_empty_filp+0x8c/0x3b0 [ 262.355075] path_openat+0x8f/0x3f70 [ 262.358790] ? trace_hardirqs_on+0x10/0x10 [ 262.363019] ? check_preemption_disabled+0x3c/0x250 [ 262.368031] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 262.372780] ? find_held_lock+0x35/0x130 [ 262.376835] ? save_trace+0x290/0x290 [ 262.380630] ? __alloc_fd+0x1d4/0x4a0 [ 262.384432] do_filp_open+0x18e/0x250 [ 262.388245] ? may_open_dev+0xe0/0xe0 [ 262.392039] ? lock_downgrade+0x6e0/0x6e0 [ 262.396174] ? _raw_spin_unlock+0x2d/0x50 [ 262.400313] ? __alloc_fd+0x1d4/0x4a0 [ 262.404128] do_sys_open+0x2c5/0x430 [ 262.407840] ? filp_open+0x70/0x70 [ 262.411395] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 262.416753] SyS_open+0x2d/0x40 [ 262.420042] ? do_sys_open+0x430/0x430 [ 262.423934] do_syscall_64+0x1eb/0x630 [ 262.427819] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.432661] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.437839] RIP: 0033:0x412bc1 [ 262.441020] RSP: 002b:00007f4f7c65fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 262.448723] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 262.455978] RDX: 00007f4f7c65fb0a RSI: 0000000000000002 RDI: 00007f4f7c65fb00 [ 262.463240] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 15:36:47 executing program 3 (fault-call:2 fault-nth:9): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)=0x0) r2 = geteuid() mount$9p_xen(&(0x7f0000000100)='usrjquota=', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0xc020, &(0x7f0000000280)={'trans=xen,', {[{@cache_loose='cache=loose'}, {@afid={'afid', 0x3d, 0x7}}], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_type={'obj_type', 0x3d, 'vboxnet1eth0'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@measure='measure'}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', r2}}, {@dont_measure='dont_measure'}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/sockstat6\x00') write$sndseq(r3, &(0x7f0000000480)=[{0xc00000000000, 0x9, 0x1, 0x5, @tick=0x1, {0x256, 0x6}, {0x1, 0x100000001}, @ext={0xaf, &(0x7f00000003c0)="81bfbedd262af0a0d79c182963211f893fd3f72286c51defa4046fa23199c1c64d0dd9dff074d89baf1833925bdca0b94961c15a8bca23ef765c73878157836fabae1b1ef513be7ea67dce19632900078dd79650beb4b38efb27d840f54046fc601fce158466953b24d082637d45e9cb832b6069a6b16588d3028108d1912e27f0deda30344d152a3ef5e4f002b060bfa18f51f5540a226ba2ae5399160a2e3c82bb6b7a97ed98ddcfe70792f8ae30"}}], 0x30) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x10000000002, 0x100000114, 0x0, 0x80, &(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0]) [ 262.470524] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 262.477790] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 262.587005] FAULT_INJECTION: forcing a failure. [ 262.587005] name failslab, interval 1, probability 0, space 0, times 0 [ 262.598777] CPU: 0 PID: 13205 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 262.605811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.615246] Call Trace: [ 262.617830] dump_stack+0x138/0x19c [ 262.621451] should_fail.cold+0x10f/0x159 [ 262.625590] should_failslab+0xdb/0x130 [ 262.629554] kmem_cache_alloc+0x2d9/0x780 [ 262.633723] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 262.639179] ? check_preemption_disabled+0x3c/0x250 [ 262.644225] selinux_file_alloc_security+0xb4/0x190 [ 262.649230] security_file_alloc+0x73/0xb0 [ 262.653489] get_empty_filp+0x130/0x3b0 [ 262.657546] path_openat+0x8f/0x3f70 [ 262.661259] ? trace_hardirqs_on+0x10/0x10 [ 262.665568] ? check_preemption_disabled+0x3c/0x250 [ 262.670584] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 262.675248] ? find_held_lock+0x35/0x130 [ 262.679319] ? save_trace+0x290/0x290 [ 262.683119] ? __alloc_fd+0x1d4/0x4a0 [ 262.686953] do_filp_open+0x18e/0x250 [ 262.690768] ? may_open_dev+0xe0/0xe0 [ 262.694574] ? lock_downgrade+0x6e0/0x6e0 [ 262.698744] ? _raw_spin_unlock+0x2d/0x50 [ 262.702898] ? __alloc_fd+0x1d4/0x4a0 [ 262.706708] do_sys_open+0x2c5/0x430 [ 262.710432] ? filp_open+0x70/0x70 [ 262.713974] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 262.719340] SyS_open+0x2d/0x40 [ 262.722600] ? do_sys_open+0x430/0x430 [ 262.726473] do_syscall_64+0x1eb/0x630 [ 262.730349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.735207] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 262.740389] RIP: 0033:0x412bc1 [ 262.743561] RSP: 002b:00007f4f7c65fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 262.751258] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 262.758529] RDX: 00007f4f7c65fb0a RSI: 0000000000000002 RDI: 00007f4f7c65fb00 [ 262.766155] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 262.773431] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 262.780693] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 262.907191] syz-executor.0 (13186) used greatest stack depth: 23792 bytes left 15:36:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:50 executing program 3 (fault-call:2 fault-nth:10): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000140)=ANY=[@ANYBLOB="7573726a71756f74613d2c00cf5349e801b069cb8ffd4f0e8ff7922bdc9124f372d0f495708ed7bc119a88b56f0978cc6735823d65dbc9c17add0caa35da10838d6c6fe1c1864984d45d0c9b11153d822d711d6ccc4272f50cd1da7707ccba9aaa8a0d08c16bc2c60cae8bb0eb828117e6920ff7d0c6d8601256ace5848415a5152dedf089ed4465baf58006793e6cdb5743edd1ed4375c68282b2a9311be1464aff2bab58ded48629cd66962195260e82a85c3be8112c1b084e8f5f205510dabf411eddce0852923367eb97e109edb9ef9cfeace6c40adcb0cdb619100fa260a1cb77eeba6ac1990d"]) 15:36:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xfffffffffffffffa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockname$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x0, 0x0}) 15:36:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001700)=""/91, 0x5b}], 0x1}, 0x1}], 0x0, 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000240)={0x1, 0x0, 0x101, 0x1, {0x80000001, 0x6, 0x7f}}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x24) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x206, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x84) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000140), 0x313, 0x0) 15:36:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 265.022395] FAULT_INJECTION: forcing a failure. [ 265.022395] name failslab, interval 1, probability 0, space 0, times 0 [ 265.036892] CPU: 1 PID: 13227 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 265.043943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.053332] Call Trace: [ 265.055937] dump_stack+0x138/0x19c [ 265.059585] should_fail.cold+0x10f/0x159 [ 265.063749] should_failslab+0xdb/0x130 [ 265.067721] kmem_cache_alloc_trace+0x2ec/0x790 [ 265.072380] ? __lockdep_init_map+0x10c/0x570 [ 265.076866] ? loop_get_status64+0x120/0x120 [ 265.081261] __kthread_create_on_node+0xe3/0x3e0 [ 265.086089] ? kthread_park+0x140/0x140 [ 265.090067] ? __fget+0x210/0x370 [ 265.093519] ? loop_get_status64+0x120/0x120 [ 265.097919] kthread_create_on_node+0xa8/0xd0 [ 265.102401] ? __kthread_create_on_node+0x3e0/0x3e0 [ 265.107410] ? __lockdep_init_map+0x10c/0x570 [ 265.111911] lo_ioctl+0xce4/0x1c70 [ 265.115444] ? loop_probe+0x160/0x160 [ 265.119263] blkdev_ioctl+0x983/0x1880 [ 265.123148] ? blkpg_ioctl+0x980/0x980 [ 265.127023] ? __might_sleep+0x93/0xb0 [ 265.130897] ? __fget+0x210/0x370 [ 265.134339] block_ioctl+0xde/0x120 [ 265.137965] ? blkdev_fallocate+0x3b0/0x3b0 [ 265.142383] do_vfs_ioctl+0x7b9/0x1070 [ 265.146273] ? selinux_file_mprotect+0x5d0/0x5d0 [ 265.151118] ? lock_downgrade+0x6e0/0x6e0 [ 265.155338] ? ioctl_preallocate+0x1c0/0x1c0 [ 265.159734] ? __fget+0x237/0x370 [ 265.163176] ? security_file_ioctl+0x8f/0xc0 [ 265.167592] SyS_ioctl+0x8f/0xc0 [ 265.170970] ? do_vfs_ioctl+0x1070/0x1070 [ 265.175112] do_syscall_64+0x1eb/0x630 [ 265.178988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.183835] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.189007] RIP: 0033:0x458a97 [ 265.192196] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.199907] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 265.207164] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 265.214416] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 15:36:50 executing program 3 (fault-call:2 fault-nth:11): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 265.221670] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 265.228927] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 265.252060] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:50 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0xce) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 15:36:50 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 15:36:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r0 = dup(0xffffffffffffff9c) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x1, 0x4}) [ 265.414387] FAULT_INJECTION: forcing a failure. [ 265.414387] name failslab, interval 1, probability 0, space 0, times 0 [ 265.428829] CPU: 0 PID: 13255 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 265.435910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.445703] Call Trace: [ 265.448294] dump_stack+0x138/0x19c [ 265.451919] should_fail.cold+0x10f/0x159 [ 265.456060] should_failslab+0xdb/0x130 [ 265.460027] kmem_cache_alloc+0x2d9/0x780 [ 265.464170] ? save_trace+0x290/0x290 [ 265.468045] __kernfs_new_node+0x70/0x420 [ 265.472184] kernfs_new_node+0x80/0xf0 [ 265.476067] kernfs_create_dir_ns+0x41/0x140 [ 265.480477] internal_create_group+0xea/0x7b0 [ 265.484959] sysfs_create_group+0x20/0x30 [ 265.489089] lo_ioctl+0x1163/0x1c70 [ 265.492701] ? loop_probe+0x160/0x160 [ 265.496487] blkdev_ioctl+0x983/0x1880 [ 265.500360] ? blkpg_ioctl+0x980/0x980 [ 265.504234] ? __might_sleep+0x93/0xb0 [ 265.508108] ? __fget+0x210/0x370 [ 265.511556] block_ioctl+0xde/0x120 [ 265.515180] ? blkdev_fallocate+0x3b0/0x3b0 [ 265.519504] do_vfs_ioctl+0x7b9/0x1070 [ 265.523381] ? selinux_file_mprotect+0x5d0/0x5d0 [ 265.528120] ? lock_downgrade+0x6e0/0x6e0 [ 265.532257] ? ioctl_preallocate+0x1c0/0x1c0 [ 265.536649] ? __fget+0x237/0x370 [ 265.540101] ? security_file_ioctl+0x8f/0xc0 [ 265.544506] SyS_ioctl+0x8f/0xc0 [ 265.547876] ? do_vfs_ioctl+0x1070/0x1070 [ 265.552026] do_syscall_64+0x1eb/0x630 [ 265.555898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.560733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 265.565902] RIP: 0033:0x458a97 [ 265.569093] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.576880] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 265.584140] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 265.591395] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 265.598862] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 265.606120] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 265.622238] EXT4-fs (sda1): can't enable nombcache during remount [ 265.704414] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 265.794178] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:53 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) fsetxattr$security_evm(r1, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "ee7ab4fb0c30c31bbab8b3b59ddb2ff8"}, 0x11, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000001140)="0adc03263c343f319bd070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0xb) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000013, &(0x7f0000000140), 0x27b) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x4) write(r3, &(0x7f0000001180)="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", 0xe91) close(r3) 15:36:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 15:36:53 executing program 3 (fault-call:2 fault-nth:12): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0xfffffffffffffc00, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="e5a8aa5de7402a4e80186876d16c95d971bcb8a836110ba8451237348a502e01"]) 15:36:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x6c, @remote, 0x4e21, 0x1, 'dh\x00', 0x4, 0x1, 0x40}, 0x2c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$packet_buf(r1, 0x107, 0x0, 0x0, &(0x7f0000000040)=0x259) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) [ 268.054761] FAULT_INJECTION: forcing a failure. [ 268.054761] name failslab, interval 1, probability 0, space 0, times 0 [ 268.066769] CPU: 0 PID: 13285 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 268.073808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.083174] Call Trace: [ 268.085758] dump_stack+0x138/0x19c [ 268.089385] should_fail.cold+0x10f/0x159 [ 268.093534] should_failslab+0xdb/0x130 [ 268.097514] kmem_cache_alloc+0x47/0x780 [ 268.101572] ? save_stack_trace+0x16/0x20 [ 268.106102] ? save_stack+0x45/0xd0 [ 268.109723] ? kasan_kmalloc+0xce/0xf0 [ 268.113606] ? kasan_slab_alloc+0xf/0x20 [ 268.117655] ? kmem_cache_alloc+0x12e/0x780 [ 268.121962] ? __kernfs_new_node+0x70/0x420 [ 268.126284] ? kernfs_new_node+0x80/0xf0 [ 268.130366] ? kernfs_create_dir_ns+0x41/0x140 [ 268.136362] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 268.142000] idr_get_free_cmn+0x563/0x8d0 [ 268.146154] idr_alloc_cmn+0x10e/0x210 [ 268.150039] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 268.154897] ? __lock_is_held+0xb6/0x140 [ 268.159130] ? check_preemption_disabled+0x3c/0x250 [ 268.164239] idr_alloc_cyclic+0xd0/0x1e2 [ 268.168466] ? ida_simple_remove+0x60/0x60 [ 268.172705] __kernfs_new_node+0xe4/0x420 [ 268.176862] kernfs_new_node+0x80/0xf0 [ 268.180743] kernfs_create_dir_ns+0x41/0x140 [ 268.185149] internal_create_group+0xea/0x7b0 [ 268.189650] sysfs_create_group+0x20/0x30 [ 268.193809] lo_ioctl+0x1163/0x1c70 [ 268.197457] ? loop_probe+0x160/0x160 [ 268.201359] blkdev_ioctl+0x983/0x1880 [ 268.205272] ? blkpg_ioctl+0x980/0x980 [ 268.209147] ? __might_sleep+0x93/0xb0 [ 268.213027] ? __fget+0x210/0x370 [ 268.216476] block_ioctl+0xde/0x120 [ 268.220086] ? blkdev_fallocate+0x3b0/0x3b0 [ 268.224401] do_vfs_ioctl+0x7b9/0x1070 [ 268.228294] ? selinux_file_mprotect+0x5d0/0x5d0 [ 268.233054] ? lock_downgrade+0x6e0/0x6e0 [ 268.237206] ? ioctl_preallocate+0x1c0/0x1c0 [ 268.241608] ? __fget+0x237/0x370 [ 268.245065] ? security_file_ioctl+0x8f/0xc0 [ 268.249468] SyS_ioctl+0x8f/0xc0 [ 268.252833] ? do_vfs_ioctl+0x1070/0x1070 [ 268.256988] do_syscall_64+0x1eb/0x630 [ 268.260878] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.265720] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.270899] RIP: 0033:0x458a97 [ 268.274079] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.281792] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 268.289050] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 268.296311] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 15:36:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) [ 268.303590] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 268.310867] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 268.321472] EXT4-fs (sda1): can't enable nombcache during remount [ 268.361996] EXT4-fs (sda1): Unrecognized mount option "娪]ç@*N€hvÑl•Ùq¼¸¨6 ¨E74ŠP." or missing value 15:36:53 executing program 3 (fault-call:2 fault-nth:13): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 268.446694] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 268.483257] audit: type=1400 audit(1555429013.566:107): avc: denied { map } for pid=13301 comm="syz-executor.0" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 268.519917] FAULT_INJECTION: forcing a failure. [ 268.519917] name failslab, interval 1, probability 0, space 0, times 0 [ 268.532241] CPU: 0 PID: 13312 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 268.545599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.555051] Call Trace: [ 268.557641] dump_stack+0x138/0x19c [ 268.561281] should_fail.cold+0x10f/0x159 [ 268.565429] should_failslab+0xdb/0x130 [ 268.569503] kmem_cache_alloc+0x2d9/0x780 [ 268.573641] ? __mutex_unlock_slowpath+0x71/0x800 [ 268.578470] ? __lock_is_held+0xb6/0x140 [ 268.582525] __kernfs_new_node+0x70/0x420 [ 268.586660] kernfs_new_node+0x80/0xf0 [ 268.590544] __kernfs_create_file+0x46/0x323 [ 268.594950] sysfs_add_file_mode_ns+0x1e4/0x450 [ 268.599611] internal_create_group+0x235/0x7b0 [ 268.604186] sysfs_create_group+0x20/0x30 [ 268.608322] lo_ioctl+0x1163/0x1c70 [ 268.611955] ? loop_probe+0x160/0x160 [ 268.615750] blkdev_ioctl+0x983/0x1880 [ 268.619619] ? blkpg_ioctl+0x980/0x980 [ 268.623526] ? __might_sleep+0x93/0xb0 [ 268.627415] ? __fget+0x210/0x370 [ 268.630869] block_ioctl+0xde/0x120 [ 268.634502] ? blkdev_fallocate+0x3b0/0x3b0 [ 268.638821] do_vfs_ioctl+0x7b9/0x1070 [ 268.642693] ? selinux_file_mprotect+0x5d0/0x5d0 15:36:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x256, 0x0, 0x100020, &(0x7f0000000300)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@obj_user={'obj_user', 0x3d, 'usrjquota='}}, {@euid_eq={'euid', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r0}}, {@pcr={'pcr', 0x3d, 0x27}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x39, 0x35, 0x63, 0x32, 0x34, 0x32, 0x3c], 0x2d, [0x37, 0x35, 0x76, 0x32], 0x2d, [0x61, 0x73, 0x67], 0x2d, [0x75, 0x64, 0x39, 0x36], 0x2d, [0x62, 0x30, 0x66, 0x0, 0x39, 0x73, 0x30, 0x3d]}}}]}) 15:36:53 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) 15:36:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0xa08040, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 268.647456] ? lock_downgrade+0x6e0/0x6e0 [ 268.651608] ? ioctl_preallocate+0x1c0/0x1c0 [ 268.656012] ? __fget+0x237/0x370 [ 268.659455] ? security_file_ioctl+0x8f/0xc0 [ 268.663866] SyS_ioctl+0x8f/0xc0 [ 268.667219] ? do_vfs_ioctl+0x1070/0x1070 [ 268.671367] do_syscall_64+0x1eb/0x630 [ 268.675262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.680103] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 268.685307] RIP: 0033:0x458a97 [ 268.688480] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.696200] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 268.703457] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 268.710717] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 268.717976] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 268.725253] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 268.736995] EXT4-fs (sda1): can't enable nombcache during remount [ 268.755305] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20001 [ 268.896016] audit: type=1400 audit(1555429013.976:108): avc: denied { create } for pid=13324 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 15:36:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) r1 = socket$inet(0x10, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000001c0), 0x2) sendmsg(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff25, &(0x7f0000000140)}, 0x0) 15:36:56 executing program 3 (fault-call:2 fault-nth:14): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) 15:36:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000a00)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000a40)={0x5, 0x7ff, 0x1, 0x8, 0x8, 0x2}) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000980)={0x7, 0xffffffffffffffc0, 0x50000, 0x8b8}, 0x10) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3, 0x6) ioctl$int_in(r2, 0x5452, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0xffffffffffffff1b, 0x12, 0x100000000000f00, {0x8, 0x0, 0x4000000000000000, 0x0, 0xe000000}}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) dup2(r2, r3) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000009c0)=0x3) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 271.113216] FAULT_INJECTION: forcing a failure. [ 271.113216] name failslab, interval 1, probability 0, space 0, times 0 [ 271.127366] CPU: 0 PID: 13345 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 271.134430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.143949] Call Trace: [ 271.147018] dump_stack+0x138/0x19c [ 271.150689] should_fail.cold+0x10f/0x159 [ 271.154839] should_failslab+0xdb/0x130 [ 271.158818] kmem_cache_alloc+0x2d9/0x780 [ 271.163081] ? wait_for_completion+0x420/0x420 [ 271.167804] __kernfs_new_node+0x70/0x420 [ 271.172084] kernfs_new_node+0x80/0xf0 [ 271.175958] __kernfs_create_file+0x46/0x323 [ 271.180356] sysfs_add_file_mode_ns+0x1e4/0x450 [ 271.185022] internal_create_group+0x235/0x7b0 [ 271.189741] sysfs_create_group+0x20/0x30 [ 271.193904] lo_ioctl+0x1163/0x1c70 [ 271.197532] ? loop_probe+0x160/0x160 [ 271.201376] blkdev_ioctl+0x983/0x1880 [ 271.205252] ? blkpg_ioctl+0x980/0x980 [ 271.209133] ? __might_sleep+0x93/0xb0 [ 271.213007] ? __fget+0x210/0x370 [ 271.216454] block_ioctl+0xde/0x120 [ 271.220069] ? blkdev_fallocate+0x3b0/0x3b0 [ 271.224469] do_vfs_ioctl+0x7b9/0x1070 [ 271.228433] ? selinux_file_mprotect+0x5d0/0x5d0 [ 271.233331] ? lock_downgrade+0x6e0/0x6e0 [ 271.237642] ? ioctl_preallocate+0x1c0/0x1c0 [ 271.242067] ? __fget+0x237/0x370 [ 271.245520] ? security_file_ioctl+0x8f/0xc0 [ 271.249915] SyS_ioctl+0x8f/0xc0 [ 271.253267] ? do_vfs_ioctl+0x1070/0x1070 [ 271.257585] do_syscall_64+0x1eb/0x630 [ 271.261498] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.266345] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.271800] RIP: 0033:0x458a97 [ 271.275089] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.282915] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 271.290287] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 271.299033] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 271.306533] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 15:36:56 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) [ 271.314203] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 271.328844] EXT4-fs (sda1): can't enable nombcache during remount 15:36:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:56 executing program 5 (fault-call:7 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:56 executing program 3 (fault-call:2 fault-nth:15): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 271.410806] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) [ 271.594510] FAULT_INJECTION: forcing a failure. [ 271.594510] name failslab, interval 1, probability 0, space 0, times 0 [ 271.606353] CPU: 0 PID: 13380 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 271.613393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.622939] Call Trace: [ 271.625535] dump_stack+0x138/0x19c [ 271.629164] should_fail.cold+0x10f/0x159 [ 271.633326] should_failslab+0xdb/0x130 [ 271.637823] kmem_cache_alloc+0x2d9/0x780 [ 271.641959] ? wait_for_completion+0x420/0x420 [ 271.646543] __kernfs_new_node+0x70/0x420 [ 271.650680] kernfs_new_node+0x80/0xf0 [ 271.654907] __kernfs_create_file+0x46/0x323 [ 271.659443] sysfs_add_file_mode_ns+0x1e4/0x450 [ 271.664113] internal_create_group+0x235/0x7b0 [ 271.668689] sysfs_create_group+0x20/0x30 [ 271.673419] lo_ioctl+0x1163/0x1c70 [ 271.677160] ? loop_probe+0x160/0x160 [ 271.680971] blkdev_ioctl+0x983/0x1880 [ 271.684847] ? blkpg_ioctl+0x980/0x980 [ 271.688836] ? __might_sleep+0x93/0xb0 [ 271.693396] ? __fget+0x210/0x370 [ 271.696988] block_ioctl+0xde/0x120 [ 271.700609] ? blkdev_fallocate+0x3b0/0x3b0 [ 271.704930] do_vfs_ioctl+0x7b9/0x1070 [ 271.708811] ? selinux_file_mprotect+0x5d0/0x5d0 [ 271.713561] ? lock_downgrade+0x6e0/0x6e0 [ 271.717699] ? ioctl_preallocate+0x1c0/0x1c0 [ 271.722091] ? __fget+0x237/0x370 [ 271.725705] ? security_file_ioctl+0x8f/0xc0 [ 271.730205] SyS_ioctl+0x8f/0xc0 [ 271.733668] ? do_vfs_ioctl+0x1070/0x1070 [ 271.737828] do_syscall_64+0x1eb/0x630 [ 271.741702] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.746543] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 271.751874] RIP: 0033:0x458a97 [ 271.755052] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.762885] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 271.770793] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 271.780345] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 271.787619] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 271.794883] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 271.805088] EXT4-fs (sda1): can't enable nombcache during remount [ 271.928568] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 272.024767] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:36:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) memfd_create(&(0x7f0000000180)='&.wlan1em1selinuxvmnet1@(%\x00', 0x5) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvfrom$x25(r1, &(0x7f0000000280)=""/190, 0xbe, 0x1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0, 0x800000000000001}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:36:59 executing program 3 (fault-call:2 fault-nth:16): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:59 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/179, 0xb3, 0x20, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file1\x00', 0x0, 0x20, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 274.163541] FAULT_INJECTION: forcing a failure. [ 274.163541] name failslab, interval 1, probability 0, space 0, times 0 [ 274.174852] CPU: 1 PID: 13404 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 274.181982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.191336] Call Trace: [ 274.194327] dump_stack+0x138/0x19c [ 274.197973] should_fail.cold+0x10f/0x159 [ 274.202133] should_failslab+0xdb/0x130 [ 274.206122] kmem_cache_alloc+0x47/0x780 [ 274.210189] ? save_stack_trace+0x16/0x20 [ 274.214337] ? save_stack+0x45/0xd0 [ 274.217948] ? kasan_kmalloc+0xce/0xf0 [ 274.221824] ? kasan_slab_alloc+0xf/0x20 [ 274.225887] ? kmem_cache_alloc+0x12e/0x780 [ 274.230203] ? __kernfs_new_node+0x70/0x420 [ 274.234801] ? kernfs_new_node+0x80/0xf0 [ 274.238950] ? __kernfs_create_file+0x46/0x323 [ 274.243535] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 274.249327] idr_get_free_cmn+0x563/0x8d0 [ 274.253499] idr_alloc_cmn+0x10e/0x210 [ 274.257554] ? __fprop_inc_percpu_max+0x1e0/0x1e0 [ 274.262412] ? __lock_is_held+0xb6/0x140 [ 274.266487] ? check_preemption_disabled+0x3c/0x250 [ 274.271503] idr_alloc_cyclic+0xd0/0x1e2 [ 274.275562] ? ida_simple_remove+0x60/0x60 [ 274.281033] __kernfs_new_node+0xe4/0x420 [ 274.285202] kernfs_new_node+0x80/0xf0 [ 274.289082] __kernfs_create_file+0x46/0x323 [ 274.293479] sysfs_add_file_mode_ns+0x1e4/0x450 [ 274.298137] internal_create_group+0x235/0x7b0 [ 274.302809] sysfs_create_group+0x20/0x30 [ 274.306949] lo_ioctl+0x1163/0x1c70 [ 274.310679] ? loop_probe+0x160/0x160 [ 274.314499] blkdev_ioctl+0x983/0x1880 [ 274.318382] ? blkpg_ioctl+0x980/0x980 [ 274.322272] ? __might_sleep+0x93/0xb0 [ 274.326164] ? __fget+0x210/0x370 [ 274.330534] block_ioctl+0xde/0x120 [ 274.334190] ? blkdev_fallocate+0x3b0/0x3b0 [ 274.338513] do_vfs_ioctl+0x7b9/0x1070 [ 274.342406] ? selinux_file_mprotect+0x5d0/0x5d0 [ 274.347179] ? lock_downgrade+0x6e0/0x6e0 [ 274.351322] ? ioctl_preallocate+0x1c0/0x1c0 [ 274.355722] ? __fget+0x237/0x370 [ 274.359167] ? security_file_ioctl+0x8f/0xc0 15:36:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000a00)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000a40)={0x5, 0x7ff, 0x1, 0x8, 0x8, 0x2}) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000980)={0x7, 0xffffffffffffffc0, 0x50000, 0x8b8}, 0x10) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000140)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3, 0x6) ioctl$int_in(r2, 0x5452, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000000)={0xffffffffffffff1b, 0x12, 0x100000000000f00, {0x8, 0x0, 0x4000000000000000, 0x0, 0xe000000}}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) dup2(r2, r3) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000009c0)=0x3) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:59 executing program 4: r0 = shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/57) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r1 = semget(0x0, 0x2, 0x201) semctl$IPC_RMID(r1, 0x0, 0x0) 15:36:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r1, &(0x7f0000000280)=""/75, 0x4b, 0x40, 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x9}, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x10080) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000340)={r3, 0x88, "3c7fc0043f1d53dc7af42dd7764812714dbe07a099a23c81aa083bebae5ec1fbc49dc07107b2d770fa513b54c303736707c11f617c7db050e898450ffa2b8ff3f8acf8d61428af4f5a78722b92397b47570c9bc725db629d7831bf86e46705caa0cae3c43b8fde8619126a26b4c3adccd4cd90396f34aea13aceb47ef6f2daa679f67f24b4ca069b"}, &(0x7f0000000400)=0x90) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r4 = semget(0x0, 0x4, 0x20) semctl$SEM_STAT(r4, 0x3, 0x12, &(0x7f0000000440)=""/16) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x1) [ 274.363672] SyS_ioctl+0x8f/0xc0 [ 274.367057] ? do_vfs_ioctl+0x1070/0x1070 [ 274.371208] do_syscall_64+0x1eb/0x630 [ 274.375110] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.379968] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.385165] RIP: 0033:0x458a97 [ 274.388352] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.396053] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 274.403321] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 274.410586] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 274.417836] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 274.425231] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 274.436848] EXT4-fs (sda1): can't enable nombcache during remount 15:36:59 executing program 3 (fault-call:2 fault-nth:17): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:36:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') poll(&(0x7f0000000200)=[{r2}, {r1}], 0x2, 0x10080c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:36:59 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000080)={0x57, 0x6, 0x100, {0x8, 0x6}, {0x7, 0x2}, @ramp={0x4, 0x3, {0x8001, 0x0, 0x7fff, 0x1}}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000300)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 274.619538] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 274.648986] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:36:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x123) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x490]}) [ 274.684237] FAULT_INJECTION: forcing a failure. [ 274.684237] name failslab, interval 1, probability 0, space 0, times 0 [ 274.697533] CPU: 0 PID: 13448 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 274.704578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.714155] Call Trace: [ 274.716750] dump_stack+0x138/0x19c [ 274.720374] should_fail.cold+0x10f/0x159 [ 274.724516] should_failslab+0xdb/0x130 [ 274.728481] kmem_cache_alloc+0x2d9/0x780 [ 274.732612] ? wait_for_completion+0x420/0x420 [ 274.737342] __kernfs_new_node+0x70/0x420 [ 274.742455] kernfs_new_node+0x80/0xf0 [ 274.746342] __kernfs_create_file+0x46/0x323 [ 274.750750] sysfs_add_file_mode_ns+0x1e4/0x450 [ 274.755408] internal_create_group+0x235/0x7b0 [ 274.759982] sysfs_create_group+0x20/0x30 [ 274.764309] lo_ioctl+0x1163/0x1c70 [ 274.767926] ? loop_probe+0x160/0x160 [ 274.771713] blkdev_ioctl+0x983/0x1880 [ 274.775630] ? blkpg_ioctl+0x980/0x980 [ 274.779703] ? __might_sleep+0x93/0xb0 [ 274.783677] ? __fget+0x210/0x370 [ 274.787124] block_ioctl+0xde/0x120 [ 274.790798] ? blkdev_fallocate+0x3b0/0x3b0 [ 274.795124] do_vfs_ioctl+0x7b9/0x1070 [ 274.799181] ? selinux_file_mprotect+0x5d0/0x5d0 [ 274.803931] ? lock_downgrade+0x6e0/0x6e0 [ 274.808071] ? ioctl_preallocate+0x1c0/0x1c0 [ 274.812478] ? __fget+0x237/0x370 [ 274.815999] ? security_file_ioctl+0x8f/0xc0 [ 274.820429] SyS_ioctl+0x8f/0xc0 [ 274.823808] ? do_vfs_ioctl+0x1070/0x1070 [ 274.827958] do_syscall_64+0x1eb/0x630 [ 274.831835] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 274.836669] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 274.841845] RIP: 0033:0x458a97 [ 274.845354] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.853385] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 274.860716] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 274.867979] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 274.875247] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 15:37:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x42000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x54c}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x100000001, 0x8000, 0x1, 0x1, r1}, &(0x7f0000000200)=0x10) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 274.882822] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 274.895715] EXT4-fs (sda1): can't enable nombcache during remount 15:37:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) clone(0x0, &(0x7f0000000040)="94af583fb1628f8fa7a58c8f1a4bd0a47b56d88684eb1c03bfbc95067e2c663f70d585ea39d4d107fdcb0832c7f59b551f5ef86713f301d560e0d468121afea105bcf2b5c70e5223ae07e20e9657c6c4b47e93ecd943639f45da7840698c2dbb079b12d71c386798991ee26fd8f52608b91af7c21caa77fcec1a6189d99807d01a555d336778217369493f29e08d02817de7633c1454aae948140cf65abc51cf42", &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000002c0)="2f4e3f6501650a376e7d28766c41b63730aeade70b6c46152c8047948ac043a5c1e06dfd495ea368d3727ed8fc1922da360d88d50f724267425cf1af180106034c0ba199df41a93fce4f3c3c54dfe320fe720f206b782ab9ba0877397ae9b185910f4a5987e051f41509608629edd73074f2c5193b4dc1f9082813317ff4621738678161c02fdb959a05e9f4ebe711cdf7f564e82b1d3ea229fb6d3894d14bfd982d5a0f2af48b14d313b735ef256fd1a42ec46d241fae3fe82ce334") connect$inet6(r1, &(0x7f0000000000), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000600), 0x4) bind$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f00000005c0)) 15:37:00 executing program 3 (fault-call:2 fault-nth:18): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 275.165058] FAULT_INJECTION: forcing a failure. [ 275.165058] name failslab, interval 1, probability 0, space 0, times 0 [ 275.186980] CPU: 0 PID: 13480 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 275.194048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 275.203872] Call Trace: [ 275.206474] dump_stack+0x138/0x19c [ 275.210142] should_fail.cold+0x10f/0x159 [ 275.214295] should_failslab+0xdb/0x130 [ 275.218271] kmem_cache_alloc+0x2d9/0x780 [ 275.222420] ? wait_for_completion+0x420/0x420 [ 275.227011] __kernfs_new_node+0x70/0x420 [ 275.231157] kernfs_new_node+0x80/0xf0 [ 275.235065] __kernfs_create_file+0x46/0x323 [ 275.239500] sysfs_add_file_mode_ns+0x1e4/0x450 [ 275.244189] internal_create_group+0x235/0x7b0 [ 275.249023] sysfs_create_group+0x20/0x30 [ 275.253183] lo_ioctl+0x1163/0x1c70 [ 275.256817] ? loop_probe+0x160/0x160 [ 275.260629] blkdev_ioctl+0x983/0x1880 [ 275.264519] ? blkpg_ioctl+0x980/0x980 [ 275.268412] ? __might_sleep+0x93/0xb0 [ 275.272302] ? __fget+0x210/0x370 [ 275.275756] block_ioctl+0xde/0x120 [ 275.279380] ? blkdev_fallocate+0x3b0/0x3b0 [ 275.283697] do_vfs_ioctl+0x7b9/0x1070 [ 275.287585] ? selinux_file_mprotect+0x5d0/0x5d0 [ 275.292423] ? lock_downgrade+0x6e0/0x6e0 [ 275.296569] ? ioctl_preallocate+0x1c0/0x1c0 [ 275.301149] ? __fget+0x237/0x370 [ 275.304605] ? security_file_ioctl+0x8f/0xc0 [ 275.309011] SyS_ioctl+0x8f/0xc0 [ 275.312376] ? do_vfs_ioctl+0x1070/0x1070 [ 275.316519] do_syscall_64+0x1eb/0x630 [ 275.320515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 275.325366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 275.330548] RIP: 0033:0x458a97 [ 275.333997] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.341698] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 275.348957] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 275.356278] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 275.363551] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 275.370819] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 275.384802] EXT4-fs (sda1): can't enable nombcache during remount 15:37:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r2 = dup3(r1, r1, 0x80000) bind$nfc_llcp(r2, &(0x7f0000000280)={0x27, 0x0, 0x0, 0x7, 0x1f, 0x80, "ca63806eee7eac60dc62063bf523b2de1dad534cf667d8a9c2137d2d6963bf3ce79d40e2068ecf1d12db5b68e6609890c95629fb25b85b4ae24f298da73a57", 0xd}, 0x60) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) 15:37:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0x77) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) setreuid(r0, r1) 15:37:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x261, &(0x7f0000000080)=[@op={0x18, 0x117, 0x2}], 0x18}], 0x4924944, 0x0) 15:37:02 executing program 3 (fault-call:2 fault-nth:19): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:02 executing program 0: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x7, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) [ 277.544444] FAULT_INJECTION: forcing a failure. [ 277.544444] name failslab, interval 1, probability 0, space 0, times 0 [ 277.561189] CPU: 1 PID: 13507 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 277.568262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.577623] Call Trace: [ 277.580226] dump_stack+0x138/0x19c [ 277.583865] should_fail.cold+0x10f/0x159 [ 277.588007] should_failslab+0xdb/0x130 [ 277.592025] kmem_cache_alloc_trace+0x2ec/0x790 [ 277.596685] ? kernfs_put+0x35e/0x490 [ 277.600473] ? sysfs_add_file_mode_ns+0x1e4/0x450 [ 277.605305] ? devm_device_remove_groups+0x50/0x50 [ 277.610253] kobject_uevent_env+0x2fa/0xc41 [ 277.614570] ? internal_create_group+0x4a0/0x7b0 [ 277.619317] kobject_uevent+0x20/0x26 [ 277.623101] lo_ioctl+0x11d3/0x1c70 [ 277.626726] ? loop_probe+0x160/0x160 [ 277.630523] blkdev_ioctl+0x983/0x1880 [ 277.634487] ? blkpg_ioctl+0x980/0x980 [ 277.638364] ? __might_sleep+0x93/0xb0 [ 277.642250] ? __fget+0x210/0x370 [ 277.645703] block_ioctl+0xde/0x120 [ 277.649346] ? blkdev_fallocate+0x3b0/0x3b0 [ 277.653659] do_vfs_ioctl+0x7b9/0x1070 [ 277.657564] ? selinux_file_mprotect+0x5d0/0x5d0 [ 277.662316] ? lock_downgrade+0x6e0/0x6e0 [ 277.666466] ? ioctl_preallocate+0x1c0/0x1c0 [ 277.670859] ? __fget+0x237/0x370 [ 277.674302] ? security_file_ioctl+0x8f/0xc0 [ 277.678699] SyS_ioctl+0x8f/0xc0 [ 277.682072] ? do_vfs_ioctl+0x1070/0x1070 [ 277.686213] do_syscall_64+0x1eb/0x630 [ 277.690086] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 277.694933] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 277.700117] RIP: 0033:0x458a97 [ 277.703289] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.711017] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 277.718529] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 277.725785] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 277.733060] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 15:37:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x20000000000) mount$bpf(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x26b, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="7573726a71756f74613d2c003097bdbf76f4b87d097b4657f5585c6e650af479d2813229a1ba2b873d1e4815b02cd44f80a85cc1d0f9304b56d457e8958c39978f491e4afd98339d5e7bb5115ca72debd2"]) [ 277.740315] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 277.751638] EXT4-fs (sda1): can't enable nombcache during remount 15:37:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:02 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8800, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x8, @local, 0xffffffff}}, 0x2, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x4}, &(0x7f0000000340)=0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x116020}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r3, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa79}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3d, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1b}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xea}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}]}, 0xd4}}, 0x90) r4 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file1\x00', 0x0, 0x1000000000000004, 0x0) getuid() r0 = semget(0x3, 0x3, 0x200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0xfc714ef7696b0869, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000001140)=0xfffffffffffff3a4) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000100)=""/4096) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) prctl$PR_SET_TSC(0x1a, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) 15:37:02 executing program 3 (fault-call:2 fault-nth:20): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 277.973201] FAULT_INJECTION: forcing a failure. [ 277.973201] name failslab, interval 1, probability 0, space 0, times 0 [ 277.988420] CPU: 0 PID: 13543 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 277.995556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.004913] Call Trace: [ 278.007489] dump_stack+0x138/0x19c [ 278.011126] should_fail.cold+0x10f/0x159 [ 278.015266] should_failslab+0xdb/0x130 [ 278.019264] __kmalloc+0x2f3/0x7a0 [ 278.022882] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 278.028322] ? kobject_uevent_env+0x2fa/0xc41 [ 278.033146] ? rcu_read_lock_sched_held+0x110/0x130 [ 278.038346] ? kobject_get_path+0xbb/0x1a0 [ 278.045812] kobject_get_path+0xbb/0x1a0 [ 278.049878] ? devm_device_remove_groups+0x50/0x50 [ 278.054806] kobject_uevent_env+0x31e/0xc41 [ 278.059113] ? internal_create_group+0x4a0/0x7b0 [ 278.063859] kobject_uevent+0x20/0x26 [ 278.067645] lo_ioctl+0x11d3/0x1c70 [ 278.071256] ? loop_probe+0x160/0x160 [ 278.075038] blkdev_ioctl+0x983/0x1880 [ 278.078910] ? blkpg_ioctl+0x980/0x980 [ 278.082790] ? __might_sleep+0x93/0xb0 [ 278.086660] ? __fget+0x210/0x370 [ 278.090098] block_ioctl+0xde/0x120 [ 278.093730] ? blkdev_fallocate+0x3b0/0x3b0 [ 278.098039] do_vfs_ioctl+0x7b9/0x1070 [ 278.101916] ? selinux_file_mprotect+0x5d0/0x5d0 [ 278.106672] ? lock_downgrade+0x6e0/0x6e0 [ 278.110815] ? ioctl_preallocate+0x1c0/0x1c0 [ 278.115226] ? __fget+0x237/0x370 [ 278.118683] ? security_file_ioctl+0x8f/0xc0 [ 278.123084] SyS_ioctl+0x8f/0xc0 [ 278.126430] ? do_vfs_ioctl+0x1070/0x1070 [ 278.130577] do_syscall_64+0x1eb/0x630 [ 278.134450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 278.140360] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 278.145538] RIP: 0033:0x458a97 [ 278.148809] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.156516] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 278.163803] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 278.171067] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 278.178324] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 278.185577] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 278.195638] EXT4-fs (sda1): can't enable nombcache during remount 15:37:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000002c0)={0x1000, 0x8d}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x3, r2, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x6, 0x3f, 0x7, 0x9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x7fff, 0x200, 0x9, 0x47b0, r4}, &(0x7f0000000240)=0x10) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000280)={0x2, 0x754, 0x3c6, 0x7ff, 0x1b, 0x0, 0x422, 0x3ce, 0x100000001, 0x5, 0x5, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xd5, 0x40, 0x0, 0x0) 15:37:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x4103, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x48000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0xc00, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2b}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000340)=0x5, 0x4) 15:37:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x800, 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='bridge0\x00', 0x10) 15:37:05 executing program 3 (fault-call:2 fault-nth:21): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 280.598685] FAULT_INJECTION: forcing a failure. [ 280.598685] name failslab, interval 1, probability 0, space 0, times 0 [ 280.614509] CPU: 1 PID: 13565 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 280.621585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.630953] Call Trace: [ 280.631060] dump_stack+0x138/0x19c [ 280.631079] should_fail.cold+0x10f/0x159 [ 280.631096] should_failslab+0xdb/0x130 [ 280.631110] kmem_cache_alloc_node_trace+0x283/0x770 [ 280.631124] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 280.631139] __kmalloc_node_track_caller+0x3d/0x80 [ 280.661385] __kmalloc_reserve.isra.0+0x40/0xe0 [ 280.666294] __alloc_skb+0xcf/0x500 [ 280.669908] ? skb_scrub_packet+0x4b0/0x4b0 [ 280.674226] ? netlink_has_listeners+0x20a/0x330 [ 280.678981] kobject_uevent_env+0x74c/0xc41 [ 280.683290] ? internal_create_group+0x4a0/0x7b0 [ 280.688035] kobject_uevent+0x20/0x26 [ 280.691833] lo_ioctl+0x11d3/0x1c70 [ 280.695479] ? loop_probe+0x160/0x160 [ 280.699269] blkdev_ioctl+0x983/0x1880 [ 280.703152] ? blkpg_ioctl+0x980/0x980 [ 280.707030] ? __might_sleep+0x93/0xb0 [ 280.710907] ? __fget+0x210/0x370 [ 280.714365] block_ioctl+0xde/0x120 [ 280.718006] ? blkdev_fallocate+0x3b0/0x3b0 [ 280.722320] do_vfs_ioctl+0x7b9/0x1070 [ 280.726217] ? selinux_file_mprotect+0x5d0/0x5d0 [ 280.730975] ? lock_downgrade+0x6e0/0x6e0 [ 280.735126] ? ioctl_preallocate+0x1c0/0x1c0 [ 280.739553] ? __fget+0x237/0x370 [ 280.743006] ? security_file_ioctl+0x8f/0xc0 [ 280.747427] SyS_ioctl+0x8f/0xc0 [ 280.750793] ? do_vfs_ioctl+0x1070/0x1070 [ 280.755031] do_syscall_64+0x1eb/0x630 [ 280.758913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.763754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 280.768928] RIP: 0033:0x458a97 [ 280.772108] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.779815] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 280.787091] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 15:37:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = geteuid() setresuid(r2, 0x0, 0x0) 15:37:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 280.794366] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 280.801636] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 280.808909] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 280.822739] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 280.829091] EXT4-fs (sda1): can't enable nombcache during remount 15:37:05 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x7}) 15:37:06 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x6, 0x200000) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140)=0x3e, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0x0, 0x2}, 0x14) 15:37:06 executing program 3 (fault-call:2 fault-nth:22): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:06 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getrusage(0x1, &(0x7f0000000280)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x400640, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000004c0)={0x34, 0x0, &(0x7f0000000480)}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000100)={0x31bd, 0x2, 0xa, 0xfffffffffffffd22, 0x4, 0x2, 0x5, 0xffffffff, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000340)={r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x9, 0x9}, &(0x7f0000000400)=0x90) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) write$binfmt_aout(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 281.171639] FAULT_INJECTION: forcing a failure. [ 281.171639] name failslab, interval 1, probability 0, space 0, times 0 [ 281.183433] CPU: 0 PID: 13605 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 281.190470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.199836] Call Trace: [ 281.202428] dump_stack+0x138/0x19c [ 281.206062] should_fail.cold+0x10f/0x159 [ 281.210200] should_failslab+0xdb/0x130 [ 281.214158] __kmalloc+0x2f3/0x7a0 [ 281.217714] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 281.223353] ? kobject_uevent_env+0x2fa/0xc41 [ 281.227853] ? rcu_read_lock_sched_held+0x110/0x130 [ 281.232870] ? kobject_get_path+0xbb/0x1a0 [ 281.238148] kobject_get_path+0xbb/0x1a0 [ 281.242294] ? devm_device_remove_groups+0x50/0x50 [ 281.247316] kobject_uevent_env+0x31e/0xc41 [ 281.251709] ? internal_create_group+0x4a0/0x7b0 [ 281.256457] kobject_uevent+0x20/0x26 [ 281.260254] lo_ioctl+0x11d3/0x1c70 [ 281.263884] ? loop_probe+0x160/0x160 [ 281.267685] blkdev_ioctl+0x983/0x1880 [ 281.271591] ? blkpg_ioctl+0x980/0x980 [ 281.275471] ? __might_sleep+0x93/0xb0 [ 281.279355] ? __fget+0x210/0x370 [ 281.282808] block_ioctl+0xde/0x120 [ 281.286429] ? blkdev_fallocate+0x3b0/0x3b0 [ 281.290739] do_vfs_ioctl+0x7b9/0x1070 [ 281.294708] ? selinux_file_mprotect+0x5d0/0x5d0 [ 281.299557] ? lock_downgrade+0x6e0/0x6e0 [ 281.303709] ? ioctl_preallocate+0x1c0/0x1c0 [ 281.308141] ? __fget+0x237/0x370 [ 281.311594] ? security_file_ioctl+0x8f/0xc0 [ 281.316085] SyS_ioctl+0x8f/0xc0 [ 281.319437] ? do_vfs_ioctl+0x1070/0x1070 [ 281.323586] do_syscall_64+0x1eb/0x630 [ 281.327490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.332326] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 281.337496] RIP: 0033:0x458a97 [ 281.340670] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.348374] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 281.355645] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 281.362905] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 281.370169] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 281.377445] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 281.390745] EXT4-fs (sda1): can't enable nombcache during remount 15:37:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x33e, 0x200007ff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xa8, r3, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4c00}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x48, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffced3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x8c, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x0, [0x9c00, 0x0, 0xa8, 0x0, 0x8400000000000000]}}, 0x20) 15:37:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000540)={{0x0, @addr=0xfffffffffffffffd}, "2322e79af1872b69bdce230851ffb669057185ba820d7a5315cbe5b646702724", 0x2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) geteuid() getresgid(&(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x0, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000440)={0x83a3, 0x1f, 0xff, 0x8c1, 0x5, 0xfffffffffffffffe, 0x3, 0xf0, 0x7f, 0x85}) ioctl$TIOCNXCL(r5, 0x540d) fsetxattr$system_posix_acl(r5, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x7}, [{0x2, 0x7, r2}], {0x4, 0x5}, [{0x8, 0x5, r4}], {0x10, 0x4}, {0x20, 0x7}}, 0x34, 0x1) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) getgroups(0x3, &(0x7f00000003c0)=[r3, r4, r6]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:08 executing program 3 (fault-call:2 fault-nth:23): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:08 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x3f, @mcast1, 0xcb86}, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @remote}, 0x8000000000000}, @in6={0xa, 0x4e21, 0xffffffffffffff24, @dev={0xfe, 0x80, [], 0x18}, 0x4}, @in={0x2, 0x4e23, @rand_addr=0xffffffffffffffc0}, @in={0x2, 0x4e21, @remote}], 0x74) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 283.622485] FAULT_INJECTION: forcing a failure. [ 283.622485] name failslab, interval 1, probability 0, space 0, times 0 [ 283.643827] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 283.653487] CPU: 0 PID: 13628 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 283.660536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.669895] Call Trace: [ 283.672491] dump_stack+0x138/0x19c [ 283.676145] should_fail.cold+0x10f/0x159 [ 283.680292] should_failslab+0xdb/0x130 [ 283.684275] kmem_cache_alloc_node_trace+0x283/0x770 [ 283.689367] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 283.694806] __kmalloc_node_track_caller+0x3d/0x80 [ 283.699724] __kmalloc_reserve.isra.0+0x40/0xe0 [ 283.704376] __alloc_skb+0xcf/0x500 [ 283.707990] ? skb_scrub_packet+0x4b0/0x4b0 [ 283.712309] ? netlink_has_listeners+0x20a/0x330 [ 283.717050] kobject_uevent_env+0x74c/0xc41 [ 283.721361] kobject_uevent+0x20/0x26 [ 283.725144] lo_ioctl+0x11d3/0x1c70 [ 283.728753] ? loop_probe+0x160/0x160 [ 283.732540] blkdev_ioctl+0x983/0x1880 [ 283.736432] ? blkpg_ioctl+0x980/0x980 [ 283.740325] ? __might_sleep+0x93/0xb0 [ 283.744197] ? __fget+0x210/0x370 [ 283.747635] block_ioctl+0xde/0x120 [ 283.751243] ? blkdev_fallocate+0x3b0/0x3b0 [ 283.755546] do_vfs_ioctl+0x7b9/0x1070 [ 283.759416] ? selinux_file_mprotect+0x5d0/0x5d0 [ 283.764164] ? lock_downgrade+0x6e0/0x6e0 [ 283.768295] ? ioctl_preallocate+0x1c0/0x1c0 [ 283.772689] ? __fget+0x237/0x370 [ 283.776143] ? security_file_ioctl+0x8f/0xc0 [ 283.780536] SyS_ioctl+0x8f/0xc0 [ 283.783885] ? do_vfs_ioctl+0x1070/0x1070 [ 283.788027] do_syscall_64+0x1eb/0x630 [ 283.791896] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.796727] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 283.801917] RIP: 0033:0x458a97 [ 283.805091] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.812781] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 15:37:08 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x40, 0x40) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000016c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYPTR=&(0x7f0000001600)=ANY=[@ANYPTR64], @ANYBLOB="2b88542450cf36ac71c7837bd3a9bbe2c0dcc6c6d4b60534429c6667ad7d34b820e302dafa10ae16f2cfb9f4c7db769858392da0874c73da351ab3e7495f8937205cb80aac9b660b4010b9fc3791c1df354b358688e47085f1cdd8470d23cf865995576eb82f1d8785f1c8fda7449ba7fcb47c86e83e455f79084b96e579ea69ae67bd85413354cf638a54602e02cc9ae1119d579f3458a9f4f81a1690ce7b0ed98a6ed909845640f8e102f863c826612c61b99c8d2cabd70189ee2b0660d42a5bca0959c0f4effea27e508142dea955560fe1ae49a123b899f8725a2233753778977dfef511e30f50a9bf422d0b691e3198e723e033cd8fbec866e3e992cf4283de1ab7bf74794db98b4d0421984521ea297d21744a3c051553d5642f78bf075ef93c9de0310227c5df2d21a8a6331336550f8ced3bfb33f44f333cf082f6e0e268f2ea5eda6313217915bcedc734e2bcd1abfbe3c69b8e1e79154aaaa363107e9e8c3cdfe1b684669f5e3611a45bafe686fd3e00e46f5a10727615499a41e7ce01551e0446d1a0c528adc7bc3c9b3edc4049f676cf5fc7c88154c12caef478301ff45eab9b5b9d4f34b33d4305c7a66262efc99e5a9501637c99064eca3a81ee50aa9194e8edfa74622aae545bbee057839532cda4df540e18d1a676fc2f7ee23fd1f6fb3839fe02607cbac08df63e4be964fc2c273fa6096a03c9abc1fea866948c960e430eb6cc5a83f5b9a2620d4682bb1cd9d77a64e70dedd747d56d41233ed31619fb73dfa0b03bf16edf608c1b951b6a866b0c3257838bc4d3796c0e78337ebffe8f3704dde3001f580da6dd99a46190bfe50992e765ee58680382606b11f5fcca19720d56a1f5e8f4668624ed456461f3e516f821cc070bb3465c7c93e960f74eaffb6129ca663ef1bf339921fca2dd6a772006bb7910f6264573bb9a944bf691dcdb9fd8827d8c52ee8e29c366a67c431b204c6a287cc061128c213bbad0a7f9bbe11bf22c79414be97237356ad792d0d9486702bff80f273ec56c481508d765227442de6379ffa94397108f8096712a54e22ef71d760c893b9cd0c8bac36e81836838870b636792d2222b09203119c2ba1b0f3fba868a568ecdbed850dc7b10c9d61ce2388f2fb6f12bc35105ec1db73db40dd7120b5e24e317d9239894117c697a5cdb16c5b9cf3d989ea75f565ff2cc1ff5cd44c6eab227502abbb45c20043832c31e346910f1ad246d8ae8336a46071e88602b062461b46de41d29e24592f50cdcd84eeeb0b2e75a92d2a3764e324ae2f0b15d0757c0e79f160213e700b8ce8b4280d135febe5b28308c468f2fbc2d6bf918edcd2830b6fe0cc74fa2855ef9a086ecc95e8d64bcc272a739f8d08c6815f28d6941c2db8cd040388b88dbd8a17a0d90af86b44cc27da1ad910b7fa6c5e93dc33224a6ae9dbbc83083de420c85f13262ab5bb91250e1fe32b88461c81784cbb42111b132cc53107bb4b1c602b0b48f726a68dae5146e24416e82aa20ef1de435b3de052ce56f0d0222fbe855f13cb66d54cdcbeb1b2263c28895c039bb1083c7dfe0717acee5ff3334f565a30083ec4f50397f8c143596ac77d035f77e9c1ad00b0bb1e55fef47ab5dfe4d65b9e7be389c1c7404c140887a399468b09e27645f6312c12a1ef5d2c6506275de6a4ebfd3b17c5f6467c438bb63a3a6e6c26172a76f299e0141bb934182425a482f3ac19a0ed6c18eb6daec512cb0956a74f2c153f4d411d4c138555c0830467f88ca3fbcf4a732810f25f13cda69f353f9a83586a1a6adfabf7e1736f9879d5c8165c2bf41bf77943cc67f2fd600215e2dd25c5ade6bbccc9e711db803607d1caa3377f72d625d9aa403897b5346829f4a18b74f6a7a9019ab81b6394a45e8cc9532fb47aeb38749c4f5fe8d9994253d381f34d4e361560688ecea1d85f71743a1f4988e2a4673439df9ef1f654db71fbe10c3a6d6db900d59d20de788f3e1ffcd9b7f52603bc1a21023404c987ab68a19c7bed143fb41581b9b64210e4a10d12bfb037a241de2ffc2bd9d311cb05541fe5f1b049a9c2e87b49180ed1783a8df198580a7117f1b4b25ae467b75ec896267b79beca0333775fc9af8153371438b7751ca0f41a486f92e540bf8d256639062787b9cc34b68192125280524db21c2de3b2906bc9f640823ef0a5ec62844cbc77b7eb08d69ef2d93498ecfd15c5e1bfeb3be25b86bd0798e111956b0d4ede5319cc1e139f03ee96be43c15032e1e231a57a867d51fc653964c2f4845c9ecadb6d2f52e6c546224048d26826cdca0ab2f6a81df2f9d73a7e8861ea2a1e7c02ec86ca8b9a0db783f97ae75a3d12b5068d44e822d0fb0c1a47c7e147b693214d11cb2d032306668a6111e25634781d0a8c7d034139f0ee75c7a7e5dedb7cf83cce2aec3e25b9697b0e4c1f0d126825356c4eaaf6c3d1a2843bc4b3df8bd4d7b267c33568bb3c2657a3a6c5aa37ac252434926ef38091537f9b6841532aa9c22e2b3dbb02e2203cea5ee011a5c5b4735cedf224c2d1923afd0de5ae08ba8cac1e42351e298305aa1a5c4b6318da12171730688168c864ef7a5087f9aba7f67c6d30ec007b2faca4091b2e36d2287f75475af7158b5886c724e0f5d21167ef78218cc50dd4a0d831a85d1ae8229d0e3266e13789237ede3e99eeb83bcfd838d3acd7d8cc45f4beb691119063f22031e036a614064d61cfd761d432029c8e953cb9a808b9deda7a0c96c2533b85fc152ffa90317fa7fe6b8af2d9c10abbff76dbe08c7fba41874f5156f49659ce3e5ce1325c07a3ded29ced935aad3e0551fdea1126687918648ce278216ca32c6eb9e4c49c2fb85b7c77465769d7bb9f21d314d6b0a08f833344b6e53941aa6247dba6e4dddb656d54c040291628c32370cb089332efb26e6c948aa64615f47f80f50a9da6aa3f8f4174ca5c6540a32a7792b83d92aa175b7bfbec4f3400094ce2cc3f33e25d9cf495781c36ee6bddc4078eb88b6ee2b0d1c00f1869373376245f2a0b96153f55699ea728b3d75dc0c485114aeede991291fa0dd107ce779538e59e2a939813bb27dcb1b64f822325df0f6f004350622219ec65ae7e2027f362df70877e5f129f2730c6df360b9557bfd29ad00b57cf94566d448ddb4bac393189b9818ed7249dbd4b6e79dfef668073dcaa5fddc916833dec9a20d70e32077b1816f477561e8b5a1360972a4002a459cf8ff6f68fc922eb61d2f1b7794c3de0074eed9143c3e1b97421ca8e9d2f2085df3018750fca099b16be3b5e752535d59b960064e1ddd686400f28b67af9f5705458b77260ec02fabb67dc6e033aeaead69cb6ecdff1ada7fccf7b77a7855333f6a4fa5a61ad508f24c2627b26f00193788aeb968d83a58273fb0c165ee54c30b10b385dcb2368d87f48b1850f3a769ae69c387b475ff1db06e988218fb8234d3f620b5b8f989eeac480cad17dc9054e5e74a66b4a65fd8aa0b38a9f63f2396b5247a214335cf7300f626f3c40e3b7e4ce14f1b132e0f303349bde7c83876c016a6d665957a37a926bf20f8b605358a0b5cce105e1df63e4fdb3fbf51910ce961044c09c701fed55c41007698d7b88906eef7a87380f612146ecd5cb8874083d66e32f6a010e1578f8d588bf14e6ed6ed2c072647ca398ec37f451860bb33a97d385b726dd6ae63b0322874a231e26542a492d539219377f6201cf3645ceda1ccdeb73778d6f74e0fca3b4a4c951f79b0f9d99c835d70ab54f64fb78a3fa23826e812e1e763ff20226fea1523c4364cd35bba8eef80ab2aa5d499526c5b264ee3d9ed9cb256ebb6dc6e328cc31990516196e95edb91c8d2452e0b7a93d4b8d1cdd1700154dfb47cd99c91cb1c2ea2698856dddb74398c695d73826368a01b84d0608f3c04a4572fd0105a39cf428b0519f84f0fe7d12cb5754124181be9622581fb600317813f9505aac321c1d1c839e16a7c32fbf1f472e2c934602fed53b6b2b3efad256cc55ce65c4c81177b1b581f6e862069eaebb50d772a56825956aca19229e4b8b0fd1758668db6fc8032e52aec7fd0d3568b4f9abaa5cc74cd767f5e4213fad1cc4f4a95263c9388283aee15bab7cc74b7f28f902b73241c3e9d7d6db180299924f7221638ac370add9cfcf186ee60fec5cc632114fb51c4c21c3b925ed3e09cafaf57e1239a7a851b09d3b8af48bb9bcc306a83d325ad05194ccfbcb13c9079b099bb1f6b56beea94eef0597b8bd8d98e38dbbc895df7ba71f1ad7a3cdbba8eabc6145de88bd3570f09c9ee93e843b203c2079e6993723551775efb39ae070870bfd9fd81ef3bf4ac3d480dcb6114aa7759e9a03d53b961e5677d5d5b8bbf68ca64f46908bcf96f6a6b9f9702cf02db349df8a6a34415b98e3b31fef5d41b9aa19311742d70e05bb7e361086fa38701aeef4df39726df47086993ea76f547d2d22be8919b303da42d577d6e56eb877bc7df64b96283f41bc9ab115c47b158dc550f821ce8b764728b148aa975d7c8f3d2b3bba25c510cf23e861a344cf95b37ad297c954a899e82a7285fdf24330c023027a677fe17ffd673bcd5b16fe7c191931a4035be1e72422492fcc9954ec0eee95bedb16e23e0fd8dcd14d86b5c733bd8af5a4ba69e81bbf0bdc40934cbca3a3ad66ce8f73bf82e7d5deda3db2f9a999dba9e76d0f5568cc5a2d9f4e5988999d142050709fc8310ad7d0b197dcdb5f45ef33386320970e8034ff0d33b3700f8f433c267ec6c25998aef3bff263ed4a633646e0900dc1358449355294e04bcecc656085399468ccabedd655c6973ba094044f4f8b6b9e8b010414bfd66a9f039c6440eb1c5fc602bf7e30a315d0310f44024c5c105e39a703622cb7fe2681b42c80a1df9463f39bec837b51dd2598f78f1ea0b212f124d8c2423b006b41dccb1c3fdc4373a17fe6bf92786a1f31f04d9527bbdccb392a0281161d290683c5b798322ab6ba9e23bb0e0a100ae4abee7e5e60b72265da52dbd9a89be9ac6cc5b39073cd06f47f86343d82b4f23dc15677ae991b88f8372c1143850159ceb96cb67ca083d729c7efa6fd8955e8a31761139338c62715ec7e717fe9dd687a555a7442c39afbce329c3e1dab1ca2caef5c5abbf0991abf3bfc334a354ddcfe86af0d8693b02d79c731264cfa28f8fd7560d2cac9f538a42d53a380707ea31be7e1d31632ae4314b6f1bce178d9fa6882611bb9ebbae176ebe6bca96967b0c0060df459139ca68051a9d28ac6821c054fe03bdd6da7f4a69279bf1a2294025c0595a3e673edda3470f5955f6b70e27fcfcf09fddab8e606878bb2bc27695dd8c7a9accb8b6342050a8ad69d422bd1a42c118b088053e93220e55c6c56a4a758512b1b998a1adce776a986b44b4be0b932204086384d21af9e57a0b6c370b7356e91798a29008b6a6834834d00e018583ad285f820a3efc910ec11e02d55ef3d8f165fb95213ed1943ec574e4127542e3189180f38785565b65e5b49e9ebafff7792fff812cf288e6ecee409290f8b9fe82048e9208b1d3ccf3ffd807a997752761f0de6fb1a75c86c5e5e8b5132168fe73727b2496b0163abc581f1e0861dadd881f06ef60239a839358f6bad296a24ad50712aa0043cb451873e1bc019170c510ebc913df2d1991f5f15acf0786a9987a639b825b37935c30bf6a9741b575d0ed36b7e4ec5c545cc8a3b20fcca8f3e19d6fdbf07e783a03ea19e48c9fa2a0825d03e1bba5ff85d35ccc1dfe7a881ccf158aa3a3a3c2dde0c4f6bc8ff5bb", @ANYPTR64=&(0x7f0000001680)=ANY=[@ANYRES64=0x0, @ANYPTR64=&(0x7f0000001640)=ANY=[@ANYRES32=r0, @ANYPTR, @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYPTR64, @ANYRES16=r1, @ANYRES16=r0, @ANYRESDEC=r1], @ANYPTR64], @ANYRES64=r0]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x4800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xfffffffffffffffb, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}}, &(0x7f0000000340)=0x84) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440)='/dev/snapshot\x00', 0x1, 0x0) [ 283.820035] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 283.827289] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 283.834543] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 283.841794] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x1df, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x20000048c]}) [ 283.876709] EXT4-fs (sda1): can't enable nombcache during remount 15:37:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:09 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x20200, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = socket(0x3, 0x8000b, 0x7f) ioctl$KDSETMODE(r0, 0x4b3a, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'yam0\x00', r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, &(0x7f0000000480)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB="7573e06a71756f74613d2c00"]) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x801, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0xc3, 0xd6b, 0x10000, 0x7fffffff, 0x3, 0x470, "5b602606f199060176ad556926305718e4f26bbf66c60041c5eb88efaf70fcd5050170d92d66582909ace8419f3fe619f8a9c0fcfc813517e9dd33513326b035860c5b0a8d9ce1e09e8adcecba726051809cd77ae5904ad8f1dede621cba8941b0ac9246fe71f6c7a5edb3303bd59a05c59efb091ab70d9840c60cfd705a2cbe1922694687f95dc3d050bcd57d11399793afd4d92d599592f765f0a46eb60fe94c4251ec1a69d918ff2d89364a9f009c0284f4d0eaf9b307d567993f33b9eae6d915c2"}, 0x1db) 15:37:09 executing program 3 (fault-call:2 fault-nth:24): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7a) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000280)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8911, &(0x7f00000001c0)="22d61f83178ae72c89ffa3b60b0108f3123f6fedeb62000000b10000f9000000000000e000000000000000000000000000000000000000000000000000bae8") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:09 executing program 0: [ 284.162968] FAULT_INJECTION: forcing a failure. [ 284.162968] name failslab, interval 1, probability 0, space 0, times 0 [ 284.181904] CPU: 1 PID: 13672 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 284.188993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.198372] Call Trace: [ 284.200961] dump_stack+0x138/0x19c [ 284.204583] should_fail.cold+0x10f/0x159 [ 284.208830] should_failslab+0xdb/0x130 [ 284.212809] kmem_cache_alloc_node_trace+0x283/0x770 [ 284.217901] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 284.223344] __kmalloc_node_track_caller+0x3d/0x80 [ 284.228259] __kmalloc_reserve.isra.0+0x40/0xe0 [ 284.232957] __alloc_skb+0xcf/0x500 [ 284.236564] ? skb_scrub_packet+0x4b0/0x4b0 [ 284.240867] ? netlink_has_listeners+0x20a/0x330 [ 284.245632] kobject_uevent_env+0x74c/0xc41 [ 284.250043] kobject_uevent+0x20/0x26 [ 284.253857] lo_ioctl+0x11d3/0x1c70 [ 284.257472] ? loop_probe+0x160/0x160 [ 284.261258] blkdev_ioctl+0x983/0x1880 [ 284.265127] ? blkpg_ioctl+0x980/0x980 [ 284.268999] ? __might_sleep+0x93/0xb0 [ 284.272873] ? __fget+0x210/0x370 [ 284.276345] block_ioctl+0xde/0x120 [ 284.279958] ? blkdev_fallocate+0x3b0/0x3b0 [ 284.284363] do_vfs_ioctl+0x7b9/0x1070 [ 284.288243] ? selinux_file_mprotect+0x5d0/0x5d0 [ 284.292982] ? lock_downgrade+0x6e0/0x6e0 [ 284.297132] ? ioctl_preallocate+0x1c0/0x1c0 [ 284.301532] ? __fget+0x237/0x370 [ 284.304970] ? security_file_ioctl+0x8f/0xc0 [ 284.309377] SyS_ioctl+0x8f/0xc0 [ 284.315339] ? do_vfs_ioctl+0x1070/0x1070 [ 284.319472] do_syscall_64+0x1eb/0x630 [ 284.323441] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.328269] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 284.333441] RIP: 0033:0x458a97 [ 284.336611] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.344308] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 284.351660] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 15:37:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 284.358931] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 284.366307] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 284.373755] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 284.418267] EXT4-fs (sda1): Unrecognized mount option "usàjquota=" or missing value 15:37:09 executing program 0: 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 15:37:09 executing program 0: [ 284.492695] EXT4-fs (sda1): can't enable nombcache during remount 15:37:09 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000280)=""/209, &(0x7f0000000080)=0xd1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="7573726a71b9a29f263d2c0091b3f280f2c00cdb9855b09582b9f0d5d580a2a6533ee97c27b95403e9e7018a410e5460c114e3e2c3791d7ce975aa19e1804070fe50ae86e254e201498c9acc9c5a075e23b3f4c5"]) 15:37:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:09 executing program 3 (fault-call:2 fault-nth:25): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:09 executing program 0: 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 15:37:09 executing program 0: 15:37:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 15:37:09 executing program 0: 15:37:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 284.824049] FAULT_INJECTION: forcing a failure. [ 284.824049] name failslab, interval 1, probability 0, space 0, times 0 [ 284.851072] CPU: 1 PID: 13731 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 284.858214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.867568] Call Trace: [ 284.870158] dump_stack+0x138/0x19c 15:37:09 executing program 5: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 284.873778] should_fail.cold+0x10f/0x159 [ 284.877916] should_failslab+0xdb/0x130 [ 284.881893] kmem_cache_alloc_node_trace+0x283/0x770 [ 284.886983] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 284.892451] __kmalloc_node_track_caller+0x3d/0x80 [ 284.897373] __kmalloc_reserve.isra.0+0x40/0xe0 [ 284.902026] __alloc_skb+0xcf/0x500 [ 284.905634] ? skb_scrub_packet+0x4b0/0x4b0 [ 284.909957] ? netlink_has_listeners+0x20a/0x330 [ 284.914707] kobject_uevent_env+0x74c/0xc41 [ 284.919029] kobject_uevent+0x20/0x26 [ 284.922820] lo_ioctl+0x11d3/0x1c70 [ 284.926431] ? loop_probe+0x160/0x160 [ 284.930222] blkdev_ioctl+0x983/0x1880 [ 284.934683] ? blkpg_ioctl+0x980/0x980 [ 284.938560] ? __might_sleep+0x93/0xb0 [ 284.942426] ? __fget+0x210/0x370 [ 284.945888] block_ioctl+0xde/0x120 [ 284.949600] ? blkdev_fallocate+0x3b0/0x3b0 [ 284.953906] do_vfs_ioctl+0x7b9/0x1070 [ 284.957797] ? selinux_file_mprotect+0x5d0/0x5d0 [ 284.962541] ? lock_downgrade+0x6e0/0x6e0 [ 284.966701] ? ioctl_preallocate+0x1c0/0x1c0 [ 284.971107] ? __fget+0x237/0x370 [ 284.974567] ? security_file_ioctl+0x8f/0xc0 [ 284.978962] SyS_ioctl+0x8f/0xc0 [ 284.982312] ? do_vfs_ioctl+0x1070/0x1070 [ 284.986448] do_syscall_64+0x1eb/0x630 [ 284.990330] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.995183] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.000525] RIP: 0033:0x458a97 [ 285.003694] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.011526] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 285.018785] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 285.026147] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 285.033434] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 285.040695] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 285.050675] EXT4-fs (sda1): can't enable nombcache during remount 15:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:10 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 285.112168] EXT4-fs (sda1): Unrecognized mount option "usrjq¹¢Ÿ&=" or missing value [ 285.288293] EXT4-fs (sda1): Unrecognized mount option "usrjq¹¢Ÿ&=" or missing value 15:37:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x414802, 0x0) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000440), &(0x7f0000000480)=0x4) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000004c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000600)=0xe8) accept4$inet(r1, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10, 0x800) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={r4, r5, r6}, 0xc) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000280)) ioctl$TUNSETLINK(r2, 0x400454cd, 0x33c) 15:37:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000000c0)=""/18) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000140)={0xe2dd, 0x0, 0x10001, 0x800000000000009}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}) 15:37:10 executing program 3 (fault-call:2 fault-nth:26): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 15:37:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:10 executing program 0: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) [ 285.387114] FAULT_INJECTION: forcing a failure. [ 285.387114] name failslab, interval 1, probability 0, space 0, times 0 [ 285.399734] CPU: 1 PID: 13784 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 285.406786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.416234] Call Trace: [ 285.418822] dump_stack+0x138/0x19c [ 285.422445] should_fail.cold+0x10f/0x159 [ 285.426605] should_failslab+0xdb/0x130 [ 285.430595] kmem_cache_alloc_node+0x28a/0x780 15:37:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 285.435197] __alloc_skb+0x9c/0x500 [ 285.438846] ? skb_scrub_packet+0x4b0/0x4b0 [ 285.443167] ? netlink_has_listeners+0x20a/0x330 [ 285.447926] kobject_uevent_env+0x74c/0xc41 [ 285.452254] kobject_uevent+0x20/0x26 [ 285.456085] lo_ioctl+0x11d3/0x1c70 [ 285.459869] ? loop_probe+0x160/0x160 [ 285.463687] blkdev_ioctl+0x983/0x1880 [ 285.467571] ? blkpg_ioctl+0x980/0x980 [ 285.471925] ? __might_sleep+0x93/0xb0 [ 285.475813] ? __fget+0x210/0x370 [ 285.479274] block_ioctl+0xde/0x120 [ 285.482887] ? blkdev_fallocate+0x3b0/0x3b0 [ 285.487191] do_vfs_ioctl+0x7b9/0x1070 [ 285.491062] ? selinux_file_mprotect+0x5d0/0x5d0 [ 285.495800] ? lock_downgrade+0x6e0/0x6e0 [ 285.499957] ? ioctl_preallocate+0x1c0/0x1c0 [ 285.504355] ? __fget+0x237/0x370 [ 285.507875] ? security_file_ioctl+0x8f/0xc0 [ 285.512293] SyS_ioctl+0x8f/0xc0 [ 285.515670] ? do_vfs_ioctl+0x1070/0x1070 [ 285.519816] do_syscall_64+0x1eb/0x630 [ 285.523687] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.528538] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 285.534822] RIP: 0033:0x458a97 [ 285.537998] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 285.545691] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 285.552952] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 285.560218] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 285.567499] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 285.574765] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000280)={"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"}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000700)=&(0x7f00000001c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) [ 285.584360] EXT4-fs (sda1): can't enable nombcache during remount 15:37:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x1df, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x200000486]}) 15:37:10 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:10 executing program 3 (fault-call:2 fault-nth:27): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:10 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000280)={r2, 0x401, 0x1}, &(0x7f00000002c0)={'enc=', 'pkcs1', ' hash=', {'cmac(des3_ede)\x00'}}, &(0x7f0000000340)="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", &(0x7f0000001340)=""/155) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="7573726a71756f74613d2d00d4305dcba7c8ef6f71b453dee5fc4a3577051b05ba3280e107724a3d80b8c5648fc8b783728d6197e110fca77df2febac18182e3bb68fdee6a762d8c86d0690d7c5b4da0d3d6a1c5d1ba51a327b20095f51e90f30645be5ae56e53ca0ebfba57ad0b7364a25ca23c7c164dffdffad085a10f5284d362daf5cbc912a56c3600edd04a1bd47c327fee6ee2585c192460041e"]) 15:37:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 285.941333] FAULT_INJECTION: forcing a failure. [ 285.941333] name failslab, interval 1, probability 0, space 0, times 0 [ 285.959962] CPU: 1 PID: 13833 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 285.967021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.976483] Call Trace: [ 285.979154] dump_stack+0x138/0x19c [ 285.982780] should_fail.cold+0x10f/0x159 [ 285.986923] should_failslab+0xdb/0x130 [ 285.990925] kmem_cache_alloc_node+0x28a/0x780 [ 285.995499] __alloc_skb+0x9c/0x500 [ 285.999106] ? skb_scrub_packet+0x4b0/0x4b0 [ 286.003412] ? netlink_has_listeners+0x20a/0x330 [ 286.008159] kobject_uevent_env+0x74c/0xc41 [ 286.012475] kobject_uevent+0x20/0x26 [ 286.016284] lo_ioctl+0x11d3/0x1c70 [ 286.019901] ? loop_probe+0x160/0x160 [ 286.023689] blkdev_ioctl+0x983/0x1880 [ 286.027568] ? blkpg_ioctl+0x980/0x980 [ 286.031458] ? __might_sleep+0x93/0xb0 [ 286.035327] ? __fget+0x210/0x370 [ 286.038766] block_ioctl+0xde/0x120 [ 286.042374] ? blkdev_fallocate+0x3b0/0x3b0 [ 286.046692] do_vfs_ioctl+0x7b9/0x1070 [ 286.050565] ? selinux_file_mprotect+0x5d0/0x5d0 [ 286.055302] ? lock_downgrade+0x6e0/0x6e0 [ 286.059451] ? ioctl_preallocate+0x1c0/0x1c0 [ 286.063848] ? __fget+0x237/0x370 [ 286.067302] ? security_file_ioctl+0x8f/0xc0 [ 286.071693] SyS_ioctl+0x8f/0xc0 [ 286.075040] ? do_vfs_ioctl+0x1070/0x1070 [ 286.079173] do_syscall_64+0x1eb/0x630 [ 286.083042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.087869] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.093039] RIP: 0033:0x458a97 [ 286.096214] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.103917] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 286.111453] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 286.118912] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 286.126179] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 286.133445] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x501602, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000bc0)={0x6, 0x70, 0x8, 0x9, 0x3, 0xbb, 0x0, 0x3, 0x400, 0x4, 0x80, 0x8, 0xffffffffffff0b35, 0x0, 0x1, 0x81, 0x9, 0x4, 0x0, 0x6, 0x8000, 0x4, 0x4, 0xc0c3, 0x7, 0x0, 0xfffffffffffffff8, 0x5, 0x5, 0x100000001, 0x80000000, 0xfffffffffffffff8, 0xfffffffffffff7df, 0x7, 0x5, 0x100000000, 0x100, 0x7, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000b80), 0x2}, 0x10004, 0x80, 0x8, 0x9, 0x1000, 0x5, 0x1}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES32=r0, @ANYRES64=r0]) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000c40)={0xb2a0, 0x8, [0x8000, 0xffffffff80000000]}) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/1846], 0x736) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000280)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10040) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$cec(&(0x7f0000000a80)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000ac0)={0x7, 0x0, [], {0x0, @reserved}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000240), &(0x7f0000000a40)=0x4) 15:37:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffff80087601, 0x0) [ 286.171962] EXT4-fs (sda1): can't enable nombcache during remount 15:37:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:11 executing program 3 (fault-call:2 fault-nth:28): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:11 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8) [ 286.256932] EXT4-fs (sda1): journaled quota format not specified 15:37:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) socketpair(0x6, 0x2, 0x40, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000340)={0x30, "6d41e1db2c6c5e8cba45c1837619948e526bef9b7a74f3b0cbcc16aaaebf844df07bc1083bc492af127dafee77ba466c8caf91fe153ba3552083afe2e79ab373f26a03022f0e9f91e71ec2ea4a56f45dbc122e4168e491dc3540af3a1abaae902b7d766a3578b674de8ae7f90b0279e5071125c1c1efe92ef651f88be271bb9c"}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000280)={0xaa, "a3b78f6533625e6a768598342c652490b016afa7ba9814d321b7bd884ad8858e", 0x5, 0x40, 0x5, 0x0, 0x4, 0x2, 0x9, 0x80000000}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) write$FUSE_POLL(r4, &(0x7f0000000100)={0x18, 0x0, 0x5, {0x9}}, 0x18) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x8ea, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x2000, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x408100, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000240)=0x1004000000001) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x800000000}, 0x28, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x6000) [ 286.441215] FAULT_INJECTION: forcing a failure. [ 286.441215] name failslab, interval 1, probability 0, space 0, times 0 [ 286.452993] CPU: 0 PID: 13875 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 286.460368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.469848] Call Trace: [ 286.472448] dump_stack+0x138/0x19c [ 286.476075] should_fail.cold+0x10f/0x159 [ 286.480229] should_failslab+0xdb/0x130 [ 286.484216] kmem_cache_alloc_node_trace+0x283/0x770 [ 286.489392] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 286.494878] __kmalloc_node_track_caller+0x3d/0x80 [ 286.499813] __kmalloc_reserve.isra.0+0x40/0xe0 [ 286.504490] __alloc_skb+0xcf/0x500 [ 286.508133] ? skb_scrub_packet+0x4b0/0x4b0 [ 286.512477] ? netlink_has_listeners+0x20a/0x330 [ 286.517226] kobject_uevent_env+0x74c/0xc41 [ 286.521558] kobject_uevent+0x20/0x26 [ 286.525361] lo_ioctl+0x11d3/0x1c70 [ 286.528982] ? loop_probe+0x160/0x160 [ 286.532781] blkdev_ioctl+0x983/0x1880 [ 286.536651] ? blkpg_ioctl+0x980/0x980 [ 286.540541] ? __might_sleep+0x93/0xb0 [ 286.544423] ? __fget+0x210/0x370 [ 286.547893] block_ioctl+0xde/0x120 [ 286.551506] ? blkdev_fallocate+0x3b0/0x3b0 [ 286.555812] do_vfs_ioctl+0x7b9/0x1070 [ 286.559692] ? selinux_file_mprotect+0x5d0/0x5d0 [ 286.564451] ? lock_downgrade+0x6e0/0x6e0 [ 286.568594] ? ioctl_preallocate+0x1c0/0x1c0 [ 286.573077] ? __fget+0x237/0x370 [ 286.576537] ? security_file_ioctl+0x8f/0xc0 [ 286.580949] SyS_ioctl+0x8f/0xc0 [ 286.584322] ? do_vfs_ioctl+0x1070/0x1070 [ 286.588471] do_syscall_64+0x1eb/0x630 [ 286.592348] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.597706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 286.602905] RIP: 0033:0x458a97 [ 286.606086] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.613778] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 286.621037] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 286.628307] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 286.635571] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 286.642837] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:13 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/144, &(0x7f0000000040)=0x90) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x62, 0x1, 0x8, "4afd17b02abca76e75e3dc0914ae10f3", "8accc3deb27d30f3048cc987ea8c7e4b96d76f17866de9b25a0401f201bcaa7e7403cf00ec38fdb01c0a9e5e58964d18ca8968d2d2da9ae308f60b97fc0f639268a00f4e6afe38550baad6ce51"}, 0x62, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0xffffff7ffffffffc) 15:37:13 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5817}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x20000081) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000280)={0x9, 0x4, 0xaae, 0x8, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x8, 0x4, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}}, 0x0) 15:37:13 executing program 3 (fault-call:2 fault-nth:29): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 288.923371] IPVS: length: 144 != 8 15:37:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x00', 0x4000}) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x6, 0x7, 0x3e}, &(0x7f0000000200)=0x98) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0xff}, 0x8) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) ioctl$NBD_DISCONNECT(r0, 0xab08) 15:37:14 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 288.952559] FAULT_INJECTION: forcing a failure. [ 288.952559] name failslab, interval 1, probability 0, space 0, times 0 [ 288.971916] IPVS: length: 144 != 8 [ 288.979674] CPU: 0 PID: 13905 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 288.986730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.996099] Call Trace: [ 288.998788] dump_stack+0x138/0x19c [ 289.002430] should_fail.cold+0x10f/0x159 [ 289.006590] should_failslab+0xdb/0x130 [ 289.010580] kmem_cache_alloc_node_trace+0x283/0x770 [ 289.015692] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 289.021153] __kmalloc_node_track_caller+0x3d/0x80 [ 289.026096] __kmalloc_reserve.isra.0+0x40/0xe0 [ 289.030770] __alloc_skb+0xcf/0x500 [ 289.034393] ? skb_scrub_packet+0x4b0/0x4b0 [ 289.038713] ? netlink_has_listeners+0x20a/0x330 [ 289.043580] kobject_uevent_env+0x74c/0xc41 [ 289.047910] kobject_uevent+0x20/0x26 [ 289.051713] lo_ioctl+0x11d3/0x1c70 [ 289.055340] ? loop_probe+0x160/0x160 [ 289.059142] blkdev_ioctl+0x983/0x1880 [ 289.063027] ? blkpg_ioctl+0x980/0x980 [ 289.066924] ? __might_sleep+0x93/0xb0 [ 289.070810] ? __fget+0x210/0x370 [ 289.074265] block_ioctl+0xde/0x120 [ 289.077892] ? blkdev_fallocate+0x3b0/0x3b0 [ 289.082208] do_vfs_ioctl+0x7b9/0x1070 [ 289.086103] ? selinux_file_mprotect+0x5d0/0x5d0 [ 289.090860] ? lock_downgrade+0x6e0/0x6e0 [ 289.095009] ? ioctl_preallocate+0x1c0/0x1c0 [ 289.099417] ? __fget+0x237/0x370 [ 289.102890] ? security_file_ioctl+0x8f/0xc0 [ 289.107299] SyS_ioctl+0x8f/0xc0 [ 289.110661] ? do_vfs_ioctl+0x1070/0x1070 [ 289.114812] do_syscall_64+0x1eb/0x630 [ 289.118697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.123551] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.128736] RIP: 0033:0x458a97 [ 289.131924] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.139632] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 289.146899] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 289.154172] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 289.161444] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 289.168713] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 289.188956] EXT4-fs: 2 callbacks suppressed [ 289.188963] EXT4-fs (sda1): can't enable nombcache during remount 15:37:14 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000100)=0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:14 executing program 3 (fault-call:2 fault-nth:30): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:14 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") timer_create(0x2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}}, &(0x7f0000d43000)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) [ 289.320240] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 289.509566] FAULT_INJECTION: forcing a failure. [ 289.509566] name failslab, interval 1, probability 0, space 0, times 0 [ 289.528318] CPU: 0 PID: 13953 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 289.535376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.544737] Call Trace: [ 289.547336] dump_stack+0x138/0x19c [ 289.551068] should_fail.cold+0x10f/0x159 [ 289.555223] should_failslab+0xdb/0x130 [ 289.559212] kmem_cache_alloc_node+0x28a/0x780 [ 289.563813] __alloc_skb+0x9c/0x500 [ 289.567438] ? skb_scrub_packet+0x4b0/0x4b0 [ 289.571760] ? netlink_has_listeners+0x20a/0x330 [ 289.576515] kobject_uevent_env+0x74c/0xc41 [ 289.580841] kobject_uevent+0x20/0x26 [ 289.584637] lo_ioctl+0x11d3/0x1c70 [ 289.588262] ? loop_probe+0x160/0x160 [ 289.592070] blkdev_ioctl+0x983/0x1880 [ 289.595954] ? blkpg_ioctl+0x980/0x980 [ 289.599847] ? __might_sleep+0x93/0xb0 [ 289.603732] ? __fget+0x210/0x370 [ 289.607188] block_ioctl+0xde/0x120 [ 289.610814] ? blkdev_fallocate+0x3b0/0x3b0 [ 289.615131] do_vfs_ioctl+0x7b9/0x1070 [ 289.619015] ? selinux_file_mprotect+0x5d0/0x5d0 [ 289.623765] ? lock_downgrade+0x6e0/0x6e0 [ 289.627912] ? ioctl_preallocate+0x1c0/0x1c0 [ 289.632322] ? __fget+0x237/0x370 [ 289.635779] ? security_file_ioctl+0x8f/0xc0 [ 289.640888] SyS_ioctl+0x8f/0xc0 [ 289.644261] ? do_vfs_ioctl+0x1070/0x1070 [ 289.648409] do_syscall_64+0x1eb/0x630 [ 289.652297] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 289.657144] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 289.662337] RIP: 0033:0x458a97 [ 289.665524] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.673430] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 289.680699] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 289.687979] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 289.695256] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 289.702528] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 289.773710] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 289.779649] EXT4-fs (sda1): can't enable nombcache during remount 15:37:16 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:16 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4, &(0x7f0000000100)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x822, 0x280) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000001c0)={0x0, 0x18, [0x0, 0x8, 0x9, 0x1, 0x80000001, 0xe05]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:16 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000100)=0x3) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:16 executing program 2: mkdir(0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x208000, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0x9, {0x400, 0x2, 0x3, 0x6fb3}}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000100)=ANY=[@ANYBLOB="7573726a71756f74613d2c6d6502000000652c016f6e745f61707072616973652c6673636f6e746578743d756e636f6e66696e65645f752c61756469742c7063723d30303030303030303030303030303030303030392c6d61736b3d5e4d41595f57524954452c736d61636b66736465663d73656c696e75782647504c2c646f6e745f61707072616973652c7063723d30303030303030303030303030303030303034302c00"]) 15:37:16 executing program 3 (fault-call:2 fault-nth:31): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:17 executing program 2: mkdir(0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:17 executing program 0: ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x60ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x3, 0xfffffffffffffd66) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'erspan0\x00', 0x200}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) mkdirat$cgroup(r2, &(0x7f00000002c0)='syz0\x00', 0x1ff) [ 291.995266] FAULT_INJECTION: forcing a failure. [ 291.995266] name failslab, interval 1, probability 0, space 0, times 0 [ 292.010737] CPU: 1 PID: 13976 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 292.017799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.027299] Call Trace: [ 292.030438] dump_stack+0x138/0x19c [ 292.034068] should_fail.cold+0x10f/0x159 [ 292.038319] should_failslab+0xdb/0x130 [ 292.042284] kmem_cache_alloc_node_trace+0x283/0x770 [ 292.047372] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 292.052814] __kmalloc_node_track_caller+0x3d/0x80 [ 292.057733] __kmalloc_reserve.isra.0+0x40/0xe0 [ 292.062387] __alloc_skb+0xcf/0x500 [ 292.066010] ? skb_scrub_packet+0x4b0/0x4b0 [ 292.070330] ? netlink_has_listeners+0x20a/0x330 [ 292.075079] kobject_uevent_env+0x74c/0xc41 [ 292.079404] kobject_uevent+0x20/0x26 [ 292.083216] lo_ioctl+0x11d3/0x1c70 [ 292.086833] ? loop_probe+0x160/0x160 [ 292.090623] blkdev_ioctl+0x983/0x1880 [ 292.094510] ? blkpg_ioctl+0x980/0x980 [ 292.098385] ? __might_sleep+0x93/0xb0 [ 292.102253] ? __fget+0x210/0x370 [ 292.105688] block_ioctl+0xde/0x120 [ 292.109298] ? blkdev_fallocate+0x3b0/0x3b0 [ 292.113603] do_vfs_ioctl+0x7b9/0x1070 [ 292.117472] ? selinux_file_mprotect+0x5d0/0x5d0 [ 292.122211] ? lock_downgrade+0x6e0/0x6e0 [ 292.126363] ? ioctl_preallocate+0x1c0/0x1c0 [ 292.130773] ? __fget+0x237/0x370 [ 292.134222] ? security_file_ioctl+0x8f/0xc0 [ 292.138614] SyS_ioctl+0x8f/0xc0 [ 292.141971] ? do_vfs_ioctl+0x1070/0x1070 [ 292.146110] do_syscall_64+0x1eb/0x630 [ 292.149980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.154839] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 292.160015] RIP: 0033:0x458a97 [ 292.163195] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.170995] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 292.178280] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 292.185541] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 15:37:17 executing program 5: r0 = semget$private(0x0, 0x4, 0x8) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/192) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) read(r1, &(0x7f0000000280)=""/164, 0xa4) [ 292.192847] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 292.200114] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 292.208513] EXT4-fs (sda1): Unrecognized mount option "me" or missing value [ 292.261520] EXT4-fs (sda1): can't enable nombcache during remount 15:37:17 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0xffffffffffffffff}, 0x30) ptrace$getregset(0x4204, r1, 0x7, &(0x7f0000000240)={&(0x7f0000000140)=""/78, 0x4e}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:17 executing program 2: mkdir(0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 292.351427] EXT4-fs (sda1): Unrecognized mount option "me" or missing value 15:37:17 executing program 3 (fault-call:2 fault-nth:32): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 292.569564] FAULT_INJECTION: forcing a failure. [ 292.569564] name failslab, interval 1, probability 0, space 0, times 0 [ 292.582008] CPU: 0 PID: 14023 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 292.589031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.598375] Call Trace: [ 292.600953] dump_stack+0x138/0x19c [ 292.604569] should_fail.cold+0x10f/0x159 [ 292.608815] should_failslab+0xdb/0x130 [ 292.612777] kmem_cache_alloc_node_trace+0x283/0x770 [ 292.617873] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 292.623315] __kmalloc_node_track_caller+0x3d/0x80 [ 292.628265] __kmalloc_reserve.isra.0+0x40/0xe0 [ 292.632931] __alloc_skb+0xcf/0x500 [ 292.636540] ? skb_scrub_packet+0x4b0/0x4b0 [ 292.640846] ? netlink_has_listeners+0x20a/0x330 [ 292.645607] kobject_uevent_env+0x74c/0xc41 [ 292.649915] kobject_uevent+0x20/0x26 [ 292.653716] lo_ioctl+0x11d3/0x1c70 [ 292.657355] ? loop_probe+0x160/0x160 [ 292.661168] blkdev_ioctl+0x983/0x1880 [ 292.665051] ? blkpg_ioctl+0x980/0x980 [ 292.668924] ? __might_sleep+0x93/0xb0 [ 292.672796] ? __fget+0x210/0x370 [ 292.676234] block_ioctl+0xde/0x120 [ 292.679879] ? blkdev_fallocate+0x3b0/0x3b0 [ 292.684189] do_vfs_ioctl+0x7b9/0x1070 [ 292.688068] ? selinux_file_mprotect+0x5d0/0x5d0 [ 292.692991] ? lock_downgrade+0x6e0/0x6e0 [ 292.697123] ? ioctl_preallocate+0x1c0/0x1c0 [ 292.701510] ? __fget+0x237/0x370 [ 292.704956] ? security_file_ioctl+0x8f/0xc0 [ 292.709346] SyS_ioctl+0x8f/0xc0 [ 292.712779] ? do_vfs_ioctl+0x1070/0x1070 [ 292.716912] do_syscall_64+0x1eb/0x630 [ 292.720779] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 292.725610] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 292.730779] RIP: 0033:0x458a97 [ 292.733968] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.741677] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 292.748933] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 292.756185] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 292.763440] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 292.770702] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 292.779609] EXT4-fs (sda1): can't enable nombcache during remount 15:37:20 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:20 executing program 4: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) setxattr$security_selinux(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='security.selinux\x00', &(0x7f00000007c0)='system_u:object_r:dhcpd_initrc_exec_t:s0\x00', 0x29, 0x3) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) r1 = getuid() syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000140)='./file1\x00', 0xc2, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000180)="cf6b3c1488f8f2590d932735dd1a175f8a8b3e81ce7ff23ee8271610d3bdb586e493395e3931cab10d6d3575a6937efcbd44f7fae5c3fea9162e0a9c365b6d34e8d8ba853741bd03a2f8a4c170e638f99302a5ec3a4f853dbe49b40b8e1218ec80823fbbf718f8410de5716e61a26438b17a10be72e52a68c5", 0x79, 0x100000000}, {&(0x7f0000000200)="b1e49b73245ee18750677179e75cacdf74239db855c1ddebe82675071abab0aaadbb37d8c35065238cc0d882d01cb6c443bb9ada8672aa5122ac00e3f0919388ab843b8bfb96e71b0cdbfcac2391c55f323794d258f28b15516341302aa5ee5d917483ab7f00b0b74b01a11849c1561de579340d5d0a19633903f7f8fa14f9a045814fa5955c95bbb833d5fcb94cebf6d3cbac23b2d9c2466570ffd925205eb92b493ee3e3816ff46deb4130885c4ed302ab13940fb0ae58a2ad7bc198392f3d26ff6d30007f62dc93993f3e3411ca0ead823dbbb44b6539d9b5bd18642af84ec3", 0xe1, 0x2}, {&(0x7f0000000300)="b32b381a98e8558eff9a0998ebcee3d3b72bc005ca1639476f2f4e66ec6f2720f9517a8306ccea798fbd57ff1680001e0366b57159e22c31808476218cb79bd3b6b2391b7450bb9e7bf8d70b55f6d053926f18359bf47dbbe225fc1c9f0f13c3b5b9f81c21ef7efd0699e6448a819dc2f3b927fe50a4e3360825145130d230593b8641bc2a031278f5372a247a20d480baf8511b28b9c6283b99f515ffb3bd497ba7486eaa027f0ddc80cef1", 0xac, 0xad8}, {&(0x7f00000003c0)="2067ca249ce3fd52d92329f8b5c556664148c500a6301ef846260d0ecaff2a35e5b54d4d0a83624ee62c3eaf9f656de7cd539be569fb35c641cc4e8b6fe1b7047c0623357b3014c2de8c6fb7cfd577eeb536d091a6615cf31551bd87e8eea07d7c8fed38ccd34af93b19495dbe3e02875b314155f34c10039e31bc2face7b8efa4a4ffc6ff1402b878a4df734ded6bede4d21ebbd3fc5e4a0050de44c45107f4d3fa597310cf4d62db41c2f3117c6e4d6e8e7a550b26856523f5ea6fb1044c43d030e2a10d0aa26c08ed2a65330f5afc845859a6dd69130ebd197fb08e5b77daadc0342c0fed75e0436141927a2138df7e09e4d6737b", 0xf6, 0x8}], 0x800000, &(0x7f0000000680)=ANY=[@ANYBLOB="6e6f6461746173756d2c636f6d70726573ffff0000000000006c696e653d702c737562766f6c69643d3078303034303030303030303030303030352c7569643d", @ANYRESDEC=r0, @ANYBLOB="2c6673757569643d30000072006230392d3279667f2d386535312d77627f7f2d7c7332007b6536772c646f6e745f61707072616973652c666f776e65723e", @ANYRESDEC=r1, @ANYBLOB='y)']) 15:37:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xa000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0xa080, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x5, 0x0, 'client1\x00', 0x4, "40a03588c1229f61", "64a1ec5c439ac8dc41f12fd387190820a73a68a4cb0280e4dedc7290c6627f24", 0xffffffffffff698c, 0xa7}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:20 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\xac\x01\x00', 0x4) ftruncate(r0, 0x1000000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x2, 0x4000) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x5, 0x4, [], &(0x7f0000000040)=0x8000}) sendfile(r1, r0, 0x0, 0xeffffdef) 15:37:20 executing program 3 (fault-call:2 fault-nth:33): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 15:37:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 295.006296] FAULT_INJECTION: forcing a failure. [ 295.006296] name failslab, interval 1, probability 0, space 0, times 0 [ 295.025598] CPU: 1 PID: 14043 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 295.032687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.042060] Call Trace: [ 295.044658] dump_stack+0x138/0x19c [ 295.048276] should_fail.cold+0x10f/0x159 [ 295.052419] should_failslab+0xdb/0x130 [ 295.056382] kmem_cache_alloc_node+0x28a/0x780 [ 295.060960] __alloc_skb+0x9c/0x500 [ 295.064571] ? skb_scrub_packet+0x4b0/0x4b0 [ 295.068880] ? netlink_has_listeners+0x20a/0x330 [ 295.073800] kobject_uevent_env+0x74c/0xc41 [ 295.078111] kobject_uevent+0x20/0x26 [ 295.081918] lo_ioctl+0x11d3/0x1c70 [ 295.085533] ? loop_probe+0x160/0x160 [ 295.089317] blkdev_ioctl+0x983/0x1880 [ 295.093276] ? blkpg_ioctl+0x980/0x980 [ 295.097160] ? __might_sleep+0x93/0xb0 [ 295.101035] ? __fget+0x210/0x370 [ 295.104499] block_ioctl+0xde/0x120 [ 295.108113] ? blkdev_fallocate+0x3b0/0x3b0 [ 295.112426] do_vfs_ioctl+0x7b9/0x1070 [ 295.116299] ? selinux_file_mprotect+0x5d0/0x5d0 [ 295.121053] ? lock_downgrade+0x6e0/0x6e0 [ 295.125188] ? ioctl_preallocate+0x1c0/0x1c0 [ 295.129580] ? __fget+0x237/0x370 [ 295.133018] ? security_file_ioctl+0x8f/0xc0 [ 295.137412] SyS_ioctl+0x8f/0xc0 [ 295.140759] ? do_vfs_ioctl+0x1070/0x1070 [ 295.144888] do_syscall_64+0x1eb/0x630 [ 295.148762] ? trace_hardirqs_off_thunk+0x1a/0x1c 15:37:20 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 295.153598] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 295.158769] RIP: 0033:0x458a97 [ 295.161941] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.169632] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 295.176887] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 295.184668] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 295.191937] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 295.199190] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) r0 = geteuid() r1 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getgroups(0xa, &(0x7f0000000680)=[0xee00, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee00, 0xee01, 0xee01]) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) fstat(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000840)=[0xffffffffffffffff]) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x7}, [{0x2, 0x7, r0}, {0x2, 0x4, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x2, r4}], {0x4, 0x2}, [{0x8, 0x6, r5}, {0x8, 0x1, r6}, {0x8, 0x5, r7}, {0x8, 0x0, r8}, {0x8, 0x7, r9}, {0x8, 0x1, r10}, {0x8, 0x2, r11}, {0x8, 0x7, r12}, {0x8, 0x1, r13}], {0x10, 0x7}, {0x20, 0x2}}, 0x94, 0x2) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000140)={0x5, 0x2, [{0x5, 0x0, 0x3}, {0x2, 0x0, 0x7ff}, {0x81, 0x0, 0x5}, {0x6, 0x0, 0x100000001}, {0x1ff, 0x0, 0x4}]}) 15:37:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = dup(r0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r2, 0x318, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xdd}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0x7}, 0x1c) [ 295.225329] EXT4-fs (sda1): can't enable nombcache during remount 15:37:20 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 295.312597] EXT4-fs (sda1): re-mounted. Opts: 15:37:20 executing program 3 (fault-call:2 fault-nth:34): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x2, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(0x0, 0x3, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) getsockname$unix(r3, &(0x7f0000000680), &(0x7f0000000640)=0x3f) pipe2$9p(&(0x7f0000000100), 0x800) unshare(0x40000000) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000080)={0x0, {0xfffffffffffffff9, 0x1ff, 0x7, 0x6}, {0x80000001, 0x4, 0x0, 0x2}, {0x8, 0x8}}) shmget(0x2, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000004001000000400000000000000000000007fffffff0100000000000000000000000000000000000000000000020000000000bea3af57151eb7000000000000190b00008b09000000000000000000000000b3fd95822a9783768d117ee20f29000000000000000000000000000000002cf050302a10c765a056602a"]) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xb8b9, 0x2) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000001c0)=""/177) 15:37:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:20 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000001c0)=0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 295.506514] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:37:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(0x0, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 295.564263] FAULT_INJECTION: forcing a failure. [ 295.564263] name failslab, interval 1, probability 0, space 0, times 0 [ 295.575825] CPU: 0 PID: 14105 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 295.582858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 295.592213] Call Trace: [ 295.592234] dump_stack+0x138/0x19c [ 295.592255] should_fail.cold+0x10f/0x159 [ 295.592272] should_failslab+0xdb/0x130 [ 295.592284] kmem_cache_alloc_node+0x28a/0x780 15:37:20 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0xfffffffffffffffd) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/220) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 295.592300] __alloc_skb+0x9c/0x500 [ 295.614891] ? skb_scrub_packet+0x4b0/0x4b0 [ 295.619197] ? netlink_has_listeners+0x20a/0x330 [ 295.624079] kobject_uevent_env+0x74c/0xc41 [ 295.628433] kobject_uevent+0x20/0x26 [ 295.632237] lo_ioctl+0x11d3/0x1c70 [ 295.635853] ? loop_probe+0x160/0x160 [ 295.639642] blkdev_ioctl+0x983/0x1880 [ 295.643561] ? blkpg_ioctl+0x980/0x980 [ 295.647438] ? __might_sleep+0x93/0xb0 [ 295.651308] ? __fget+0x210/0x370 [ 295.654748] block_ioctl+0xde/0x120 [ 295.658367] ? blkdev_fallocate+0x3b0/0x3b0 [ 295.662680] do_vfs_ioctl+0x7b9/0x1070 [ 295.666558] ? selinux_file_mprotect+0x5d0/0x5d0 [ 295.671323] ? lock_downgrade+0x6e0/0x6e0 [ 295.675460] ? ioctl_preallocate+0x1c0/0x1c0 [ 295.679880] ? __fget+0x237/0x370 [ 295.683331] ? security_file_ioctl+0x8f/0xc0 [ 295.687724] SyS_ioctl+0x8f/0xc0 [ 295.691127] ? do_vfs_ioctl+0x1070/0x1070 [ 295.695269] do_syscall_64+0x1eb/0x630 [ 295.699140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 295.703974] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 295.709154] RIP: 0033:0x458a97 [ 295.712322] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.720014] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 295.727272] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 295.734614] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 295.741867] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 295.749127] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 295.761416] EXT4-fs (sda1): can't enable nombcache during remount 15:37:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140), 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:20 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140), 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:20 executing program 3 (fault-call:2 fault-nth:35): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140), 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 295.999413] FAULT_INJECTION: forcing a failure. [ 295.999413] name failslab, interval 1, probability 0, space 0, times 0 [ 296.019311] CPU: 0 PID: 14146 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 296.026386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.035749] Call Trace: [ 296.038940] dump_stack+0x138/0x19c [ 296.051382] should_fail.cold+0x10f/0x159 [ 296.055564] should_failslab+0xdb/0x130 [ 296.059544] kmem_cache_alloc_node_trace+0x283/0x770 [ 296.064687] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 296.070126] __kmalloc_node_track_caller+0x3d/0x80 [ 296.075585] __kmalloc_reserve.isra.0+0x40/0xe0 [ 296.080327] __alloc_skb+0xcf/0x500 [ 296.083938] ? skb_scrub_packet+0x4b0/0x4b0 [ 296.088242] ? netlink_has_listeners+0x20a/0x330 [ 296.093005] kobject_uevent_env+0x74c/0xc41 [ 296.097321] kobject_uevent+0x20/0x26 [ 296.101104] lo_ioctl+0x11d3/0x1c70 [ 296.104717] ? loop_probe+0x160/0x160 [ 296.108510] blkdev_ioctl+0x983/0x1880 [ 296.112380] ? blkpg_ioctl+0x980/0x980 [ 296.116252] ? __might_sleep+0x93/0xb0 [ 296.120142] ? __fget+0x210/0x370 [ 296.123583] block_ioctl+0xde/0x120 [ 296.127208] ? blkdev_fallocate+0x3b0/0x3b0 [ 296.131521] do_vfs_ioctl+0x7b9/0x1070 [ 296.136446] ? selinux_file_mprotect+0x5d0/0x5d0 [ 296.141190] ? lock_downgrade+0x6e0/0x6e0 [ 296.145428] ? ioctl_preallocate+0x1c0/0x1c0 [ 296.149936] ? __fget+0x237/0x370 [ 296.153391] ? security_file_ioctl+0x8f/0xc0 [ 296.157798] SyS_ioctl+0x8f/0xc0 [ 296.161155] ? do_vfs_ioctl+0x1070/0x1070 [ 296.165468] do_syscall_64+0x1eb/0x630 [ 296.169431] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.174268] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 296.179461] RIP: 0033:0x458a97 [ 296.182643] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.190421] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 296.197671] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 296.204937] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 296.212369] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 296.219623] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 296.234483] EXT4-fs (sda1): can't enable nombcache during remount [ 296.410695] IPVS: ftp: loaded support on port[0] = 21 15:37:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xa, 0x400000000, 0x3, {0x7, 0xfffffffffffffffe}}) 15:37:21 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x101000) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0xfffffffffffffffe) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) 15:37:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB]) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0xbf, @loopback, 0x4e24, 0x4, 'lc\x00', 0x24, 0x9, 0x43}, 0x2c) 15:37:21 executing program 3 (fault-call:2 fault-nth:36): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:21 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x3}, 0xe) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'erspan0\x00', 0x3ec0}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) [ 296.762555] EXT4-fs (sda1): re-mounted. Opts: 15:37:21 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 296.812697] FAULT_INJECTION: forcing a failure. [ 296.812697] name failslab, interval 1, probability 0, space 0, times 0 [ 296.824746] CPU: 0 PID: 14179 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 296.831791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.841152] Call Trace: [ 296.841173] dump_stack+0x138/0x19c [ 296.841192] should_fail.cold+0x10f/0x159 [ 296.841209] should_failslab+0xdb/0x130 [ 296.841221] kmem_cache_alloc_node_trace+0x283/0x770 [ 296.841235] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 296.841249] __kmalloc_node_track_caller+0x3d/0x80 [ 296.841261] __kmalloc_reserve.isra.0+0x40/0xe0 [ 296.841274] __alloc_skb+0xcf/0x500 [ 296.847653] ? skb_scrub_packet+0x4b0/0x4b0 [ 296.847669] ? netlink_has_listeners+0x20a/0x330 [ 296.847686] kobject_uevent_env+0x74c/0xc41 [ 296.847703] kobject_uevent+0x20/0x26 [ 296.855792] lo_ioctl+0x11d3/0x1c70 [ 296.855807] ? loop_probe+0x160/0x160 [ 296.855821] blkdev_ioctl+0x983/0x1880 [ 296.855833] ? blkpg_ioctl+0x980/0x980 [ 296.866362] ? __might_sleep+0x93/0xb0 [ 296.866373] ? __fget+0x210/0x370 [ 296.866389] block_ioctl+0xde/0x120 [ 296.866401] ? blkdev_fallocate+0x3b0/0x3b0 [ 296.866411] do_vfs_ioctl+0x7b9/0x1070 [ 296.866424] ? selinux_file_mprotect+0x5d0/0x5d0 [ 296.876000] ? lock_downgrade+0x6e0/0x6e0 [ 296.876015] ? ioctl_preallocate+0x1c0/0x1c0 [ 296.876039] ? __fget+0x237/0x370 [ 296.876055] ? security_file_ioctl+0x8f/0xc0 [ 296.883988] SyS_ioctl+0x8f/0xc0 [ 296.883996] ? do_vfs_ioctl+0x1070/0x1070 [ 296.884009] do_syscall_64+0x1eb/0x630 [ 296.884023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 296.884041] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 296.884051] RIP: 0033:0x458a97 [ 296.977121] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.984846] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 296.992110] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 296.999378] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 15:37:22 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x0, 0x0, 0xffffffffffffffff}) unshare(0x40600) truncate(&(0x7f0000000000)='./file0/bus\x00', 0x2) [ 297.006634] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 297.013884] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:22 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) r1 = memfd_create(&(0x7f0000000040)='/devAvhost-vskc_\x00', 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x100000001}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r4, 0x8}, &(0x7f0000000380)=0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000300)=0xfffffffffffffffc) accept4$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80800) 15:37:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x200, 0x0, 0x1f, 0x52c8}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r1, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x7}, 0x8) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 297.062349] EXT4-fs (sda1): can't enable nombcache during remount 15:37:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:22 executing program 3 (fault-call:2 fault-nth:37): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:22 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x8, @dev={0xac, 0x14, 0x14, 0x18}, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x3, 0x3e}, {@local, 0x4e23, 0x4, 0x5, 0x8, 0x12d3}}, 0x44) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0xfffffffffffffffd, 0x0, 0x0, 0x3}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 15:37:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) stat(0xfffffffffffffffe, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x7, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000180)="9c9e682ceafc2778565c7a6f2014da358359d3a638caa436515966b1bfa204817a9ff7b491415b42adfbf5af142fafd57a8093c9026df507672573d845766e9bc37fb288d9a330765eef7e0824e31cdfbabab7c74fa6663f16edff3160cb790ef1b340c3b9f2c8cf61b7aa5e11dddd17c6fa1dec5e246cfdbc51ff7f431f39be215ab6cf98b2f33e", 0x88, 0xf5}, {&(0x7f0000000240)="f8698188a577d113e8f7df077d4c0304e591e7c05bf2736072d7b17a24f23b4efe7956c0d7a34678ae302818c1f97f36fade63fc74d064da4dcb", 0x3a, 0xffffffff}, {&(0x7f0000000280), 0x0, 0x100}, {&(0x7f00000002c0)="669216918e42d86e7a99c5afae21e0ff6961e5055adbc02d9606bb19db419a4a2f6e3735d69bee3895d9", 0x2a, 0x9}, {&(0x7f0000000300)="1117c3c36ea88a698be1edc3764f04e45c54f9f97ccba22e2c143a66e64d2334a3ad9ba8d26b1f8ccba4e0b70f52cd4a6d39747c66ea2a1a06b244b0ca9f7b75138f8ad70cd4cb3c33fb9af7bd59684828a79b8013b83077dcad9570f002faeae1e739625bdf681c9ad21b3ad21004b12d07f130455d3661274b04080fc352a273eb", 0x82, 0x1375}], 0x100000, &(0x7f00000004c0)={[{@user_xattr='user_xattr'}, {@inline_data='inline_data'}, {@nobarrier='nobarrier'}, {@usrjquota={'usrjquota'}}, {@grpquota={'grpquota', 0x3d, 'usrjquota='}}], [{@fowner_gt={'fowner>', r0}}, {@measure='measure'}, {@subj_user={'subj_user'}}, {@subj_type={'subj_type'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}]}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 297.343522] FAULT_INJECTION: forcing a failure. [ 297.343522] name failslab, interval 1, probability 0, space 0, times 0 [ 297.369064] CPU: 0 PID: 14232 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 297.376120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.376125] Call Trace: [ 297.376145] dump_stack+0x138/0x19c 15:37:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x48600) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@loopback}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) writev(r0, &(0x7f00000a8000)=[{&(0x7f0000aef000)="580000001400192300bb4b80040d8c5628060000000004106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) [ 297.376164] should_fail.cold+0x10f/0x159 [ 297.376180] should_failslab+0xdb/0x130 [ 297.391756] kmem_cache_alloc_node_trace+0x283/0x770 [ 297.391772] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 297.391785] __kmalloc_node_track_caller+0x3d/0x80 [ 297.391798] __kmalloc_reserve.isra.0+0x40/0xe0 [ 297.399915] __alloc_skb+0xcf/0x500 [ 297.410485] ? skb_scrub_packet+0x4b0/0x4b0 [ 297.410498] ? netlink_has_listeners+0x20a/0x330 [ 297.410513] kobject_uevent_env+0x74c/0xc41 [ 297.410530] kobject_uevent+0x20/0x26 [ 297.410541] lo_ioctl+0x11d3/0x1c70 [ 297.420139] ? loop_probe+0x160/0x160 [ 297.420157] blkdev_ioctl+0x983/0x1880 [ 297.420170] ? blkpg_ioctl+0x980/0x980 [ 297.420190] ? __might_sleep+0x93/0xb0 [ 297.420200] ? __fget+0x210/0x370 [ 297.420215] block_ioctl+0xde/0x120 [ 297.467687] ? blkdev_fallocate+0x3b0/0x3b0 [ 297.472007] do_vfs_ioctl+0x7b9/0x1070 [ 297.475884] ? selinux_file_mprotect+0x5d0/0x5d0 [ 297.480634] ? lock_downgrade+0x6e0/0x6e0 [ 297.484789] ? ioctl_preallocate+0x1c0/0x1c0 [ 297.489199] ? __fget+0x237/0x370 [ 297.492644] ? security_file_ioctl+0x8f/0xc0 [ 297.497039] SyS_ioctl+0x8f/0xc0 [ 297.500423] ? do_vfs_ioctl+0x1070/0x1070 [ 297.504654] do_syscall_64+0x1eb/0x630 [ 297.508526] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 297.513366] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 297.518561] RIP: 0033:0x458a97 [ 297.521734] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.529425] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 297.536678] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 15:37:22 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 297.543932] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 297.551201] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 297.558462] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000280)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 297.597633] EXT4-fs (sda1): can't enable nombcache during remount 15:37:22 executing program 3 (fault-call:2 fault-nth:38): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000040)={@default, @default}) mmap(&(0x7f00009de000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f00009e0000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 15:37:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 297.683709] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:37:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x100) write$sndseq(r0, &(0x7f0000000080)=[{0xf6, 0x1000, 0x2c2, 0x3, @tick=0x90, {0x7, 0x5fbb}, {0x0, 0x3ff}, @raw8={"4ea1b4d9812a77d34f7d60ad"}}], 0x30) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xc29e, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x80284504, &(0x7f0000ffcffc)=0x203) 15:37:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 297.814580] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:37:22 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)={0x0, 0xfff, 0xc85b, &(0x7f0000000100)=0xfc00000000000000}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:22 executing program 4: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='stack\x00') write$apparmor_exec(r0, &(0x7f0000001880)={'stack ', '\x00'}, 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:22 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:23 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x7fe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x0) close(r0) [ 297.957018] FAULT_INJECTION: forcing a failure. [ 297.957018] name failslab, interval 1, probability 0, space 0, times 0 [ 297.997947] CPU: 1 PID: 14296 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 298.005092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.014452] Call Trace: [ 298.017050] dump_stack+0x138/0x19c [ 298.020688] should_fail.cold+0x10f/0x159 [ 298.024844] should_failslab+0xdb/0x130 [ 298.028821] kmem_cache_alloc_node_trace+0x283/0x770 [ 298.033930] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 298.039388] __kmalloc_node_track_caller+0x3d/0x80 [ 298.044319] __kmalloc_reserve.isra.0+0x40/0xe0 [ 298.048991] __alloc_skb+0xcf/0x500 [ 298.052615] ? skb_scrub_packet+0x4b0/0x4b0 [ 298.056934] ? netlink_has_listeners+0x20a/0x330 [ 298.061692] kobject_uevent_env+0x74c/0xc41 [ 298.066027] kobject_uevent+0x20/0x26 [ 298.069949] lo_ioctl+0x11d3/0x1c70 [ 298.073578] ? loop_probe+0x160/0x160 [ 298.077384] blkdev_ioctl+0x983/0x1880 [ 298.081270] ? blkpg_ioctl+0x980/0x980 [ 298.085164] ? __might_sleep+0x93/0xb0 [ 298.089048] ? __fget+0x210/0x370 [ 298.092506] block_ioctl+0xde/0x120 [ 298.096135] ? blkdev_fallocate+0x3b0/0x3b0 [ 298.100457] do_vfs_ioctl+0x7b9/0x1070 [ 298.104341] ? selinux_file_mprotect+0x5d0/0x5d0 [ 298.109091] ? lock_downgrade+0x6e0/0x6e0 [ 298.113236] ? ioctl_preallocate+0x1c0/0x1c0 [ 298.117643] ? __fget+0x237/0x370 [ 298.121101] ? security_file_ioctl+0x8f/0xc0 [ 298.125507] SyS_ioctl+0x8f/0xc0 [ 298.128883] ? do_vfs_ioctl+0x1070/0x1070 [ 298.134523] do_syscall_64+0x1eb/0x630 [ 298.138413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.143263] entry_SYSCALL_64_after_hwframe+0x42/0xb7 15:37:23 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 298.148453] RIP: 0033:0x458a97 [ 298.151722] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.159440] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458a97 [ 298.166726] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 298.174098] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 298.181467] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 298.188986] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:23 executing program 3 (fault-call:2 fault-nth:39): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x4000, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_pts(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) dup3(r1, r0, 0x0) dup2(r2, r3) 15:37:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="dafe041452d5d0bb77888b91bfdb3a933936bb0a5dc586484d722f95a3a85350a38c0cdb7dc8902597ac19a16cf5c6a77e188862480ffdf1eb52ccf9da4b1ef2d125b73c4a005979f3c4fe7572e0112415e982ab25f103a16c742de34271a88801683bc13e4f9c35", 0x68, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r2, &(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x2}, r3) setrlimit(0xa, &(0x7f0000000080)={0x0, 0x9ba}) 15:37:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 298.515851] FAULT_INJECTION: forcing a failure. [ 298.515851] name failslab, interval 1, probability 0, space 0, times 0 [ 298.540809] CPU: 1 PID: 14356 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 298.547876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.557231] Call Trace: [ 298.559821] dump_stack+0x138/0x19c [ 298.563528] should_fail.cold+0x10f/0x159 [ 298.567693] should_failslab+0xdb/0x130 [ 298.571761] kmem_cache_alloc+0x2d9/0x780 [ 298.575908] ? selinux_file_mprotect+0x5d0/0x5d0 [ 298.580685] ? lock_downgrade+0x6e0/0x6e0 [ 298.584833] ? ioctl_preallocate+0x1c0/0x1c0 [ 298.589240] getname_flags+0xcb/0x580 [ 298.593042] SyS_mkdir+0x7e/0x200 [ 298.596501] ? SyS_mkdirat+0x210/0x210 [ 298.600383] ? do_syscall_64+0x53/0x630 [ 298.604357] ? SyS_mkdirat+0x210/0x210 [ 298.608241] do_syscall_64+0x1eb/0x630 [ 298.612126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.616972] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 298.622158] RIP: 0033:0x458047 [ 298.625343] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 298.633051] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458047 [ 298.640320] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000080 [ 298.647675] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 298.654943] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 15:37:23 executing program 0: setresuid(0x0, 0xfffe, 0x0) r0 = geteuid() setresuid(r0, 0x0, 0x0) ioprio_set$uid(0x7, r0, 0x0) 15:37:23 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x6, 0x3, 0x1, 0xfffffffffffff6c4, 0x7, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB='u3rjqBo=,\x00']) [ 298.662225] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:23 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000080), 0x80000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$FICLONE(r1, 0x40049409, r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', r2}) 15:37:23 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xc0400, 0x48) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000180)={0x7, 0x1f, 0x0, 0x4b, [], [], [], 0x39de, 0x8, 0x0, 0x0, "f45f73b9671905ccaef9cbc71388a5dd"}) listen(r0, 0x9) sendto$rxrpc(r0, &(0x7f00000000c0)="e72a3f4141f4db69e5d72971106f23a77e40d4d31f87637a766b03681e9a33fd2bdb766490bec1675df809757146930758e7502cea027add3904a8e7fcd06b1ed3c3526b82662095cfafa05d57ef13b247c76cb230fc213e20d961c1e17e97936926286f11952cc8de7377166ef1b8ed6b55abecce6b940b39ae402af7", 0x7d, 0x0, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x9}}, 0x24) listen(r0, 0x0) 15:37:26 executing program 3 (fault-call:2 fault-nth:40): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x400, 0x110) ioctl$KDSKBLED(r2, 0x4b65, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) recvfrom$unix(r3, &(0x7f0000000280)=""/4096, 0x1000, 0x100, &(0x7f0000001280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:26 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010008100ed00000000000000000000e4f3517d1230f0a237b869de6100"/48, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012000c00010065727370616e000004000200"], 0x34}}, 0x0) 15:37:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000100)='./file0\x00', 0x0, 0x804014, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000140)=ANY=[@ANYBLOB="7571726a71756f7461392c004a3aaa859790c2b8d3d068ade746fe69e3b482a01d685ab2fa35b29dea4ee1c9f1c6de9e8c9a178976cc99a48613c33c379acefec4a8d846625cf4a0ed0d62cbcf4831ea7357f2f47018e388fb1780349c5d3eb3d1d1ac7aaf74febae9e8dd627d700bebfc9a1bf1fbb4de1f809c2179b5214875251fb741dbc689"]) 15:37:26 executing program 0: r0 = socket$packet(0x11, 0x8000000003, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x400000000, 0xfffffffffffffffd, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 301.285627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 15:37:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 301.358104] FAULT_INJECTION: forcing a failure. [ 301.358104] name failslab, interval 1, probability 0, space 0, times 0 [ 301.391241] CPU: 0 PID: 14419 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 301.398349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.407697] Call Trace: [ 301.410301] dump_stack+0x138/0x19c [ 301.413964] should_fail.cold+0x10f/0x159 [ 301.418114] should_failslab+0xdb/0x130 [ 301.422107] __kmalloc_track_caller+0x2ef/0x790 [ 301.426791] ? kasan_check_write+0x14/0x20 [ 301.431033] ? strndup_user+0x62/0xf0 [ 301.434844] memdup_user+0x26/0xa0 [ 301.438397] strndup_user+0x62/0xf0 [ 301.442038] SyS_mount+0x6b/0x120 [ 301.445496] ? copy_mnt_ns+0x8c0/0x8c0 [ 301.449417] do_syscall_64+0x1eb/0x630 [ 301.453322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.458181] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.463372] RIP: 0033:0x45b69a [ 301.466549] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 301.474278] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 301.481549] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 301.488806] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 301.496077] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 15:37:26 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x3, 0x121040) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f00000002c0)=0x9b) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r3, 0x7, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffe) 15:37:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=@random={'user.', 'usrjquota='}, &(0x7f00000001c0)='\x00', 0x1, 0x3) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x88) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 301.503333] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 301.615180] EXT4-fs: 4 callbacks suppressed [ 301.615188] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 301.670119] protocol 88fb is buggy, dev hsr_slave_0 [ 301.670881] protocol 88fb is buggy, dev hsr_slave_0 [ 301.675303] protocol 88fb is buggy, dev hsr_slave_1 [ 301.681325] protocol 88fb is buggy, dev hsr_slave_1 15:37:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000100)={0x3}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:26 executing program 3 (fault-call:2 fault-nth:41): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:26 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 301.884505] FAULT_INJECTION: forcing a failure. [ 301.884505] name failslab, interval 1, probability 0, space 0, times 0 [ 301.970074] CPU: 1 PID: 14469 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 301.977149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.986511] Call Trace: [ 301.989111] dump_stack+0x138/0x19c [ 301.992733] should_fail.cold+0x10f/0x159 [ 301.992751] should_failslab+0xdb/0x130 [ 301.992766] __kmalloc_track_caller+0x2ef/0x790 [ 301.992780] ? strndup_user+0x62/0xf0 [ 301.992792] memdup_user+0x26/0xa0 [ 301.992803] strndup_user+0x62/0xf0 [ 301.992818] SyS_mount+0x3c/0x120 [ 301.992828] ? copy_mnt_ns+0x8c0/0x8c0 [ 301.992840] do_syscall_64+0x1eb/0x630 [ 301.992850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 301.992867] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 301.992874] RIP: 0033:0x45b69a [ 301.992879] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 302.013006] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 302.013014] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 302.013020] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 302.013025] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 302.013033] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 302.020252] protocol 88fb is buggy, dev hsr_slave_0 [ 302.090633] protocol 88fb is buggy, dev hsr_slave_1 15:37:29 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002480)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000002580)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000025c0)={0x0, 0x0}, &(0x7f0000002600)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002640)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@local}}, &(0x7f0000002740)=0xe8) syz_mount_image$gfs2(&(0x7f0000000080)='gfs2\x00', &(0x7f0000000100)='\x00', 0x24, 0x5, &(0x7f0000002400)=[{&(0x7f0000000280)="11ef7a333cdc70d9746e5c76e9b30703cf596dcad66c8a23d0277eb8b1b55694163a4fafa8f98f9d92f1bf1aecc923dd835faba5590e77be80575d75c1a23af6c0235bbbf413ec50a0d104128c840639cdd6f723568209199d2bf8fb997662049cf8e9df42c661e720bf2c192a04fb85d221986d6fc3c8ba30e8a3e12fc344482a78c57bc374c1dfca08d9444c387b9505e5ed7d1db53eb7d9d3e61ec461dc8bf7f5962282afbce2c36c2e883092ad4f97cc9f2b15b0e389975b7e594b2a56ab645362a78b466c0661e8a44ae5346d3eef183c2a0457c21e29c90760411b328787a06e6185d457b21bfb175e7509acb6d45009c6ec7c24e1d631e8bda7301458966b3be0f89916ef34e1f6f69dc611dc4606b622b15464d321836b4d613b8001de1b77609bfb24c66dd080f8ab76b3cb06f64b73c4917c3bc383f5608661f60620f40734a7c24a38fccff493138c0a0aae5f17518578d98ed7d532f2920f7c34639b77f772cc4728ba936fbf79539a61275af26a35624fe59af2bbc7a8a9b26c471b61c0015d825c376a87d1d99795292f2b12830158f1354b99167d6282137332886cb7b669185aed96b090457a6c432de99eb3516f6fd028eb490b67e53bf53b34fc0c49dc6836afb9e83b12cc89fca6a7b52d6e19063262376a7699cd6fadf12d66bc713e8b2bf957f933751b859be007863e2da24dcd6a6a078b68fc11669e2bf347636a0eaa4cbd28b564e19937c6e99fc3a97758df85918839e284dc383b5aeaffc278d5fa78687d2221cf607da9d7c64db338c44a0d10cd0219d08b289b3aa891dc9b0ae89d37ddb2454955b9eeb049143ebb78629fcdd50e8a4e651bf92892532ef6514dfc334b1ca599124b8dd0654d64fdf01850394b2174cfe7b09b76099b64c400e1d7590ca891cb8636ccf3c0bbcf791c02b495e04973138d554d8be70697eda992064faba30168bbe14a29acc339c082b585e6924a07a77f083b17c9e17ab3568f8f55057310626b0d17d3a16bd01296991f539b18ff5614b4746b2379a130f8d13a3c7cb6af14637593deab8472aff564fee075bd9551a77d91772908edea85113a99f2371e164ba8333d5609f847f3a506ca1773dfbb8cfe8a28902a0a157db9c72adc6e6d4fc3cc517784ee568597fec480c8be3d5457e81d17384c210aebe046246f430cc5876078a400950e017de01a85f485e35aa2ec25299141ae54aaad4496c372d49c2aac22af4b44a792ca73d16781ac58269af0670530004988c35ee8d031f797289beea6e7eace2de0ffc364ccba920987d2a72ad428677e19b219d2a828f3d57e1e3bb564dd6d7f717b806739413db27d9c1f7cc1211f9081e83d49f5a50b9da109a7632e81fe44ca99f1824a1cad1dc3cfb3287994a3c9526fce03a72574af948044e087ef24d19365436a51b9de39c28896fd009662ed8b0ae3fbae71ba370194d466302b7b785cbaaefc83a45a1d590c86dd2f4aa0e5607ea35fef06293f69b732a64056ff431047e0f131a1763bddfdb4fab834f62ce1b09056bdb33edac2f037f0a45566ef6fd8554a4db0d73f1d2c258b6cec64ff1cacc99e423b59667c9268d5c4ed3ab80633303fcdcfa6f7b1d466070caf0ebd7d8d42db4e8aa27cb8a344c82e52e3390dd2d16eb6d34ac8235036284f79c76938c89dfb417f00dc5e41c05773e96623f67c52e6a7b6b3423b9a186447b80b63d1be78b4b255e7d7c5c92aefe20f861c80993876951719da8551a41d6cc9e6c344ab704b8ff2ad78a4f99ba7e934631de5552363e4f099873ceacdcfc78d86127b256c9216f4bb47f4a3d2c0aac3cf22704190c98df87962b70ad0eb3011a62fceec490301f7b5bd886723597f9a1ab37bf99df7fa070580541d2c9ecab9f82f3ce1821c6ee8508a9f529093a53ca7a52246af71cc7a498f813f81af1aad4350758012ee3d84ceee8ac65f62e275e5abf3c2b394b5b51a14f27a1c9165eff75036bffb5b1b3b3df6ba7e25de8cfb0593547c51c3a40dc7f6d4a1c05b007b74ee24ee18f6defadf104f83c8db29e487c9e718e222f0c6625a7f4a67eae9b597bbcea4c0e8aa1a8b4f6de8bcc7af8c5f9e2d4590df355fae0d72b5302f20e2580ee0de8209a88caf417673f88c083af6c6c308103c0522fc354a4b246fcf51b27ccffe28cb8cd8c617a6789f32ad340df88efc8da6d454a739e4142094e2c953500aad8a856e98961a6b5e6dfe6d2f5570c8bf6f9420af15788c3b909cee23636d224afc451c6eb69a0098feb38def8b8c957f4cd4d64c21131335509129072a32b006425ee387b24a2456a6b1da96259f0a247d969397a128fa11a48fac835a45299622a29bdff583cc25215de76432089816b12dfd91771af36f78de138228e743e5d20f77e2e88ae70b9165b1676ae4c67a3966a6b539fd3c740f35c88de4a475b0b7255d4a2ddeece81f2bd7236d9deffee38db850123d24d3efc977bd49dd2b7021df69d8dc66b1b67d5f82041c66e1b14d39dcf255d292ac9c4805d0a42f8f600452bb06ff5b770ba398593574a9f822e5cf81401a02b1bedce7eab998deb606b03ffcbc2b6c030e0402a368e5d4ea4324209d88731b6c107cdac753f29a1c380bfe87ce27b97128e279d1514049c345aee136b5f6f385ce68c641140106b1021262c8919416b7e5f5fa54f9299a7340cfcf575ce96a55f541d7c381c6f48c54287f8d48542a8f1d6b2329c736d63ec78d1ca9a15f49a1f8c3eb16df946eea1a331f154d1c166c84021e1aba284a2ef3579e8ac0726aca68bbac12f4b7e064d96876ea75a3c4c39cd7f1aaad39d76628456cda785f1f590979851bce74a45dea5affc9f546cdbb4ab27bc47d519e597d34c5ed31cfb00871127edaf7f24154faa72b33bb03a4565b88c62c8c998b477183f4191d607ea5def58c4df0f1424eb80a8fea0c9087ea6e868c734957c62347e6e69faaca9e22343e24e5fb77c5b26c4dccac4ccae98f649c8515be1ab5a32d751021830372059698b2cb84cd1048eb103ab9fdcd9d6b250016fa4e0c90023fa8e7b770ca792ad77ad7c3a8493448fec63d68ed7655c8c2f3af0619f18eb3fbe9482ea2c1e1661fba59468d3458203b0ca98b603b60e29fab51daa26b29ee36ee0a6c37612f4bbc152c2644ecd85070513a253c0b97c0711a96423794c204e26ffc0e8c9d9dd5682b837404f3626d88cbe04cd0fc2b457a6661e94dd70cbb0f18589140103a3c3428c5feec6495832b8caba7d5bcb6bc9ad7c4e544dbb9bb8d604ee16cb840196590505410300f3cfe96e13f46fc4d67c50acdb0bb8de0413246c2e0fd49b45bda37fd4abd278336442650bf7b117b55a093c02901615877ffa529bf011e5c962caca255baeda916a77f301620de7b7da82ef1e8402ec6322dbb927ad3ff7e5b480ceacf932cc397b37ea4a3e2dcce882eda1d40a97c34786c1e63c6db09e366459dbb02f8b40ec7befa7016565c330948998baa87d6f79ece1c425f8253c12e4a66ec65dca81d2c0199b79b014e181540b66a2550df60182040a8960ea7608c0248de17082b21162c61fc4463b62cbb408b554aabdb312afba57482ab1a9d2409657d417dbcc127ee2e2ea5ad567cbe3f53437f26369388dac9166b1a40871f7746e9b99d24409224044bc384317cdcf0563afe8ee79738826b71599e665557e04a259b245febcb9c310fb726ca05ff0d55fc7a9b5b80016b0a13828e2c19ed681e6db71c43b6521f2bd9e5c2a674b71ef3d92eef46351a999c994e779f845972357be1d9837c7f3cbda69f0a5aeaede2d480342759500a7d991e4e6d81fe02c653c019b76e2ea0c538cbaf90c5994802cab27a1cae573b3ccf1bf41ac861c9a2fa651078971fe3af09d53f2c1fbfe62f60613b716cab5cd4e85027667a78f08f187a126f84275ede5ea8960c646f237fb14ef80997df1c0074909f05441c4c7699d2e27f03fb6d36a531d5bd0cfc3dd05a3f1fada7abf815f99a6507dda139d46c79876cfe8703da15ee5377b100f93a0d89214e5f2922022012d7602206e50873cb3ff1f155200363b74255caacd0bd41347373301afae3f4c24fc760063a27d253e8df30dfab8d16b2e93e45e8b3c42c04b193d6fe43b36d0c459e02bfda486e48ea5ffe8234b17adbdf4bc5064a643fe5366fb9c5aec6ff9da3e9bfb5c425df1e3d5baa909530ce589960e8d69e95877cc17b0fe62e46eff8cdceec5bc5f5a5206c68c5c4feba6de63bd395450af793e3a53e3fca4c9e4183a93fab7b07f31930f46834035edb798b33043402a7caad58238ea3fd937c4124849fefcab4c03bb447ac175f9e16708be6fc394e65e6024459b977a2c98a7904b4297f3b47a3bcc01cc8cbd3ac92cd949bb31ff3e2f03f91c966cc16a74382abfdfad83d03411925924d6f765584ff65758e8dde47705dbe761a231b50c678e5635cf3eeb5353b83b13034570928119a70a6441f468d6a517a1f72b9ba75a482cc29c66560faade6a1d6d3682347fe3190771adfaf31826dd6d2f737059f23d47a46a01ce79589db09965a8561e0d5b7c46deebec21a215ab999dbacfb9f4450e7c679d53fbd023f9905316205591fd4bb7343a37ab9ced40fb29ee05d9a53bc5eda58efb83f7375bc29bbbe070a44e18e0329985ddb734e574eb93f81f7f9c8f9b50236c9fb8ac60f92bd44c2cc48f1b44a3838cd7f73b5d1f503529b6e3165a5ae5e02f1604b12bdf1d85a51d260b830d3e8656aa704f831887327a794e2f5fb162c1083fb6a51004e8d2bf406ec18b8626afbbdb590112e2a2c8b76c9149e6bbaabda54e143403d7a169151f6f74da36f5931be10755a3059db2c6d02c377a14e477ef4b206f2be78a67693cf63f8f97d2abf9f6e84cf3401fff56b435ad592b37e00e723fcc25ec727183a6857652a44f271da28c9fc4e3ab0556956a3257f257428e6956e093aea78873911512d8f2daf2d9a6cc2b4d26f03751572656572bd321dece901b9330e35d292d876330723e0a253f825aae476ee6a8406a7e7ca4eb9eebe3df9b1a902de4e704f509328e28ba1cc50774c411f78ec8bb1c415bfa0a5fe2d729fdf1e97ba020d09546d383bf468fa8443f151fcbc25f8935609f7dc4fef5984d7f960668cd103212016f93018d3db30538ee0a44b21a8362a71b8a82c1fbcf869d7bd4589cba2e655fb9ba40911c056269df9b51cdf1bcafaab7622aaa0d47bd09222fb2c88be3a975f2ac1412a6e3343d0598a8e4eba167a61f2d2bb2d00b993161ca377547a6aa8d0641f92c57045e173dd81e278deb34dbac11d33a7a715ac7b2d8391b97d7af013cbc345bab651e7e829ada333fcde941e5655920f284852648ba5d826bd13a3f6dc8d9de24e6e56d78b2b453a72b5adf079a83fc737ddd32e403ffb4f4a5abd6b54b90d7c08df98b34a85aedaeeb49f385aa2b8ca5fce8f115272817d45ab867f8803441fb8fb46ae92bc78189d61c5b347902baca86dfaff1a0cbac32f3d74e50d2175accbccd22f4719a60ec9fde919cbfc67e1cf66f663219ee80eeef027debbf1e0f99e2fae3bcdc198253ad44cfba9f9a6fb710c68e38fd20f6eb27c832b7f5f881548d974021a9523d41ca130937557d1c425d985441ee7b68354a62f32c35cce78e291cac241492fed1e8e08138b0ff9e6a7b4851fedf312346ed600f02a1b4ef2b81d70dcd408afffbc41f192611341396dbc43a560d023370260d68e9b8014327eac1787658a9b436a17e935aa5b8d85054b31", 0x1000, 0x3}, {&(0x7f0000001280)="1ad7356c191af000da2269f09464a6ed803c91c8e2f31176e9d29dc30ce8eb40e12f6509d052362182628055e796f0ab11f83dbb203008b9b57abdc78e0af01394cdd628327ea4cd18de7609763fc9d7253e33c70f33eac57e7b312568165d1a9111fb579e333246b33782998a74c0b305e77f60f00d6c3d0fccd288c3a52e8e4184369d62a07fb5fdbadf4bf7080109857a07ce4fe1991fd2d468a76727f53db829c38e2badf5796766e969085eba7f17e7dbf07b8a714c698808ca14d2d47489a4b79520ba3dcd517f", 0xca, 0x1}, {&(0x7f0000001380)="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", 0x1000, 0x5}, {&(0x7f0000002380)="5f5aba16be379b2739e6e77037275310aecc91e68846cc448bc26bcf03c5b83a20c1dc00c6cbb680035adf77a14e1364f56b6c3e456190c59718441e08fab3d858577a8762a44e8a3a6daf62010f4e734ceb3b1de93d66fef79de02c6fe4fec8a8759afbb279d167739be9714c", 0x6d, 0x5}, {&(0x7f00000001c0)="529379dc4727cc2c31596549bbc970d5957d70b39f55ecda326e", 0x1a, 0x3f}], 0x2000, &(0x7f0000002780)={[{@barrier='barrier'}, {@discard='discard'}, {@nodiscard='nodiscard'}, {@quota_account='quota=account'}], [{@obj_type={'obj_type', 0x3d, '/dev/vhost-vsock\x00'}}, {@measure='measure'}, {@fsname={'fsname', 0x3d, 'md5sum*]\\'}}, {@dont_appraise='dont_appraise'}, {@euid_eq={'euid', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r2}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '/dev/vhost-vsock\x00'}}, {@euid_gt={'euid>', r3}}]}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002880)='/selinux/enforce\x00', 0x111002, 0x0) r5 = syz_open_dev$mouse(&(0x7f00000028c0)='/dev/input/mouse#\x00', 0xcc, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002900)={r5}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1413701a44825013, 0x0, 0x100020, &(0x7f0000000200)={[], [{@obj_user={'obj_user', 0x3d, 'usrjquota='}}, {@obj_user={'obj_user', 0x3d, 'usrjquota='}}, {@uid_gt={'uid>', r0}}, {@subj_user={'subj_user', 0x3d, 'usrjquota='}}, {@fowner_gt={'fowner>', r0}}]}) r1 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x4000000000004, 0x0) accept$netrom(r1, &(0x7f0000002500)={{0x3, @netrom}, [@null, @netrom, @netrom, @remote, @default, @bcast, @default, @rose]}, &(0x7f0000002580)=0x48) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001500)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000001600)=0xe8) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='./file1\x00') connect$can_bcm(r1, &(0x7f0000001640)={0x1d, r2}, 0x10) 15:37:29 executing program 3 (fault-call:2 fault-nth:42): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:29 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8000, 0x200) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmole=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1261) r2 = geteuid() setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0xfffffffffffffff9, 0x35}, {0x40, 0x6}], r2}, 0x18, 0x6) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) 15:37:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getgroups(0x1, &(0x7f0000000340)=[0xee00]) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='fuseblk\x00', 0x1000, &(0x7f0000000580)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x20a}}], [{@euid_eq={'euid', 0x3d, r3}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@hash='hash'}, {@dont_measure='dont_measure'}]}}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f042, 0x0, [], @p_u8=0x0}}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x100000000, 0x400) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000000c0)={0x10000, 0xf000, 0x100, 0x2, 0x53}) [ 304.338072] FAULT_INJECTION: forcing a failure. [ 304.338072] name failslab, interval 1, probability 0, space 0, times 0 [ 304.364564] CPU: 1 PID: 14495 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 304.371623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.380991] Call Trace: [ 304.383594] dump_stack+0x138/0x19c [ 304.387240] should_fail.cold+0x10f/0x159 [ 304.391408] should_failslab+0xdb/0x130 [ 304.395404] kmem_cache_alloc+0x2d9/0x780 [ 304.399658] ? fs_reclaim_acquire+0x20/0x20 [ 304.403971] ? find_held_lock+0x35/0x130 [ 304.408018] getname_flags+0xcb/0x580 [ 304.411938] user_path_at_empty+0x2f/0x50 [ 304.416078] do_mount+0x12b/0x27d0 [ 304.419609] ? copy_mount_options+0x5c/0x2f0 [ 304.424013] ? rcu_read_lock_sched_held+0x110/0x130 [ 304.429067] ? copy_mount_string+0x40/0x40 [ 304.433340] ? _copy_from_user+0x99/0x110 [ 304.437475] ? copy_mount_options+0x1fe/0x2f0 [ 304.441965] SyS_mount+0xab/0x120 [ 304.445417] ? copy_mnt_ns+0x8c0/0x8c0 [ 304.449304] do_syscall_64+0x1eb/0x630 [ 304.453179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.458021] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.463393] RIP: 0033:0x45b69a [ 304.466564] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 304.474257] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 304.481523] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 15:37:29 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x3, 0x7}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 304.488804] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 304.496077] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 304.503422] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:29 executing program 0: r0 = userfaultfd(0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xc0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000100)={0x0, 0x2fbb}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x7fffdfa1c000}) 15:37:29 executing program 3 (fault-call:2 fault-nth:43): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 304.733628] FAULT_INJECTION: forcing a failure. [ 304.733628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.746270] CPU: 1 PID: 14534 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 304.753310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.762672] Call Trace: [ 304.765280] dump_stack+0x138/0x19c [ 304.768928] should_fail.cold+0x10f/0x159 [ 304.773103] ? __might_sleep+0x93/0xb0 [ 304.777007] __alloc_pages_nodemask+0x1d6/0x7a0 [ 304.781696] ? __alloc_pages_slowpath+0x2930/0x2930 [ 304.786719] ? avc_has_extended_perms+0xe40/0xe40 [ 304.791575] ? avc_has_perm+0x2df/0x4b0 [ 304.795561] alloc_pages_current+0xec/0x1e0 [ 304.799891] ? cred_has_capability+0x142/0x290 [ 304.804488] __get_free_pages+0xf/0x40 [ 304.808450] get_zeroed_page+0x11/0x20 [ 304.812327] selinux_sb_remount+0x1a6/0x900 [ 304.816632] ? __phys_addr_symbol+0x23/0x60 [ 304.820950] ? selinux_sb_kern_mount+0x230/0x230 [ 304.826167] ? selinux_capable+0x36/0x40 [ 304.830221] ? security_capable+0x94/0xc0 [ 304.834361] security_sb_remount+0x7b/0xb0 [ 304.838582] do_mount+0x887/0x27d0 [ 304.842471] ? copy_mount_options+0x5c/0x2f0 [ 304.847050] ? copy_mount_string+0x40/0x40 [ 304.851280] ? copy_mount_options+0x1fe/0x2f0 [ 304.855768] SyS_mount+0xab/0x120 [ 304.859203] ? copy_mnt_ns+0x8c0/0x8c0 [ 304.863114] do_syscall_64+0x1eb/0x630 [ 304.867079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 304.871930] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 304.877123] RIP: 0033:0x45b69a [ 304.880303] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 304.888006] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 304.895272] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 304.902530] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 304.909786] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 304.917060] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:32 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:32 executing program 0: userfaultfd(0x0) r0 = epoll_create1(0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x14f002, 0x20) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x401) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000003000)) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) 15:37:32 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x8, 0x800) write$P9_RSETATTR(r0, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000180)=ANY=[@ANYBLOB="f38c69f6bac8e4f3db76d7bc6bdfa08ea525ffe500049738282586ed6abfdd11485340803d54cb571fc2afe9ef8aaee170996ab6be289533acddcf31b341df1bbea97db6cb665da8104a5028bd644556d87768b15044d5f5ff2dedfdccc86a65691d81e4f5111ce2b520aec04fe6f9520f815d684c61e7971dbc09a6abe0a57b3f4e1bac33a40c11335c20181c27f60473e52bfc918605c4389ff3ff5353efaab9641c6a352a331b795bb8a87ff5937406ca562f2bb53d91a0af9a9b329c7235e6579a59cd088f8af11f9e4562b62094705db017798351fca50048a9e381844a787ffdbaaea39394f263fd07661b34735a09c2847df7c9235a0873b8fffc05ec3ffb57790b4749f90a1a1efef3ea01789a536b78eb13f4a7e97e88f48ad1a25580df6963bfcf7a012d53b241e945d6fce73cb1ea220676"]) 15:37:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) seccomp(0x0, 0x0, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x7ff, 0x6, 0x40, 0x1ff}, {0x9, 0x7, 0x3, 0x80000001}, {0x3f, 0x10001, 0xff, 0x9}, {0x6, 0x7fffffff, 0x5}]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000001c0)={0x0, 0x9}) 15:37:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:32 executing program 3 (fault-call:2 fault-nth:44): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 307.354485] FAULT_INJECTION: forcing a failure. [ 307.354485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.366434] CPU: 0 PID: 14548 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 307.366443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.366447] Call Trace: [ 307.366465] dump_stack+0x138/0x19c [ 307.366484] should_fail.cold+0x10f/0x159 [ 307.382883] __alloc_pages_nodemask+0x1d6/0x7a0 [ 307.382895] ? fs_reclaim_acquire+0x20/0x20 15:37:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigpending(&(0x7f0000000200), 0x8) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r1, 0x101, 0x0, 0x2}, 0x14}}, 0x0) [ 307.382911] ? __alloc_pages_slowpath+0x2930/0x2930 [ 307.382944] cache_grow_begin+0x80/0x410 [ 307.382958] kmem_cache_alloc_trace+0x6b5/0x790 [ 307.382971] ? kasan_check_write+0x14/0x20 [ 307.397989] copy_mount_options+0x5c/0x2f0 [ 307.398004] SyS_mount+0x87/0x120 [ 307.398013] ? copy_mnt_ns+0x8c0/0x8c0 [ 307.398027] do_syscall_64+0x1eb/0x630 [ 307.407366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.407387] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.407394] RIP: 0033:0x45b69a [ 307.407403] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 [ 307.421813] EXT4-fs (sda1): Unrecognized mount option "óŒiöºÈäóÛv×¼kß Ž¥%ÿå" or missing value [ 307.424552] ORIG_RAX: 00000000000000a5 [ 307.424559] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 307.424565] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 307.424571] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 307.424577] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 307.424583] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:32 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getflags(r0, 0x40a) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000003c0)) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x9, 0x408000) getsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000280)=""/202, &(0x7f0000000380)=0xca) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000480)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:32 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000100)=[@release], 0x0, 0x0, 0x0}) [ 307.532165] EXT4-fs (sda1): can't enable nombcache during remount 15:37:32 executing program 3 (fault-call:2 fault-nth:45): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x121000, 0x0) accept$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB="7572726a71656f610394e600"]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0)=0x0) process_vm_readv(r1, &(0x7f0000001580)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/135, 0x87}, {&(0x7f00000012c0)=""/5, 0x5}, {&(0x7f0000001300)=""/202, 0xca}, {&(0x7f0000001400)=""/68, 0x44}, {&(0x7f0000001480)=""/58, 0x3a}, {&(0x7f00000014c0)=""/156, 0x9c}], 0x7, &(0x7f0000001a00)=[{&(0x7f0000001600)=""/207, 0xcf}, {&(0x7f0000001700)=""/211, 0xd3}, {&(0x7f0000001800)=""/207, 0xcf}, {&(0x7f0000001900)=""/242, 0xf2}], 0x4, 0x0) [ 307.722021] FAULT_INJECTION: forcing a failure. [ 307.722021] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.733870] CPU: 0 PID: 14591 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 307.740917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.750284] Call Trace: [ 307.752889] dump_stack+0x138/0x19c [ 307.756863] should_fail.cold+0x10f/0x159 [ 307.761046] __alloc_pages_nodemask+0x1d6/0x7a0 [ 307.765736] ? fs_reclaim_acquire+0x20/0x20 [ 307.770136] ? __alloc_pages_slowpath+0x2930/0x2930 [ 307.775162] cache_grow_begin+0x80/0x410 [ 307.779211] kmem_cache_alloc+0x6a8/0x780 [ 307.783352] ? cache_grow_end.part.0+0x92/0x160 [ 307.788011] getname_flags+0xcb/0x580 [ 307.791816] ? lock_downgrade+0x6e0/0x6e0 [ 307.795953] user_path_at_empty+0x2f/0x50 [ 307.800088] do_mount+0x12b/0x27d0 [ 307.803630] ? copy_mount_options+0x5c/0x2f0 [ 307.808053] ? rcu_read_lock_sched_held+0x110/0x130 [ 307.813068] ? copy_mount_string+0x40/0x40 [ 307.817323] ? copy_mount_options+0x1fe/0x2f0 [ 307.821830] SyS_mount+0xab/0x120 [ 307.825272] ? copy_mnt_ns+0x8c0/0x8c0 [ 307.829145] do_syscall_64+0x1eb/0x630 [ 307.833013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 307.837842] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 307.843011] RIP: 0033:0x45b69a [ 307.846189] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 307.853890] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 307.861158] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 307.868576] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 307.875925] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 307.883380] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 307.893984] EXT4-fs (sda1): can't enable nombcache during remount [ 307.958402] EXT4-fs (sda1): Unrecognized mount option "urrjqeoa”æ" or missing value 15:37:35 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="914b0000000000806e38b9d582dfb4024c2afbf1ac5d680afd286727a21b201cde59178d126a0872e448b997e43d6c51da7f44a6615d5f8692cc86b1d5f0d184605b6bb95db0333fac8218f91c78011f7c6a6e8d8400f1488d57bf60126c28343a423601c34b7c"], 0x0, 0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8400, 0x0) setns(r3, 0x2000000) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000003c0)=""/246) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000000)=0xffffffffffff0000) prctl$PR_GET_DUMPABLE(0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x9, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c400000000079"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) 15:37:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="a3919d960141ad16804f0470b163a26ccfb6f22a08040647444c2dbcb3a70cb806ad5c7d215c1267a477de633d5da8b6562514587225b8892d2a68941d3d4742d3921f7c21d0343cfc46557bf236a7110836", 0x52}, {&(0x7f0000000080)="ab3b91869484d7b277229c135d9981c220ba114604e10374d9aa3256fa1ca7afd5b6f9aeca09e8a5e41e8ed9a5ab", 0x2e}, {&(0x7f0000000100)="67e052e5ad09fcfd77e2a2859efd87b4d8a64fa1fe10d4f34f7552dc8b8ec094c4c04df12deb48baf63b750535ce3f283eec98", 0x33}], 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:35 executing program 3 (fault-call:2 fault-nth:46): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:35 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x42) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r1) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001580)={@ipv4={[], [], @local}, 0x0}, &(0x7f00000015c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000001600)={@local, r2}, 0x14) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f00000001c0)=""/12) r3 = geteuid() syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@usrjquota='usrjquota='}], [{@subj_role={'subj_role', 0x3d, '/dev/vcs\x00'}}, {@euid_eq={'euid', 0x3d, r3}}]}) [ 310.364275] binder: 14611:14617 unknown command 19345 [ 310.381457] binder: 14611:14617 ioctl c0306201 20012000 returned -22 [ 310.390283] FAULT_INJECTION: forcing a failure. [ 310.390283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.402131] CPU: 1 PID: 14620 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 310.409152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.409158] Call Trace: [ 310.409176] dump_stack+0x138/0x19c [ 310.409215] should_fail.cold+0x10f/0x159 [ 310.409235] __alloc_pages_nodemask+0x1d6/0x7a0 [ 310.421544] ? fs_reclaim_acquire+0x20/0x20 [ 310.421561] ? __alloc_pages_slowpath+0x2930/0x2930 [ 310.421584] cache_grow_begin+0x80/0x410 [ 310.421598] kmem_cache_alloc+0x6a8/0x780 [ 310.421614] getname_flags+0xcb/0x580 [ 310.421626] ? trace_hardirqs_on_caller+0x400/0x590 15:37:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x7f, 0x84040) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000140)={0x9, 0x6, 0x2, 0x7fffffff, 0x2, 0x7}) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)=ANY=[@ANYBLOB='usrjquotqa=,']) dup3(r0, r0, 0x80000) [ 310.421638] user_path_at_empty+0x2f/0x50 [ 310.429425] do_mount+0x12b/0x27d0 [ 310.429437] ? retint_kernel+0x2d/0x2d [ 310.429450] ? copy_mount_string+0x40/0x40 [ 310.429462] ? copy_mount_options+0x18f/0x2f0 [ 310.443460] ? copy_mount_options+0x195/0x2f0 [ 310.443471] ? copy_mount_options+0x1fe/0x2f0 [ 310.443485] SyS_mount+0xab/0x120 [ 310.452768] ? copy_mnt_ns+0x8c0/0x8c0 [ 310.452784] do_syscall_64+0x1eb/0x630 [ 310.452794] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.452810] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.452818] RIP: 0033:0x45b69a [ 310.452823] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 310.452832] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 310.452837] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 310.452843] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 310.452847] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 310.452852] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:35 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) geteuid() ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 310.461665] EXT4-fs (sda1): can't enable nombcache during remount [ 310.516739] binder: 14611:14634 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 310.532071] binder: 14611:14634 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 15:37:35 executing program 3 (fault-call:2 fault-nth:47): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 310.626765] EXT4-fs (sda1): Unrecognized mount option "usrjquotqa=" or missing value 15:37:35 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x2, 0x1}) listen(r1, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') setsockopt$packet_buf(r2, 0x107, 0x1f, &(0x7f00000000c0)="0211276beba02cbf77bb80ded7bb49bc99cef9be8d3e5bcc1224fdc1384ff47b557e110a82bec05913d24500d0650de1c3f41002a14c0769b22d88ee72cf556126cb5af663d6ddc53046908f55cc119f69dca5b45228895b85756724915d418c261d896ac8890750eff8a8bb5e6cfae8e5ef48876c9ad7", 0x77) getdents64(r2, &(0x7f00000025c0)=""/4096, 0x1000) getdents64(r2, 0x0, 0x0) [ 310.733287] EXT4-fs (sda1): Unrecognized mount option "usrjquotqa=" or missing value 15:37:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 310.812274] FAULT_INJECTION: forcing a failure. [ 310.812274] name failslab, interval 1, probability 0, space 0, times 0 [ 310.850527] CPU: 1 PID: 14658 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 310.857595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.866961] Call Trace: [ 310.866983] dump_stack+0x138/0x19c [ 310.867003] should_fail.cold+0x10f/0x159 [ 310.867019] should_failslab+0xdb/0x130 [ 310.867037] kmem_cache_alloc_trace+0x2ec/0x790 [ 310.874096] selinux_parse_opts_str+0x3c7/0xa30 [ 310.874114] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 310.874129] ? free_pages+0x46/0x50 [ 310.874139] ? selinux_sb_copy_data+0x21e/0x390 [ 310.874156] selinux_sb_remount+0x1fd/0x900 [ 310.874170] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 310.874186] ? selinux_sb_kern_mount+0x230/0x230 [ 310.874198] ? selinux_sb_kern_mount+0x230/0x230 [ 310.874207] ? security_sb_remount+0x5a/0xb0 [ 310.874217] security_sb_remount+0x7b/0xb0 [ 310.874230] do_mount+0x887/0x27d0 [ 310.874246] ? copy_mount_string+0x40/0x40 [ 310.874254] ? copy_mount_options+0x151/0x2f0 [ 310.874264] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 310.874275] ? copy_mount_options+0x1fe/0x2f0 [ 310.874287] SyS_mount+0xab/0x120 [ 310.874295] ? copy_mnt_ns+0x8c0/0x8c0 [ 310.874306] do_syscall_64+0x1eb/0x630 [ 310.874314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.874328] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 310.874336] RIP: 0033:0x45b69a [ 310.874342] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 310.874351] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 310.874357] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 310.874363] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 310.874367] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 310.874373] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:36 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052f0051065d94f64302fed11be1925e0b96c73c7f000000191ce8000000ff0000000000000000b960b47495908c89f9ca79111f7814802546"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:36 executing program 5: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000200)={0x3, '\x00', 0x2}, 0x18) msgget$private(0x0, 0x4509f05dff4e731e) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)=ANY=[]) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000400)=&(0x7f00000003c0)) timerfd_settime(r0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00000002c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x6c, r4, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000100)=0x5f10) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/relabel\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0xfffffffffffffe14) listen(r1, 0xff27) r2 = socket$inet6(0xa, 0x10000000006, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) socket$isdn_base(0x22, 0x3, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) 15:37:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:36 executing program 3 (fault-call:2 fault-nth:48): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:36 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0x0, 0x7, {0x0, 0x2}}, 0x20) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, &(0x7f0000000e80), 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x58}, 0x0) [ 311.226802] audit: type=1400 audit(1555429056.306:109): avc: denied { node_bind } for pid=14680 comm="syz-executor.0" saddr=fe80:: scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 15:37:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 311.284954] audit: type=1400 audit(1555429056.336:110): avc: denied { name_connect } for pid=14680 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 311.328971] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 311.343883] FAULT_INJECTION: forcing a failure. [ 311.343883] name failslab, interval 1, probability 0, space 0, times 0 [ 311.365346] CPU: 0 PID: 14690 Comm: syz-executor.3 Not tainted 4.14.111 #1 15:37:36 executing program 0: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000000040'], 0x1, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000000)=""/142, 0x8e) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x101800, 0x100) ioctl$NBD_DISCONNECT(r1, 0xab08) [ 311.372602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.375714] atomic_op ffff88809666b800 conn xmit_atomic (null) [ 311.381976] Call Trace: [ 311.381999] dump_stack+0x138/0x19c [ 311.382017] should_fail.cold+0x10f/0x159 [ 311.382034] should_failslab+0xdb/0x130 [ 311.382049] kmem_cache_alloc_trace+0x2ec/0x790 [ 311.382067] selinux_parse_opts_str+0x3c7/0xa30 [ 311.382081] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 311.382098] ? free_pages+0x46/0x50 [ 311.422185] ? selinux_sb_copy_data+0x21e/0x390 [ 311.426856] selinux_sb_remount+0x1fd/0x900 [ 311.432969] ? __phys_addr_symbol+0x23/0x60 [ 311.437561] ? selinux_sb_kern_mount+0x230/0x230 [ 311.442414] ? selinux_capable+0x36/0x40 [ 311.446471] ? security_capable+0x94/0xc0 [ 311.450722] security_sb_remount+0x7b/0xb0 [ 311.455242] do_mount+0x887/0x27d0 [ 311.458770] ? copy_mount_options+0x5c/0x2f0 [ 311.463181] ? copy_mount_string+0x40/0x40 [ 311.467409] ? copy_mount_options+0x1fe/0x2f0 [ 311.471912] SyS_mount+0xab/0x120 [ 311.475370] ? copy_mnt_ns+0x8c0/0x8c0 [ 311.479474] do_syscall_64+0x1eb/0x630 [ 311.485290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.490910] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 311.496280] RIP: 0033:0x45b69a [ 311.499653] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 311.507564] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 311.514821] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 311.522245] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 15:37:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) [ 311.529513] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 311.536769] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:36 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x85) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000280)={0x39, 0x6, 0x0, {0x2, 0x3, 0x10, 0x0, '/selinux/status\x00'}}, 0x39) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x400040) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @default}, [@null, @null, @remote, @remote, @rose, @remote, @null, @null]}, &(0x7f0000000380)=0x48, 0x80000) r3 = fcntl$dupfd(r2, 0x0, r1) getsockname(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x3a5) 15:37:36 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1fe8822412876700c0") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 311.678991] encrypted_key: keyword 'new' not allowed when called from .update method 15:37:39 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:39 executing program 3 (fault-call:2 fault-nth:49): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr, 0x0, 0x1000000, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0xffffffffffffffff}, 0x5f3d) 15:37:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:39 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x10000, 0x0) sendmsg$nfc_llcp(r0, &(0x7f00000017c0)={&(0x7f0000000280)={0x27, 0x0, 0x1, 0x7, 0x9, 0xcf, "164454a86098d50632abec70e7fbcf593bece8167d180f2d29deb4f80cf47e710e453dcd614945c669abe4a72afaf59a5d999fb398c85b4e74b92bf5b95878", 0x18}, 0x60, &(0x7f0000001680)=[{&(0x7f0000000300)="1062bc78580bc45513f077f7e40a8dd0c7449240ec4bf61eca50bb531e36f763220cc451f1a347acf06b7ba9047221653898", 0x32}, {&(0x7f0000000340)="e4c7bbcbf53a52c0d592cb761714df4b3982d29c1541a204bb96ed37d7c79c741aeaa2cc3607de1f10ba4e560be2cbb70a0025cdd9db63fff6330ef735fb9f2cf447c9266eaca4d33c7eda84ab3273ec0d5d552e06a4e39294a6ae61e5f542e2df5e", 0x62}, {&(0x7f00000003c0)="b0fc6b1148e73591eb131c271701cc9e6613e47ca390847b5ef30bfc160e67c5088c00b7fe273aeeec51150e72bf7baad97e5e175bc258c14136d5c68e6a64957efa867fb29316383dcd098d79af1da898ba69069ec4c3c57f78dc6cf044a26749d498b88f810c7357833a557c30b3ccc3b7e0f9f871946d348fff6b4d8b312df0d02c74493300303443ba6ec8768ee7aa3902d3df", 0x95}, {&(0x7f0000000480)="321f864c55612cc79328336a93ef90180ac55bce4891d808fec2972b92146a6f621930fd4aaa0817378cf0552ecb0d0cfcbf25880e84c20c7cdb20ffadaa1b367608e3993f3b45df7be8a6e2981f1ea92254b343c1e69e7dac2662a0cc77ed1993b597da465739291914fcdc1ea93191557caae2a0851b139168a04df01bf0865dd6b3789a127046034789dbd22f7dc30062453e32b894c9a111646b385e6d8b2d6ecb06926a64f855858f5a01c25b3ba767b45af9541e71c7be296b11d412ac5503513f589197f9f366876271a976d6c3fd75939b41d9743ac7b54d345e680568163a509ad1d8", 0xe7}, {&(0x7f0000000580)="be13a4e5e27c6904e83b5736a2ae46fffd5552fe2b0c24b2b5c8b40643ef30f0006c7fc3d1b1e227b9e3e6f415c490ef77a723bfe5497182ce3606298886b3c5b13b5ea27727e7bb25f4535d9b7f0e1b977d25f5109f4ce90a1ca7d9d57d5f9b111862d0b6e08867ab2b4630a7c0897f5bc848d0b8f2c085397afe8cdbd9cf6cfcf46c428f01f8deee19ade26c7acc1dcf92c95580f82dca9795856dbb22f2b0785a9c4726d25114e1b39d67ec4ca9033ebdeaca6579622c578c085826416e744de245bc099ffe197b285cc17009dbe719360963a7507e8a47120976e9cf6d32d072524666fdc0712a68402430fd0dd8e22af2f624d4cacefa8ba20206e2013a7fb4746e4c54577d25ac0f157bb192c3b11ad5fda724b23eca77a5bbcb21a8cc7fb0e9693669da2d402e78d1aedba99af79f314288502abe94aa27885c5e9928a7062930333ccdabd84b66b9f64c3d93beaaadf310acb6e6267280848b8b503a8fe0b0252644e30658d39235c080b7626ef141eab7e9000eb4008d72f83be9bce9eeb8d8e9c3b71b53810cd795da9b66988e09d7b1f21b28dc38c3b5faa307bc72fd5ed6617db85352a619477938fe13b02604b87d9cda34ad20efe247673550e6d6dd087388ce16701873a6d5d267d0151a5933d59d5596f3c27f95eb8a1dd7c437e03af4fdcc296de79824897b370d80c18d42ccc3d473eac57bb16a344596b3b55a70b925370f0c2c4436cca8f365a6b713e1f979c22284b716740dd037221eb2dc31384f8b6799c4cbc42c93e0d1379184fb158c6d2c6c98bf10caa24131fc6948a7194c4ea0512feb01fd96254f75db6491369b5307fc721c3fcd5be6fca76390906f79b09f227ea82332d18b4d90e2dfdc324bf698cf0cd9d524f170b8ceedb4129c9910baf19af5a236882a60640cae9d225a4585525aab945d489f4ca2f63181ff99ad401d2f965f3508bf9f3a98f26e76ad66c36ff97fefc5d9d3102b13f7bb9805048660f35196a3d0e690182ea695fb330d07916ea54e7fa53f63c5825ce934ce7b43b0a0a5ec10b7a8ec6a8d8c603322c764bff25454477c2cb0681c08b4151dd7b526872c67fd143783549d7fbfea1c528e9c15856b773a1d4147ec741c81f8923e4ae079877de9b8505827168481b7d9d379a23bb5939ac5b1438ad7eaf9d6fe9894adbdef0dd77a245bef5f6d7ce31a482bf332f2e4ffd1a503ea4ab1e58d1978b30b8897f1601f98167c6037b422b77b16c73a7445da9e0afd794b16460d7836c748dd87b1ce8b6857ff303d62c657a46419235100d0b0d2668d3ce1daef051ed1b914a1e19bdc5ef750ea412db680d4b29eb322ea85434f7febbe19b35ab4be96022e406f7d3b41016cfdaea49813b986ed6549d18c8ccf7fd1069058b24f61889d463b281b0bd7f2cf5a0edb50f6577c74569f8f17731be9c864eeddeb751a0ad939ce8c468fddd76dd48550ef5285d6156a73cf33641d5a31a6f347b832c2a70fbc5a3ddf0b325ba11f49b9d68f8601ca7564129bc17c8738620a814ee146ba11c7c531caa84672d1cca4aecd49e85d105e2824536e2dd9b5601993b4f32774702afe9ad765775d16cb442aa8af9d30ca80956828823d4af2ad99864089513fe28b670725acd69b827561a2b339e5cf8658a729f3ff88d1a0a74a89b066a9d4501b20e8261f26aecb1f727c2df60290edf8e2fcc89783c287e059bbde56a2525bc2e5f375d2d3315fc8f064a9f384ca6fd85332e0350a2fb67e9948b55205547c8f9cd1fcedf0dc2d6e28ea9e38a2bb3332a483c868aece235059a88890148613d38ba84fb6adb3dc37db9c44aee5148ac8fea75f56baf0ce286d8a5575b27927ac0e44b5c37d4c01c7a12755bfc4314d5e3c007d43d1b5b88a5318351a3f27a6b6851bba872b0a1499952c48b2a0380f650e415d7b11627a85e1c1858370708a785c3c5bd7c3ca59754a36e5428f3cf9dba239b718ac63d1334d3cbde7fa7ea952fd7f2178db6560762f51601302f37b971f02cdd7f060736d6e37a04bce928d76667fa3175a78310e242da4f9929d0642ff20bacb2210f87c050095a5aa0d1985ea421c60ad0023be947b73596c698dcf07c09280d04d7d750efedde0bacca8f78921be488c0a60f3e160a05ab71f77ce906c81ce547e190e4818f0bc095bd0d5133f60265ffeb9657e10285c43b33a35be10eb9e369971f5ea35500344e843cb377be2a15826ee7dcd069e0efca0df717e9bd185424e5291205476b74861778887570c5535a00fc766a30e8c97b47d46459d8fd571f46e037780a263bc7a72ddf255d03b527e3700d6d1140b5a86dbfe478fa17931f4714cbd0268a7ea9ff954198145ea744e821bed24cc43e8c4f40d6499409e0014c76bf87d33a6ce14ba40c9eaaa1349c22c171b3c8188a9def1b59ab9eed1f110d84aa1d820cb6d02c705dcd685312939dc3ca7adaf33d5748eafed12c55aaba0aebd45d405c4994ef5f4d62d6d681c52c2de17c137c3b0412450207d2047192db2aa7c92c6492e083a98b6b68ca87c1f9e8c8a760ef24df754b2d1dbd7e4e9e7de12215c66caaf9e751f2933e3bfcf9561625a9428d4ceb4c096fd17b1edd10ea588c58359a463792f7c427a88c16270bd7b7cbf8c18737c931b0b4fc0ba2359f1696fee342313aa8708ee95543c894d2c4a9fbb2f87774642718551ac8a2c20a7a48a2c47c7848132e942fd531ec632bc127312c22dd937fe355496c5169f2cd9d633223e0c6a8f7a7a281e206ca815ae5d98402fd4dfdd7ac9812765bb76c4470ed9a1bff1f933564df2f690b19c4a862280861bb00867de693f94ef3295fb6c29796495a9b17ec78b2e0e8ba1bf0c16dd0ea5e807b714e614f6a3045ec890c03016b70d06563db88bcfc4957bbf4a3bd6d7218b58e7354a3ab87182afb8749ca38c201bb900667c3ef5ee3b84e40ca5738e94b5d2333c6e7ce0bbb4b30c4d0b6f603775e3a076ab4ab8bc5f3df7310286e865dd10c3da47bfe8c448dc407b7e06946c7b96744351a75b6c761fb8dcbf6f79974b77d64ddf4519da338bd6fa43167fefbe746fba1179ec68f305b11a9d75ab293a446764f3b1841382966d19c4dc67eac90b8e51bf858c60ebfbb7aef3407a42afd5c0e7d5c018b7f49261171825dd3aa4ec4e52bb6c1f5162b83aadc41ee0eead1977d4329edc9370c1a60d964325e92e055001bbf7eb847e648018165a4d45a87e6ea68c2b256eac8cb587770e5b424cb61c7254affea1b74e20f5a7db6c9740b6e447f25344be95868c9795dcaff8ecf85bae3b27113da3abe894b144513c53f12e8e166a51ba48e72492c9eb4893594f21293144aa4d23d106ce2b223198fa2524c5c6ccc8d903796ba9db7f18afaf0c19fe73fe76756cc5fbde07097ca35fc98ec8f5238332505f0697efe0ccdf61fb164b6d0879fc990321375d9eaba8c48d2830500f919e55c41356a363f804cd9ebd97e0352b0cd5e4062a95409bf4023c87226dcbd54c1b0f54a817622fae65c27f48f0c4556cf47de08d61b7e00dc21b3390c341bdcbdc8ed9e1524e4a28b6319baabd759b2fb236f462200a56e716073c4e36108eb09b1d905aef4a7c8c51120de920b44a45db55a163e40f4f8a162c94963cd5d7645c2d126804817d2c883aea3b94e54ad57031d112ba1563caa8f5603a187bbc006f38a655bd2ba9e6e50570f51a4479dc5b08f33b70d891309b1163083e27e8aeacec61c6ff42da3f9e5062dc5196915d54c2c4a780b3a0a408964264382b6ff824243a9882942a975c60300b06ea11bfb7346cac0a7e7582b2953884c84dc42eafa6502ca6bed5208b6503d47b08ccf1dc4df515dd8cc9d61591780457c9fa74e81660843129ad178b7680d9c9c8374c6cd3ec141891fa7a263c105f8e099e89f8ca7823a4e1a79f8132d5450ab0a9b1d08da97756fd78856c1e958f5b42881ec51f50b83f87f420f2a458fbd4c3707aac52cc849a698c2b6112fae3aa386c3ed83c6db988c249f376657e50025b27391c97dad686e46f2a46000e1cd97078ba97163f6856dfff91cff9f71b3204003a65f051bdaf0b70516454acfc203fb32668118f6a4acb1adde6b783b8b83cc89ffccce208a16cd91bf583985530955427e4e15a59832fab8c9d63457e8c496912a40cb8ebdcd3d07d898aee467557a55aa6dbc735975212ced1d3be69c9729be8ffb5747c4ed857d045af2bcaa043e2cf6b47f6d194f53b78e22e8feb02ce3e6639e4f5688eadcc0ce1193f76fd4dfa87ac736bdcf5e4705b763c877d680805388c1901d6c24f896b2ca96226549c4eff75e4e44dda4f0145232ab575c4874e5e02cb4ae5f9db7bf65d7ac7c5c6aa108b8a00fbe4e7c917f2eee15aeaa8ffa561bcb8cace7169d00b0fa9f54191c02604c8f5782d25d00d255ce2aacc9275a02af18b795f72acc715990c472e2bc0b59b58f54b40072c97c264723dccb16b858e7b0a74747a9a56310a7b4ec08e8fa025cd0f34e68a1f986255e0bf2c3a7a6bc459b5f4156fe7f95482fd9d5df9484ad94b4a62761685b9b683f97f098bee3300629917380e2883aedf35dbfd91b22047d5607c74be2917f621a88c7c6032a036922fee7684359a430f2592c81772c6628b737d77fcb845286c112445600f0cb2bc1820765a6b6622f1aec14fcb2d36b5dedd45a894986f14d02f7ede2f208d2a4c6afac1d9a32516d69c2f0d3fbffc377463507b0ea6f2066ddd54908efef67d5f76151375e1443e2efe41e8f447899e2c34dc6eaf1808513ee5ee00f13b71f792716ccf2a9d567943f171060e1a93664a4144b8e766ccb9baf2081bf19c3b61ee257ae6a99357f9d45f55e7051eaa5dcbe8c4fd37c48dcc9688cb501bb6c8bdbca7e5bbcbfa49df6263fd989db33502db981d4af46f79c94d7918cf62fa82afca9c07128187d71e0a2ff5a0493e149c12f10461032806696563ed943959521d14b7691ee098440d79b9febc12b4598418ed8972a62fc137a754a31e1280846a6f445f5a4acc36ceb25b58999c0669b38d844db8c86c3938f5b0188ac16715356b53599480ec68b5c4fbf91f2111f0f871433b8fb7151c0745668732db7d25351c6acbdf29dab2d420ac5351de8985a2f1ca520bf8e53dbb7bb57ca9f0fa7f15b72e0a9ebe398334fba00b439c3f3ae6db76be461e2ce379a4f967368d5d79963295263d94625d2a3481b8cfc50227c562e90961b0c18645db2f49fde7ab7f661696b7356607cf9d768cca5c1142ba90b235d40b8cd81fa5c10d2f8f0e3dde268e55f88ff7bc8412d695a844901796dba515dc0f3e194a3b9048fca70bcfcd90a687667efb595a10e4b4237c23da7f1f2c499df33d79fa9aed38e638377d79b23a0c02f9599f84443445b29d665d5acfb5d1ba76df0482bac73165e388d007cb4ca5bc5be14b1b196ed1ada93de2afea96e7c717be97e28a5d51775a51c24882285fbac0c451592b2dd72e9fa4a2dfb1a999e1c7976e021fe544f2b461ea3b42ba1140ad765f082e6a3c0547d627af5ef2fdd69f362e4d5464797e3a642a698751d53898ea4343ba15d307a6f58994eef9831135e48669cb07881246cdbc80873b77fc7f43f500b4441c173e447049ab9bf204674e6f580d82658dbc9783394c021e04ffa9e252639733133daaa1a42868d30edff6c4763f04deb09ae0cb78840020fc86a396131e9ae63002c5b62d99796a849d428926f199b0053f32eb973cc6120468ed86595dfdebd183ec6c7f554a5756", 0x1000}, {&(0x7f0000001580)="69d1be4d151597e90c246bbde43cfdb7238de9bdd2ae219c6d19bd5007bf84e7b5817d5b66e7038f00c3a1ff05a8af03a45b445b0d8a0eaa476070b2d260ef86890080d0f64020280d4ef509f42c94ce3db57b3dde8fbaca9dc9c608ca091ab097fedf82c7c7afec5d1bb14c92578b9fe312505e98a04c5423dbca8d64f0ad064b88209d05e3241bbfb158c4623a0f975b89785bdaf0cf535e71528e83f56580b07b6ac0c60838c48601d9a690c3a1d2a453ae8da92afcd26a14c3c065232c8c5cf65dff69a09b2337d6be8f11a24253eeaa", 0xd2}], 0x6, &(0x7f0000001700)={0x98, 0x10a, 0x7, "ac4829dbef4ee4e417ae441d432f31a0eba512279d7e640c1681ec7c4a729b1e90400d2c1b6a2d7adfc1ca930eaa42e74eb3ede53f666691a52c2ec4b23948cc225647f2b3d6e664de7def2d14a024cf0219dff89a35a1d889c283ae2d0c3ff34322aa9d92942b944407885d816d72ab2cff74cabd46336e5c9d7af7c220b07fd3"}, 0x98}, 0x10) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8000, 0x20082) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000001c0)=r1) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008112, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x2, 0x0, 0x0, &(0x7f0000001800)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) fcntl$dupfd(r3, 0x406, r0) 15:37:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x101000, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x2000, 0x0) renameat(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:39 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x85) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000280)={0x39, 0x6, 0x0, {0x2, 0x3, 0x10, 0x0, '/selinux/status\x00'}}, 0x39) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x2) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x400040) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @default}, [@null, @null, @remote, @remote, @rose, @remote, @null, @null]}, &(0x7f0000000380)=0x48, 0x80000) r3 = fcntl$dupfd(r2, 0x0, r1) getsockname(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000180)=0x3a5) [ 314.249586] FAULT_INJECTION: forcing a failure. [ 314.249586] name failslab, interval 1, probability 0, space 0, times 0 [ 314.270333] CPU: 1 PID: 14756 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 314.280478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.290750] Call Trace: [ 314.293535] dump_stack+0x138/0x19c [ 314.293556] should_fail.cold+0x10f/0x159 [ 314.293575] should_failslab+0xdb/0x130 [ 314.301360] kmem_cache_alloc_trace+0x2ec/0x790 [ 314.301378] selinux_parse_opts_str+0x432/0xa30 [ 314.301391] ? selinux_socket_sock_rcv_skb+0x570/0x570 [ 314.301407] ? free_pages+0x46/0x50 [ 314.301421] ? selinux_sb_copy_data+0x21e/0x390 [ 314.301435] selinux_sb_remount+0x1fd/0x900 [ 314.301446] ? __phys_addr_symbol+0x23/0x60 [ 314.301458] ? selinux_sb_kern_mount+0x230/0x230 [ 314.301471] ? selinux_capable+0x36/0x40 [ 314.346081] ? security_capable+0x94/0xc0 [ 314.346098] security_sb_remount+0x7b/0xb0 [ 314.346112] do_mount+0x887/0x27d0 [ 314.346122] ? copy_mount_options+0x5c/0x2f0 [ 314.346136] ? copy_mount_string+0x40/0x40 [ 314.346148] ? copy_mount_options+0x1fe/0x2f0 [ 314.358238] SyS_mount+0xab/0x120 [ 314.358249] ? copy_mnt_ns+0x8c0/0x8c0 [ 314.358263] do_syscall_64+0x1eb/0x630 [ 314.358272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.358290] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.358298] RIP: 0033:0x45b69a [ 314.358304] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 314.414627] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 314.422062] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 314.429516] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 314.436810] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 314.444248] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:39 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:39 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x80, 0x4) [ 314.483175] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, 15:37:39 executing program 3 (fault-call:2 fault-nth:50): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:39 executing program 4: mkdir(&(0x7f0000000040)='./file1\x00', 0x1ae) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000200)=ANY=[@ANYBLOB="7573726a71756f74613d2c0028d40a5a28379394f926c26507e270c50c4ac2cc7028e8fc116f98d984d8e9c1663bfa247d81c10df7be3d7f5bd24421a2e3f8ff434170054341efcceacca6f45e330b9abd1fddf09e2dc7b1ca4706beaceb65235de2cc385246e928233f0500000000000000547b3d7be1a808e78ac12662a8a09ff26a84d62313e6d07e6c9aa5197c4f74f3b60d67ab3227b87a5bca2f817706f53380529672d075c19e7708633674e8def88f000000000000"]) [ 314.683476] FAULT_INJECTION: forcing a failure. [ 314.683476] name failslab, interval 1, probability 0, space 0, times 0 [ 314.717864] CPU: 1 PID: 14790 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 314.724933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.734295] Call Trace: [ 314.736887] dump_stack+0x138/0x19c [ 314.740534] should_fail.cold+0x10f/0x159 [ 314.744696] should_failslab+0xdb/0x130 [ 314.748666] __kmalloc_track_caller+0x2ef/0x790 [ 314.753327] ? lockref_put_or_lock+0x63/0x80 [ 314.757778] ? find_held_lock+0x35/0x130 [ 314.761831] ? ext4_remount+0xd1/0x1e50 [ 314.765800] kstrdup+0x3a/0x70 [ 314.768987] ext4_remount+0xd1/0x1e50 [ 314.772800] ? save_trace+0x290/0x290 [ 314.776605] ? __lock_is_held+0xb6/0x140 [ 314.780672] ? ext4_register_li_request+0x7d0/0x7d0 [ 314.785693] ? find_next_bit+0x28/0x30 [ 314.789662] ? shrink_dcache_sb+0x19e/0x1d0 [ 314.793984] ? shrink_dentry_list+0xad0/0xad0 [ 314.798489] do_remount_sb+0x161/0x560 [ 314.802540] ? ext4_register_li_request+0x7d0/0x7d0 [ 314.807896] ? user_get_super+0x200/0x200 [ 314.812091] ? ns_capable_common+0x12c/0x160 [ 314.816517] do_mount+0x13c9/0x27d0 [ 314.820232] ? retint_kernel+0x2d/0x2d [ 314.824157] ? copy_mount_string+0x40/0x40 [ 314.828412] ? __sanitizer_cov_trace_pc+0x1d/0x60 [ 314.833252] ? copy_mount_options+0x1fe/0x2f0 [ 314.837942] SyS_mount+0xab/0x120 [ 314.841656] ? copy_mnt_ns+0x8c0/0x8c0 [ 314.845551] do_syscall_64+0x1eb/0x630 [ 314.849427] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.854292] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 314.859477] RIP: 0033:0x45b69a [ 314.862672] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 314.870576] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 000000000045b69a [ 314.877849] RDX: 00007f4f7c65fae0 RSI: 0000000020000080 RDI: 00007f4f7c65fb00 [ 314.885470] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 314.892995] R10: 0000000000100020 R11: 0000000000000206 R12: 0000000000000004 [ 314.900272] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 314.908522] EXT4-fs (sda1): can't enable nombcache during remount 15:37:42 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:42 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet(0x2, 0x4000000000000001, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) fcntl$getown(r0, 0x9) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x101000) 15:37:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000100)=0x800) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:42 executing program 3 (fault-call:2 fault-nth:51): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400040) ioctl$RTC_PIE_ON(r0, 0x7005) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:42 executing program 0: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x101000) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x408800, 0x0) getdents64(r0, 0xffffffffffffffff, 0x8d63ed1d0841fc8d) 15:37:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000040)="b519b0bc0ad957f783f45e306191e14bafea321a437819f840060000803d51f7ae7093d9002dc3047d34a4d71efadfb443c5a3e6c99ab65b37493b") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x60, 0x2) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000200002002dbd7000fcdbdf250a30148201000000050000000400000014000100fe8000000001000000001900000000bb14000200ff010000000000000000000000000001"], 0xffffff03}}, 0x0) accept(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000140)=0x80) 15:37:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 317.334165] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 317.341869] EXT4-fs (sda1): can't enable nombcache during remount 15:37:42 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x2) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x12000, 0x1}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet6(0xa, 0x2, 0x80000001) r3 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0xffffffffffffff00, 0x4) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:42 executing program 0: syz_open_procfs(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) connect(r0, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x8}}, 0x80) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r2, 0x1400001) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) r3 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) sched_getattr(r3, &(0x7f00000000c0), 0x30, 0x0) io_setup(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x2], 0x2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x175, 0x2008, 0x4, 0x79, 0x6, [{0x0, 0x2, 0x9, 0x0, 0x0, 0x2}, {0x3, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x1000}, {0x1, 0x6, 0x575f}, {0x2a95, 0x2e, 0x180, 0x0, 0x0, 0x2}, {0x7, 0x31ec000000000000, 0x2, 0x0, 0x0, 0x1407}, {0xa85, 0x8, 0xffff, 0x0, 0x0, 0x2000}]}) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)) sched_setattr(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000, 0x1000000000000003}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) [ 317.450423] FAULT_INJECTION: forcing a failure. [ 317.450423] name failslab, interval 1, probability 0, space 0, times 0 [ 317.463043] CPU: 0 PID: 14827 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 317.470173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.479970] Call Trace: [ 317.482581] dump_stack+0x138/0x19c [ 317.486240] should_fail.cold+0x10f/0x159 [ 317.490533] should_failslab+0xdb/0x130 [ 317.494514] kmem_cache_alloc_trace+0x2ec/0x790 [ 317.499263] ? bd_set_size+0x89/0xb0 [ 317.502974] ? devm_device_remove_groups+0x50/0x50 [ 317.507893] kobject_uevent_env+0x2fa/0xc41 [ 317.512213] ? lock_downgrade+0x6e0/0x6e0 [ 317.516389] kobject_uevent+0x20/0x26 [ 317.520182] loop_clr_fd+0x4a7/0xae0 [ 317.523882] lo_ioctl+0x8d0/0x1c70 [ 317.527421] ? SyS_mount+0xcf/0x120 [ 317.531044] ? save_stack+0xa9/0xd0 [ 317.534665] ? loop_probe+0x160/0x160 [ 317.538460] blkdev_ioctl+0x983/0x1880 [ 317.542336] ? blkpg_ioctl+0x980/0x980 [ 317.546258] ? __might_sleep+0x93/0xb0 [ 317.550146] ? __fget+0x210/0x370 [ 317.553605] block_ioctl+0xde/0x120 [ 317.557232] ? blkdev_fallocate+0x3b0/0x3b0 [ 317.561553] do_vfs_ioctl+0x7b9/0x1070 [ 317.565430] ? selinux_file_mprotect+0x5d0/0x5d0 [ 317.570180] ? lock_downgrade+0x6e0/0x6e0 [ 317.574335] ? ioctl_preallocate+0x1c0/0x1c0 [ 317.578744] ? __fget+0x237/0x370 [ 317.582186] ? security_file_ioctl+0x8f/0xc0 [ 317.586582] SyS_ioctl+0x8f/0xc0 [ 317.590024] ? do_vfs_ioctl+0x1070/0x1070 [ 317.594172] do_syscall_64+0x1eb/0x630 [ 317.598053] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.602896] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 317.608162] RIP: 0033:0x458a97 [ 317.611338] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 317.619045] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 317.626302] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 317.633562] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 317.640826] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 317.648085] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:42 executing program 3 (fault-call:2 fault-nth:52): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 317.744939] EXT4-fs (sda1): re-mounted. Opts: usrjquota=, [ 317.857002] EXT4-fs (sda1): can't enable nombcache during remount [ 317.940396] FAULT_INJECTION: forcing a failure. [ 317.940396] name failslab, interval 1, probability 0, space 0, times 0 [ 317.957390] CPU: 0 PID: 14880 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 317.964442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.973806] Call Trace: [ 317.976406] dump_stack+0x138/0x19c [ 317.980329] should_fail.cold+0x10f/0x159 [ 317.984612] should_failslab+0xdb/0x130 [ 317.988592] __kmalloc+0x2f3/0x7a0 [ 317.992166] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 317.997649] ? kobject_uevent_env+0x2fa/0xc41 [ 318.002149] ? rcu_read_lock_sched_held+0x110/0x130 [ 318.007174] ? kobject_get_path+0xbb/0x1a0 [ 318.011418] kobject_get_path+0xbb/0x1a0 [ 318.015485] ? devm_device_remove_groups+0x50/0x50 [ 318.020417] kobject_uevent_env+0x31e/0xc41 [ 318.024743] ? lock_downgrade+0x6e0/0x6e0 [ 318.028902] kobject_uevent+0x20/0x26 [ 318.032709] loop_clr_fd+0x4a7/0xae0 [ 318.036423] lo_ioctl+0x8d0/0x1c70 [ 318.039962] ? SyS_mount+0xcf/0x120 [ 318.043587] ? save_stack+0xa9/0xd0 [ 318.047223] ? loop_probe+0x160/0x160 [ 318.051032] blkdev_ioctl+0x983/0x1880 [ 318.054919] ? blkpg_ioctl+0x980/0x980 [ 318.058812] ? __might_sleep+0x93/0xb0 [ 318.062701] ? __fget+0x210/0x370 [ 318.066154] block_ioctl+0xde/0x120 [ 318.069783] ? blkdev_fallocate+0x3b0/0x3b0 [ 318.074106] do_vfs_ioctl+0x7b9/0x1070 [ 318.077994] ? selinux_file_mprotect+0x5d0/0x5d0 [ 318.082754] ? lock_downgrade+0x6e0/0x6e0 [ 318.086904] ? ioctl_preallocate+0x1c0/0x1c0 [ 318.091315] ? __fget+0x237/0x370 [ 318.094774] ? security_file_ioctl+0x8f/0xc0 [ 318.099188] SyS_ioctl+0x8f/0xc0 [ 318.102556] ? do_vfs_ioctl+0x1070/0x1070 [ 318.106709] do_syscall_64+0x1eb/0x630 [ 318.110599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 318.115453] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 318.120639] RIP: 0033:0x458a97 [ 318.123823] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.131535] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 318.139909] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 318.147187] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 318.154474] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 318.161750] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:45 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:45 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) getsockname$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000008c0)=0xe8) syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f00000002c0)="83647545d82a2f557929df4181517fc28cc3c3dd32830f7206dfcb8aeca324d4c624d4bf078a60d54b7341fa63b454780f39b82fa44fae1432c93b52de8e1404932d6b2f48c714da907223844bf9061001d0d2a2b4897df848367751d1ec2d947cd8242d988bc8f7233c8cdfad12067872b5b9edee0e7725c2288686c53852c2aae6f9ed4e33a4d1724340e6e86e88d33199f901090a757c7739c004e92399efa1e3ac90a2ac33f69ebc66c4c47a7accea60380b560a7c30fdfe9889e52a349fb29dcfcf0111faabcb1ce0a4deaf9e9ecf8087c755d4e5339156b532ed96d9c42a9d61747fd017407431ab8d70801032ac7ef0f7d6f1f0d0", 0xf8, 0x7}, {&(0x7f00000003c0)="d34f2b23efd257b8a0668439cb51845007fd48e1ffe49ac8fb92c490c7f8679a7e18118807699db73746113af4c280371dfb898adba1774f6c200e3fb1234bb165e8a8133d078d11144f2deeb8d4a09b0bc2d1adc7028de8b7bd55c9da2e538cfe10441143a8f8ca6cc533031e46301f382e3af8021d37b88fa9ee84939d59fe6b9cd09785264054604ee66702b3609953a416994d698caf86797a36556f950aa4013e8b6385e02d887247b82c9f8e3d163e15d7639d0a57651e5736c28ff3fcf2", 0xc1, 0xa3b}], 0x2000, &(0x7f0000000900)={[{@nointegrity='nointegrity'}, {@uid={'uid', 0x3d, r1}}, {@grpquota='grpquota'}, {@errors_remount='errors=remount-ro'}], [{@obj_role={'obj_role'}}, {@fowner_lt={'fowner<', r2}}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_eq={'fowner', 0x3d, r4}}]}) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@usrjquota='usrjquota='}]}) 15:37:45 executing program 2 (fault-call:7 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:37:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3b, &(0x7f0000000340)='.md5sumuser#eth1{self:,$!posix_acl_access,selinuxvmnet1-lo-', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000480)={r4, r1, 0xbe}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x8, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x80}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:45 executing program 3 (fault-call:2 fault-nth:53): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:45 executing program 0: syz_open_procfs(0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) connect(r0, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x3, @rand_addr=0x8}}, 0x80) r2 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r2, 0x1400001) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) sendfile(r1, r2, 0x0, 0xfffffdef) r3 = getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) sched_getattr(r3, &(0x7f00000000c0), 0x30, 0x0) io_setup(0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x40) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000001c0)=[0x2, 0x2], 0x2) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000003c0)={0x175, 0x2008, 0x4, 0x79, 0x6, [{0x0, 0x2, 0x9, 0x0, 0x0, 0x2}, {0x3, 0xfffffffffffffffb, 0x5, 0x0, 0x0, 0x1000}, {0x1, 0x6, 0x575f}, {0x2a95, 0x2e, 0x180, 0x0, 0x0, 0x2}, {0x7, 0x31ec000000000000, 0x2, 0x0, 0x0, 0x1407}, {0xa85, 0x8, 0xffff, 0x0, 0x0, 0x2000}]}) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffd8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000200)) sched_setattr(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000, 0x1000000000000003}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 15:37:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x3c99830876959646, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)={{0x10f, 0xfff, 0x8, 0x51, 0x2d0, 0x5, 0x340, 0x3846}, "98744e05982bba70981f6f381786f132e262e09d964a2cae1518c2d32244c6b76ad14b90beefc16a05e65d02f9ff8c7d0d0402eae8e748f1d20da554ff3cd5d554872a8a394690c8652c811046e2147e673ff89dff814f75a50b74d3e140ec03d976bfea998a19cc23b9ef63436fef66017ba2ab36e3d5956c6fa78ccd82c7d5123f752d456249e30b0b8f817fe59236d5bb4e61580a1718154508ec", [[], [], []]}, 0x3bc) dup3(r1, r0, 0x0) [ 320.302878] FAULT_INJECTION: forcing a failure. [ 320.302878] name failslab, interval 1, probability 0, space 0, times 0 [ 320.317571] EXT4-fs (sda1): can't enable nombcache during remount 15:37:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000100)={0x7, 0x81}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:45 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 320.368790] CPU: 1 PID: 14897 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 320.375864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.385233] Call Trace: [ 320.387838] dump_stack+0x138/0x19c [ 320.391488] should_fail.cold+0x10f/0x159 [ 320.395660] should_failslab+0xdb/0x130 [ 320.399654] __kmalloc+0x2f3/0x7a0 [ 320.403211] ? __sb_end_write+0xc1/0x100 [ 320.407292] ? strnlen_user+0x120/0x1a0 [ 320.411276] ? SyS_memfd_create+0xba/0x3a0 [ 320.415527] SyS_memfd_create+0xba/0x3a0 [ 320.419611] ? shmem_fcntl+0x130/0x130 [ 320.423517] ? do_syscall_64+0x53/0x630 [ 320.427516] ? shmem_fcntl+0x130/0x130 [ 320.431418] do_syscall_64+0x1eb/0x630 [ 320.435310] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.440237] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.445431] RIP: 0033:0x458c29 [ 320.448619] RSP: 002b:00007f5ff3500a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 320.456338] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:37:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB="dd000000000000000100000000000000000000004101bdc1363bf51f0000020003000000000000000000000000100000010000800000000000000000fcffffff030000000000000000000000000000000000020000000000"]) dup(r1) 15:37:45 executing program 2 (fault-call:7 fault-nth:1): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 320.463643] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 320.470930] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 320.478218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ff35016d4 [ 320.485501] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 [ 320.501660] FAULT_INJECTION: forcing a failure. [ 320.501660] name failslab, interval 1, probability 0, space 0, times 0 [ 320.521615] CPU: 0 PID: 14902 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 320.528880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.538255] Call Trace: [ 320.540859] dump_stack+0x138/0x19c [ 320.544504] should_fail.cold+0x10f/0x159 [ 320.548677] should_failslab+0xdb/0x130 [ 320.552708] __kmalloc+0x2f3/0x7a0 [ 320.556283] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 320.561747] ? kobject_uevent_env+0x2fa/0xc41 [ 320.566256] ? rcu_read_lock_sched_held+0x110/0x130 [ 320.571282] ? kobject_get_path+0xbb/0x1a0 [ 320.575971] kobject_get_path+0xbb/0x1a0 [ 320.580044] ? devm_device_remove_groups+0x50/0x50 [ 320.584985] kobject_uevent_env+0x31e/0xc41 [ 320.589311] ? lock_downgrade+0x6e0/0x6e0 [ 320.593474] kobject_uevent+0x20/0x26 [ 320.597285] loop_clr_fd+0x4a7/0xae0 [ 320.601009] lo_ioctl+0x8d0/0x1c70 [ 320.604554] ? SyS_mount+0xcf/0x120 [ 320.608186] ? save_stack+0xa9/0xd0 [ 320.611817] ? loop_probe+0x160/0x160 [ 320.615624] blkdev_ioctl+0x983/0x1880 [ 320.619546] ? blkpg_ioctl+0x980/0x980 [ 320.623506] ? __might_sleep+0x93/0xb0 [ 320.627398] ? __fget+0x210/0x370 [ 320.630857] block_ioctl+0xde/0x120 [ 320.634486] ? blkdev_fallocate+0x3b0/0x3b0 [ 320.638814] do_vfs_ioctl+0x7b9/0x1070 [ 320.642856] ? selinux_file_mprotect+0x5d0/0x5d0 [ 320.647712] ? lock_downgrade+0x6e0/0x6e0 [ 320.651871] ? ioctl_preallocate+0x1c0/0x1c0 [ 320.656303] ? __fget+0x237/0x370 [ 320.659770] ? security_file_ioctl+0x8f/0xc0 [ 320.664185] SyS_ioctl+0x8f/0xc0 [ 320.667557] ? do_vfs_ioctl+0x1070/0x1070 [ 320.671713] do_syscall_64+0x1eb/0x630 [ 320.675605] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.680461] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.685652] RIP: 0033:0x458a97 [ 320.688837] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.696557] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 320.703837] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 320.711125] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 320.718410] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 320.725693] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:45 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:45 executing program 3 (fault-call:2 fault-nth:54): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 320.859349] FAULT_INJECTION: forcing a failure. [ 320.859349] name failslab, interval 1, probability 0, space 0, times 0 [ 320.883050] CPU: 0 PID: 14933 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 320.890131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.899667] Call Trace: [ 320.899689] dump_stack+0x138/0x19c [ 320.905904] should_fail.cold+0x10f/0x159 [ 320.910060] should_failslab+0xdb/0x130 [ 320.910085] kmem_cache_alloc+0x2d9/0x780 [ 320.910098] ? __alloc_fd+0x1d4/0x4a0 [ 320.910115] __d_alloc+0x2d/0x9f0 [ 320.910127] ? lock_downgrade+0x6e0/0x6e0 [ 320.910140] d_alloc_pseudo+0x1e/0x30 [ 320.910151] __shmem_file_setup.part.0+0xd8/0x400 [ 320.910160] ? __alloc_fd+0x1d4/0x4a0 [ 320.910169] ? shmem_fill_super+0x8c0/0x8c0 [ 320.910184] SyS_memfd_create+0x1f9/0x3a0 [ 320.950677] ? shmem_fcntl+0x130/0x130 [ 320.954584] ? do_syscall_64+0x53/0x630 [ 320.958576] ? shmem_fcntl+0x130/0x130 [ 320.962719] do_syscall_64+0x1eb/0x630 [ 320.968124] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.972987] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 320.978182] RIP: 0033:0x458c29 [ 320.981381] RSP: 002b:00007f5ff3500a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 320.989102] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 320.996384] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 15:37:46 executing program 4: r0 = gettid() r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0xfffffffffffffffd, &(0x7f0000000140)=0x1) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) readv(r2, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/54, 0x407a}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x1) dup3(r3, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) unshare(0x400) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) tkill(r0, 0x1000000000016) 15:37:46 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 321.003664] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 321.010942] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ff35016d4 [ 321.018220] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 [ 321.031867] EXT4-fs (sda1): can't enable nombcache during remount 15:37:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000100)={0x3, &(0x7f0000000280)=""/200, &(0x7f0000000540)=[{0xe6, 0xac, 0x4, &(0x7f0000000380)=""/172}, {0x0, 0xc4, 0x7fff, &(0x7f0000000440)=""/196}, {0x1, 0xa, 0x401, &(0x7f0000000080)=""/10}]}) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x9, 0x208000) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000005c0)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000600)={r2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0, 0x400000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) write$P9_RAUTH(r1, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x1, 0x0, 0x5}}, 0x14) [ 321.090421] FAULT_INJECTION: forcing a failure. [ 321.090421] name failslab, interval 1, probability 0, space 0, times 0 [ 321.118526] CPU: 1 PID: 14940 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 321.125595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.135966] Call Trace: 15:37:46 executing program 2 (fault-call:7 fault-nth:2): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:37:46 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x90c00) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000140)={0x2, 0x1, [0xfffffffffffffff7, 0x0, 0x6, 0x3cb8, 0x3, 0x0, 0x0, 0x6]}) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfa, 0x101001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000180), 0x4) [ 321.138585] dump_stack+0x138/0x19c [ 321.142611] should_fail.cold+0x10f/0x159 [ 321.146860] should_failslab+0xdb/0x130 [ 321.150859] kmem_cache_alloc_node+0x28a/0x780 [ 321.155463] __alloc_skb+0x9c/0x500 [ 321.159105] ? skb_scrub_packet+0x4b0/0x4b0 [ 321.163438] ? netlink_has_listeners+0x20a/0x330 [ 321.168187] kobject_uevent_env+0x74c/0xc41 [ 321.172609] kobject_uevent+0x20/0x26 [ 321.176523] loop_clr_fd+0x4a7/0xae0 [ 321.180224] lo_ioctl+0x8d0/0x1c70 [ 321.183757] ? SyS_mount+0xcf/0x120 [ 321.187466] ? save_stack+0xa9/0xd0 [ 321.191082] ? loop_probe+0x160/0x160 [ 321.197872] blkdev_ioctl+0x983/0x1880 [ 321.201874] ? blkpg_ioctl+0x980/0x980 [ 321.205785] ? __might_sleep+0x93/0xb0 [ 321.209669] ? __fget+0x210/0x370 [ 321.213108] block_ioctl+0xde/0x120 [ 321.216718] ? blkdev_fallocate+0x3b0/0x3b0 [ 321.221023] do_vfs_ioctl+0x7b9/0x1070 [ 321.224904] ? selinux_file_mprotect+0x5d0/0x5d0 [ 321.229660] ? lock_downgrade+0x6e0/0x6e0 [ 321.233820] ? ioctl_preallocate+0x1c0/0x1c0 [ 321.238237] ? __fget+0x237/0x370 [ 321.241695] ? security_file_ioctl+0x8f/0xc0 [ 321.246113] SyS_ioctl+0x8f/0xc0 [ 321.249494] ? do_vfs_ioctl+0x1070/0x1070 [ 321.253643] do_syscall_64+0x1eb/0x630 [ 321.257516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.262349] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.267525] RIP: 0033:0x458a97 [ 321.270706] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.278411] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 321.285669] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 321.292923] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 321.300175] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 321.307428] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:46 executing program 3 (fault-call:2 fault-nth:55): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') openat$cgroup_type(r2, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="00000000bb9edad4e7d0ea471e4add6008bd437cd1a9bc32bc4e10ebc37504130abb323662db8e897a650b4f34855fd65a939f475889277bfceda366f240ddd04ef0f546668d", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x20044004) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f00000000c0)=0x2, 0x4) 15:37:46 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 321.422140] FAULT_INJECTION: forcing a failure. [ 321.422140] name failslab, interval 1, probability 0, space 0, times 0 [ 321.438262] CPU: 1 PID: 14963 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 321.445403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.445408] Call Trace: [ 321.445430] dump_stack+0x138/0x19c [ 321.445449] should_fail.cold+0x10f/0x159 [ 321.445465] should_failslab+0xdb/0x130 [ 321.445475] kmem_cache_alloc+0x2d9/0x780 [ 321.445488] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 321.478973] ? rcu_read_lock_sched_held+0x110/0x130 [ 321.484086] ? shmem_destroy_callback+0xa0/0xa0 [ 321.484099] shmem_alloc_inode+0x1c/0x50 [ 321.484110] alloc_inode+0x66/0x190 [ 321.484121] new_inode_pseudo+0x19/0xf0 [ 321.484131] new_inode+0x1f/0x40 [ 321.484141] shmem_get_inode+0x75/0x750 [ 321.507850] __shmem_file_setup.part.0+0x111/0x400 [ 321.512887] ? __alloc_fd+0x1d4/0x4a0 [ 321.516999] ? shmem_fill_super+0x8c0/0x8c0 15:37:46 executing program 2 (fault-call:7 fault-nth:3): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 321.521337] SyS_memfd_create+0x1f9/0x3a0 [ 321.521348] ? shmem_fcntl+0x130/0x130 [ 321.521358] ? do_syscall_64+0x53/0x630 [ 321.521369] ? shmem_fcntl+0x130/0x130 [ 321.521381] do_syscall_64+0x1eb/0x630 [ 321.521390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.521406] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.521417] RIP: 0033:0x458c29 [ 321.529432] RSP: 002b:00007f5ff3500a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 321.529442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:37:46 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'ip6erspan0\x00', {0x2, 0x4e20, @multicast1}}) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) [ 321.529448] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 321.529454] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 321.529460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ff35016d4 [ 321.529465] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 [ 321.606429] EXT4-fs (sda1): can't enable nombcache during remount 15:37:46 executing program 4: sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f529adb5c65e18dfb5e341277faae15ab79b7c45b02f1e5304d7c4740cfa"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:37:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000001000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4) ustat(0xd95e, &(0x7f0000000000)) [ 321.655548] FAULT_INJECTION: forcing a failure. [ 321.655548] name failslab, interval 1, probability 0, space 0, times 0 [ 321.667814] FAULT_INJECTION: forcing a failure. [ 321.667814] name failslab, interval 1, probability 0, space 0, times 0 [ 321.679320] CPU: 0 PID: 14971 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 321.686356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.695717] Call Trace: [ 321.698302] dump_stack+0x138/0x19c [ 321.701938] should_fail.cold+0x10f/0x159 [ 321.706105] should_failslab+0xdb/0x130 [ 321.710092] kmem_cache_alloc_node+0x28a/0x780 [ 321.714771] __alloc_skb+0x9c/0x500 [ 321.718392] ? skb_scrub_packet+0x4b0/0x4b0 [ 321.722718] ? netlink_has_listeners+0x20a/0x330 [ 321.727486] kobject_uevent_env+0x74c/0xc41 [ 321.731802] ? lock_downgrade+0x6e0/0x6e0 [ 321.735953] kobject_uevent+0x20/0x26 [ 321.739751] loop_clr_fd+0x4a7/0xae0 [ 321.743529] lo_ioctl+0x8d0/0x1c70 [ 321.747071] ? SyS_mount+0xcf/0x120 [ 321.750707] ? save_stack+0xa9/0xd0 [ 321.754326] ? loop_probe+0x160/0x160 [ 321.758124] blkdev_ioctl+0x983/0x1880 [ 321.762022] ? blkpg_ioctl+0x980/0x980 [ 321.765913] ? __might_sleep+0x93/0xb0 [ 321.769794] ? __fget+0x210/0x370 [ 321.773448] block_ioctl+0xde/0x120 [ 321.777074] ? blkdev_fallocate+0x3b0/0x3b0 [ 321.781395] do_vfs_ioctl+0x7b9/0x1070 [ 321.785438] ? selinux_file_mprotect+0x5d0/0x5d0 [ 321.790212] ? lock_downgrade+0x6e0/0x6e0 [ 321.794365] ? ioctl_preallocate+0x1c0/0x1c0 [ 321.798777] ? __fget+0x237/0x370 [ 321.802261] ? security_file_ioctl+0x8f/0xc0 [ 321.806670] SyS_ioctl+0x8f/0xc0 [ 321.810040] ? do_vfs_ioctl+0x1070/0x1070 [ 321.814461] do_syscall_64+0x1eb/0x630 [ 321.819047] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.823986] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.829182] RIP: 0033:0x458a97 [ 321.832381] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.840091] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 321.847878] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 321.855679] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 321.862945] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 321.870216] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 321.877500] CPU: 1 PID: 14984 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 321.884526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.884531] Call Trace: [ 321.884548] dump_stack+0x138/0x19c [ 321.884564] should_fail.cold+0x10f/0x159 [ 321.896716] should_failslab+0xdb/0x130 [ 321.896733] kmem_cache_alloc+0x2d9/0x780 [ 321.912781] ? shmem_alloc_inode+0x1c/0x50 [ 321.917057] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 321.922532] selinux_inode_alloc_security+0xb6/0x2a0 [ 321.927657] security_inode_alloc+0x9a/0xe0 [ 321.931995] inode_init_always+0x552/0xaf0 [ 321.932014] alloc_inode+0x83/0x190 [ 321.932023] new_inode_pseudo+0x19/0xf0 [ 321.932033] new_inode+0x1f/0x40 [ 321.939880] shmem_get_inode+0x75/0x750 [ 321.939895] __shmem_file_setup.part.0+0x111/0x400 [ 321.939906] ? __alloc_fd+0x1d4/0x4a0 [ 321.939916] ? shmem_fill_super+0x8c0/0x8c0 [ 321.939937] SyS_memfd_create+0x1f9/0x3a0 [ 321.969512] ? shmem_fcntl+0x130/0x130 [ 321.973412] ? do_syscall_64+0x53/0x630 [ 321.977399] ? shmem_fcntl+0x130/0x130 [ 321.981300] do_syscall_64+0x1eb/0x630 [ 321.985200] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.990061] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.990072] RIP: 0033:0x458c29 [ 321.990077] RSP: 002b:00007f5ff3500a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f 15:37:47 executing program 3 (fault-call:2 fault-nth:56): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 321.990087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 321.990092] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 321.990098] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 321.990102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ff35016d4 [ 321.990107] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 [ 322.095106] EXT4-fs (sda1): can't enable nombcache during remount [ 322.200705] FAULT_INJECTION: forcing a failure. [ 322.200705] name failslab, interval 1, probability 0, space 0, times 0 [ 322.212300] CPU: 0 PID: 15001 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 322.219392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.228772] Call Trace: [ 322.231379] dump_stack+0x138/0x19c [ 322.235009] should_fail.cold+0x10f/0x159 [ 322.239150] should_failslab+0xdb/0x130 [ 322.243121] kmem_cache_alloc_node+0x28a/0x780 [ 322.247725] __alloc_skb+0x9c/0x500 [ 322.251359] ? skb_scrub_packet+0x4b0/0x4b0 [ 322.255672] ? netlink_has_listeners+0x20a/0x330 [ 322.260447] kobject_uevent_env+0x74c/0xc41 [ 322.264871] kobject_uevent+0x20/0x26 [ 322.268689] loop_clr_fd+0x4a7/0xae0 [ 322.272394] lo_ioctl+0x8d0/0x1c70 [ 322.276125] ? SyS_mount+0xcf/0x120 [ 322.279738] ? save_stack+0xa9/0xd0 [ 322.283360] ? loop_probe+0x160/0x160 [ 322.287158] blkdev_ioctl+0x983/0x1880 [ 322.291165] ? blkpg_ioctl+0x980/0x980 [ 322.295060] ? __might_sleep+0x93/0xb0 [ 322.298932] ? __fget+0x210/0x370 [ 322.302554] block_ioctl+0xde/0x120 [ 322.306195] ? blkdev_fallocate+0x3b0/0x3b0 [ 322.310502] do_vfs_ioctl+0x7b9/0x1070 [ 322.314375] ? selinux_file_mprotect+0x5d0/0x5d0 [ 322.319113] ? lock_downgrade+0x6e0/0x6e0 [ 322.323436] ? ioctl_preallocate+0x1c0/0x1c0 [ 322.327837] ? __fget+0x237/0x370 [ 322.331384] ? security_file_ioctl+0x8f/0xc0 [ 322.335797] SyS_ioctl+0x8f/0xc0 [ 322.339145] ? do_vfs_ioctl+0x1070/0x1070 [ 322.343289] do_syscall_64+0x1eb/0x630 [ 322.347173] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.352036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.357222] RIP: 0033:0x458a97 [ 322.360491] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 322.368214] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 322.375475] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 322.382741] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 322.390031] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 322.397310] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:49 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xa, 0x0, &(0x7f0000000140)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mq_unlink(&(0x7f00000002c0)='\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x100, 0x1ff, 0x9, 0x10000, 0x1f}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0xae, "456d36dc9b971404b0fcbf1873e1c51c960a2114abb502b6ad1d8748e76f1b3748b499a54c5e7313d5db0a320cd8f4fc28cbfb3d4c1cfe8acc61cc69d8ffe2180a2de4e8735f660ce7ffe95b0b6dc1db89084c9188f289ea71292109650b600e323b944a865267cf7d55aaedb5b90da21861bb1ef20de4590d60375e2d69ec5e5fb128cc8d33c8d094685a2404cac959f6e1e12dd9787a50d36af6a7573265ad67ee4c1a9afecfa82ac4749defe4"}, &(0x7f0000000280)=0xb6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x8, 0x4) 15:37:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r3 = msgget$private(0x0, 0x2) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000280)=""/68) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x400, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000100)={{0xffffffffffffffff, 0xfffffffffffff7e1}, 0x40}, 0x10) 15:37:49 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:49 executing program 2 (fault-call:7 fault-nth:4): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:37:49 executing program 3 (fault-call:2 fault-nth:57): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) 15:37:49 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x1, 0x4) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000080)=0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x8) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='nsfs\x00', 0x2000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000180)={{0x0, @name="874b145446c9d92ecffb2e612306c9f047ef8030f1921085915239b1c4688280"}, "f5ea8d6dd9a56061adb0e497358eee2c5be85b96468683f3412d93431fa5993c", 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000002c0)="10217bae00ac6e16d329a5f5f8a6f0e68336b58295e88e8a5eadc1176a4393cf7daa92c51fa8f4abdb89412a7c7d727387c2fea3635b37a94c43fd7e7f4a436015b4c97c526015c22a0ca4dceaf4368872cadc40a388bb2f67b2ca4ac0206353ece6f2deb4acf996520d86c510e1a55d3f7be6c917a360eb5f22bfc1270eb8c0680be367d981b5ec3506063d452c31ea64d53c0190b57f4335d2c89c6d19b58418ea78839209bfcd071a55afb4f5969b8771751b820ca6b490779d2ad4e4be517b13f459db853fa8488b4709a7568e7dca10", &(0x7f00000003c0)="d71029ced4189a6f2c7ccadfe7e467e811354d7a80e6e5976fa17d6b76911274cf97e94dbce7e5f445f729ecb02d784491c56c1cbdd26087956247d60ec6a69472f464ea6f79bf216a2314125af1a7"}, 0x20) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x200}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x4c, &(0x7f0000000500)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x9}}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0x2, @empty, 0xc4}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000600)={r1, 0xffffffffffffff44, 0x0, 0x6, 0x1000, 0x7, 0x4, 0x3, {r2, @in6={{0xa, 0x4e21, 0x7f, @remote, 0x4}}, 0x7, 0x7, 0x400, 0xa7, 0x200}}, &(0x7f00000006c0)=0xb0) r3 = gettid() setpriority(0xb7639dcdcc840384, r3, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000700)) lsetxattr$security_smack_transmute(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='security.SMACK64TRANSMUTE\x00', &(0x7f00000007c0)='TRUE', 0x4, 0x2) setxattr$trusted_overlay_origin(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='trusted.overlay.origin\x00', &(0x7f0000000880)='y\x00', 0x2, 0x3) getpeername(r0, &(0x7f00000008c0)=@ethernet={0x0, @random}, &(0x7f0000000940)=0x80) r4 = accept$inet6(r0, &(0x7f0000000980)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000009c0)=0x1c) r5 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/self/attr/current\x00', 0x2, 0x0) write$P9_RLINK(r0, &(0x7f0000000a40)={0x7, 0x47, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000a80)='htcp\x00', 0x5) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000ac0)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r6, 0x20, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8}}, ["", ""]}, 0x24}}, 0x4000000) socket$unix(0x1, 0x2, 0x0) r7 = syz_open_dev$vivid(&(0x7f0000000cc0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000d00)={0x0, @bt={0x3, 0x4a7, 0x1, 0x1, 0xffffffffffffff24, 0x200, 0x7, 0x80000001, 0x7, 0x2, 0x8, 0x200, 0x3, 0x0, 0x2, 0x8}}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000f40)={0x16, 0xc6, &(0x7f0000000e40)="1f3765dfe2726f6c131591a96ba52a289a129526321cbd3e5bf7e4017563d56771ee4e74436eff80d1fe6b5e8a8a258fc94f313a7d6624a74360dabed07cb95548237dc8c9298bd121330d11fda9c03afec997cf154485e09f13f6266d54fb0d0bc2d4487a741ba5d3293f5b4a450fca0b7daae1dab033e39ee86d473570e3d994c739e6fb427349ddf769e8ee2e385e07e86e13af16db320eb2504481e1ac20288cad06243413bd34a1b408bb9861f8088d2cfcffae8fdfb19b01dc226ee4695cce417c53a5"}) 15:37:49 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pselect6(0x169, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3e) ptrace$cont(0x18, r0, 0xfffffffffffffffe, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x10000000, 0xc, 0xfa, r0}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = shmget$private(0x0, 0x2000, 0x54000820, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() r5 = getegid() shmctl$IPC_SET(r1, 0x1, &(0x7f00000002c0)={{0x80, r2, r3, r4, r5, 0x20}, 0x200, 0x8565, 0x100000001, 0x7, r0, r0, 0xffff}) ptrace$cont(0x1f, r0, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0xe8f2}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000400)={r7, 0xffffffffffffff7f, 0x2, 0x7ff}, 0x10) [ 324.112801] FAULT_INJECTION: forcing a failure. [ 324.112801] name failslab, interval 1, probability 0, space 0, times 0 [ 324.143952] EXT4-fs (sda1): can't enable nombcache during remount [ 324.153962] CPU: 1 PID: 15013 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 324.161103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.170554] Call Trace: [ 324.173156] dump_stack+0x138/0x19c [ 324.176807] should_fail.cold+0x10f/0x159 [ 324.180974] should_failslab+0xdb/0x130 [ 324.184975] kmem_cache_alloc+0x2d9/0x780 [ 324.189129] ? lock_downgrade+0x6e0/0x6e0 [ 324.193281] get_empty_filp+0x8c/0x3b0 [ 324.197252] alloc_file+0x23/0x440 [ 324.200802] __shmem_file_setup.part.0+0x1b1/0x400 [ 324.205732] ? __alloc_fd+0x1d4/0x4a0 [ 324.209521] ? shmem_fill_super+0x8c0/0x8c0 [ 324.213895] SyS_memfd_create+0x1f9/0x3a0 [ 324.218037] ? shmem_fcntl+0x130/0x130 [ 324.222034] ? do_syscall_64+0x53/0x630 [ 324.226013] ? shmem_fcntl+0x130/0x130 [ 324.229889] do_syscall_64+0x1eb/0x630 [ 324.233766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.238636] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.243831] RIP: 0033:0x458c29 [ 324.247023] RSP: 002b:00007f5ff3500a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 324.254726] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 15:37:49 executing program 4: r0 = socket(0x2000000000000021, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x110, 0x5, 0x0, 0x0) 15:37:49 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200080, 0x0) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/229) set_mempolicy(0x0, &(0x7f00000002c0)=0x6, 0x4) capset(&(0x7f0000560ff8)={0x19980330}, &(0x7f00003fd000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000480)=0xe8) recvfrom$packet(r0, &(0x7f0000000200)=""/141, 0x8d, 0x10020, &(0x7f00000004c0)={0x11, 0x16, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) r2 = getpid() ioprio_set$pid(0x1, r2, 0x3ff) r3 = shmget(0x1, 0x3000, 0x78000a08, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r3, 0xb) 15:37:49 executing program 2 (fault-call:7 fault-nth:5): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:37:49 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x7, &(0x7f0000000340)="0adc1f123c123f319b172868d070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000280)={0x0, 0x8000}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r2, 0x4f, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x0, 0x800000000000000}, 0x14) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) [ 324.261992] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 324.269260] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 324.276528] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ff35016d4 [ 324.284465] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 15:37:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x100000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000100)={0xfff, 0x4, [0x7ff]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x100) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x0, r3}) 15:37:49 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xa) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0007000000200000000000000000"], 0x10}}, 0x0) r2 = fcntl$getown(r1, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r2) [ 324.353415] FAULT_INJECTION: forcing a failure. [ 324.353415] name failslab, interval 1, probability 0, space 0, times 0 [ 324.367222] CPU: 1 PID: 15015 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 324.374379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.383731] Call Trace: [ 324.386319] dump_stack+0x138/0x19c [ 324.389930] should_fail.cold+0x10f/0x159 [ 324.394074] should_failslab+0xdb/0x130 [ 324.398071] kmem_cache_alloc_node+0x28a/0x780 [ 324.402649] __alloc_skb+0x9c/0x500 [ 324.406261] ? skb_scrub_packet+0x4b0/0x4b0 [ 324.410580] ? netlink_has_listeners+0x20a/0x330 [ 324.415334] kobject_uevent_env+0x74c/0xc41 [ 324.419645] kobject_uevent+0x20/0x26 [ 324.423437] loop_clr_fd+0x4a7/0xae0 [ 324.427318] lo_ioctl+0x8d0/0x1c70 [ 324.430864] ? SyS_mount+0xcf/0x120 [ 324.434484] ? save_stack+0xa9/0xd0 [ 324.438095] ? loop_probe+0x160/0x160 [ 324.441881] blkdev_ioctl+0x983/0x1880 [ 324.445754] ? blkpg_ioctl+0x980/0x980 [ 324.449631] ? __might_sleep+0x93/0xb0 [ 324.453505] ? __fget+0x210/0x370 [ 324.456943] block_ioctl+0xde/0x120 [ 324.460562] ? blkdev_fallocate+0x3b0/0x3b0 [ 324.464873] do_vfs_ioctl+0x7b9/0x1070 [ 324.468753] ? selinux_file_mprotect+0x5d0/0x5d0 [ 324.473499] ? lock_downgrade+0x6e0/0x6e0 [ 324.477632] ? ioctl_preallocate+0x1c0/0x1c0 [ 324.482026] ? __fget+0x237/0x370 [ 324.485466] ? security_file_ioctl+0x8f/0xc0 [ 324.489860] SyS_ioctl+0x8f/0xc0 [ 324.493219] ? do_vfs_ioctl+0x1070/0x1070 [ 324.497363] do_syscall_64+0x1eb/0x630 [ 324.501231] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.506063] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.511239] RIP: 0033:0x458a97 [ 324.514420] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.522107] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 324.529363] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 324.536622] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 324.543876] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 15:37:49 executing program 3 (fault-call:2 fault-nth:58): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 324.551135] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 [ 324.626672] FAULT_INJECTION: forcing a failure. [ 324.626672] name failslab, interval 1, probability 0, space 0, times 0 [ 324.683010] CPU: 1 PID: 15044 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 324.690081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.699449] Call Trace: [ 324.702049] dump_stack+0x138/0x19c [ 324.702068] should_fail.cold+0x10f/0x159 [ 324.702086] should_failslab+0xdb/0x130 [ 324.709856] kmem_cache_alloc+0x2d9/0x780 [ 324.717961] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 324.723427] ? check_preemption_disabled+0x3c/0x250 [ 324.728462] selinux_file_alloc_security+0xb4/0x190 [ 324.733586] security_file_alloc+0x73/0xb0 [ 324.737850] get_empty_filp+0x130/0x3b0 [ 324.741854] alloc_file+0x23/0x440 [ 324.745411] __shmem_file_setup.part.0+0x1b1/0x400 [ 324.745422] ? __alloc_fd+0x1d4/0x4a0 [ 324.745433] ? shmem_fill_super+0x8c0/0x8c0 [ 324.758475] SyS_memfd_create+0x1f9/0x3a0 [ 324.758488] ? shmem_fcntl+0x130/0x130 [ 324.758498] ? do_syscall_64+0x53/0x630 [ 324.758510] ? shmem_fcntl+0x130/0x130 [ 324.769142] EXT4-fs (sda1): can't enable nombcache during remount [ 324.770540] do_syscall_64+0x1eb/0x630 [ 324.770551] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.770565] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.770573] RIP: 0033:0x458c29 [ 324.770578] RSP: 002b:00007f5ff3500a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 324.770589] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000458c29 [ 324.770593] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bdb87 [ 324.770598] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 324.770604] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5ff35016d4 [ 324.770609] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 [ 324.900567] FAULT_INJECTION: forcing a failure. [ 324.900567] name failslab, interval 1, probability 0, space 0, times 0 [ 324.912321] CPU: 1 PID: 15052 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 324.919347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.928758] Call Trace: [ 324.931348] dump_stack+0x138/0x19c [ 324.934976] should_fail.cold+0x10f/0x159 [ 324.939117] should_failslab+0xdb/0x130 [ 324.943084] kmem_cache_alloc_node+0x28a/0x780 [ 324.947662] __alloc_skb+0x9c/0x500 [ 324.951292] ? skb_scrub_packet+0x4b0/0x4b0 [ 324.955612] ? netlink_has_listeners+0x20a/0x330 [ 324.960582] kobject_uevent_env+0x74c/0xc41 [ 324.966097] kobject_uevent+0x20/0x26 [ 324.969883] loop_clr_fd+0x4a7/0xae0 [ 324.973593] lo_ioctl+0x8d0/0x1c70 [ 324.977735] ? SyS_mount+0xcf/0x120 [ 324.981366] ? save_stack+0xa9/0xd0 [ 324.984993] ? loop_probe+0x160/0x160 [ 324.988784] blkdev_ioctl+0x983/0x1880 [ 324.992672] ? blkpg_ioctl+0x980/0x980 [ 324.996557] ? __might_sleep+0x93/0xb0 [ 325.000437] ? __fget+0x210/0x370 [ 325.003884] block_ioctl+0xde/0x120 [ 325.007500] ? blkdev_fallocate+0x3b0/0x3b0 [ 325.011827] do_vfs_ioctl+0x7b9/0x1070 [ 325.015715] ? selinux_file_mprotect+0x5d0/0x5d0 [ 325.020473] ? lock_downgrade+0x6e0/0x6e0 [ 325.024612] ? ioctl_preallocate+0x1c0/0x1c0 [ 325.029004] ? __fget+0x237/0x370 [ 325.032457] ? security_file_ioctl+0x8f/0xc0 [ 325.036858] SyS_ioctl+0x8f/0xc0 [ 325.040235] ? do_vfs_ioctl+0x1070/0x1070 [ 325.044375] do_syscall_64+0x1eb/0x630 [ 325.048262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.053107] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 325.058290] RIP: 0033:0x458a97 [ 325.061461] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.069243] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 325.076500] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 325.083771] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 [ 325.091030] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 325.098326] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:52 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:37:52 executing program 0: syz_emit_ethernet(0x3a5, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaacf2bb43c40b80800450002220000000000069078ac14ffaae000000100000000b59d89b299bdc48a0250b48fa1aafc1b37a937e0aa879456c72b1dcb8a0217999e0feb1be9f949e29cc542e44fbbed1699e0f1560718e6dd84f8a20292d561f5182f17f4e49a151fda54330accf7936191ebdc052607ab320e151e9483f1b17542b5253acbd3a09b53fffacacec32eb629553848e00a", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="f000000090780000"], 0x0) 15:37:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:52 executing program 2 (fault-call:7 fault-nth:6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 15:37:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = accept(r0, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000000940)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000300)="b017d1ade965fa8cd22b37872bbfc86840c1a78cca6187d12053a38e282d2447e9c064baa5cba2a19250457ca1134b8e37703bec133d7b1bb750ec97cac2aa6e44b3b5c7a1109044f68fc52d9a03dc6ae6b2fea2e79552c53a8ccf0b1c05704d078e500d9a5acfd5ad25a8f30d202ad0ed55030b08f8dc47184fd8f25fbfb8c162d5fa8b872a51157632a01a1a8a0ce2461821d9518c237bf9ff5cca2be36b89f7fe1730c1c95d71823c00401b1d567a3b8b527bdb4624d8f785087d976d7e54850795fb768296d71d9d14c362", 0xcd}, {&(0x7f0000000280)="821df22ce3d4f3b2863f1564bde59d0ecd6fa86c1cbfe802829f8fef1c2a559235a1e5ec63003e7b9718bc571d4a417d78a936b5", 0x34}, {&(0x7f0000000400)="3139470f3c078dad984b2f7a8ca972f7e0115a3beae2edd82cf5db4db055fa74cbe4434910cfaabc3f917f8dac87f0d662cc8e239fc366f3dde76948d8b3246213086f20c0d4fd602c19bf805d83d2ebd77a0957af8f91554f9c2f0e60a9e7b73a0a3e29d8a1999fff7744cdf607f98c445c584a03ea54341d441040b5b5027c1f23b370da62cf3bd5a71532843b2b0eeab43678a9e979aeea986d8b9c86439e6ff0bad652706d6d4ff929e83f1cf88e15d341da3d91574372974c51d80f45670bc8fab78fd850e7e53b6177e41a7d477834b6d6f2af1c59884e373b6b", 0xdd}, {&(0x7f0000000500)="3e0694d297d73f4f6f29fe82e2eadca62326a04cc8dc3a979e675cd7e212d0e314dae8a82c9be9bbcddab566", 0x2c}], 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="00000000000000010000000200000058b077554526a391d01e38fd38573f0aba60a780a3e90dd228f3a503", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3], 0x70, 0x4008050}, 0x20000000) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KDGETLED(r11, 0x4b31, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e22, 0x7fec, @local, 0x1ff}}, [0x1, 0x1, 0x401, 0x8, 0x6, 0xff0, 0x2, 0x5, 0x4, 0x1f, 0x8, 0x0, 0x5, 0x6, 0x3]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000ac0)={r12, @in={{0x2, 0x4e23, @loopback}}}, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000980)=ANY=[@ANYBLOB="f70f59d0ec8d805aa1ec164f91114aba35ecfe0f6c93beabd5d0f07cbbfea0a070108cf7b5a5253e635efe7b43c9466d412f43"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15:37:52 executing program 3 (fault-call:2 fault-nth:59): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 327.185454] FAULT_INJECTION: forcing a failure. [ 327.185454] name failslab, interval 1, probability 0, space 0, times 0 [ 327.200598] CPU: 0 PID: 15069 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 327.207667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.207680] Call Trace: [ 327.207697] dump_stack+0x138/0x19c [ 327.207716] should_fail.cold+0x10f/0x159 [ 327.219717] should_failslab+0xdb/0x130 [ 327.219732] kmem_cache_alloc+0x2d9/0x780 [ 327.236134] ? do_sys_ftruncate.constprop.0+0x35c/0x490 [ 327.241495] getname_flags+0xcb/0x580 [ 327.245300] getname+0x1a/0x20 [ 327.248478] do_sys_open+0x1e7/0x430 [ 327.252268] ? filp_open+0x70/0x70 [ 327.255888] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 327.261242] SyS_open+0x2d/0x40 [ 327.264507] ? do_sys_open+0x430/0x430 [ 327.268467] do_syscall_64+0x1eb/0x630 [ 327.272338] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.277269] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.282441] RIP: 0033:0x412bc1 15:37:52 executing program 0: clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000280)={{0x9, 0x305}, 'port0\x00', 0x8, 0x80000, 0x1, 0x1f, 0x80, 0x9, 0xbf, 0x0, 0x0, 0x7}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@empty, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@empty, @in=@multicast2, 0x4e23, 0x0, 0x4e24, 0xfffffffffffffff9, 0x2, 0x80, 0x20, 0x4, r2, r3}, {0x8, 0x8, 0x3, 0x7, 0x4, 0x0, 0x4, 0x1ff}, {0x6, 0x10001, 0x4, 0x1}, 0xffffffffffffff11, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x3e}, 0xa, @in6=@loopback, 0x3504, 0x1, 0x3, 0x3, 0x5, 0x8, 0x7}}, 0xe8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000540)=""/241, &(0x7f0000000640)=0xf1) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="24000000020307031dfffd944ef20c0020200a0009000500021d85680c1baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0) chdir(&(0x7f0000000040)='./file0\x00') futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) [ 327.285623] RSP: 002b:00007f5ff3500a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 327.293314] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 327.301001] RDX: 00007f5ff3500b0a RSI: 0000000000000002 RDI: 00007f5ff3500b00 [ 327.308250] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 327.315521] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 327.322785] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 15:37:52 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2000502, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000000c0)={0x55, 0x400000, 0x77, {0x8, 0x7fffffff}, {0xb1, 0xcc97}, @cond=[{0x600, 0xffff, 0x7, 0x2, 0x3, 0x1}, {0x197, 0x10000, 0x2, 0x920, 0x9, 0xa11}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40000) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0x40, {0x5, 0x8, 0x2, 0x7fff, 0xfff}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000100)={0x4, 0x8}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0xfffffffffffffffc, &(0x7f0000000180)=0x2) 15:37:52 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000140)=[{{0x77359400}, 0x0, 0x30, 0x9}, {{0x0, 0x7530}, 0x16, 0x6, 0x1}, {{0x0, 0x2710}, 0x16, 0x1, 0xffffffff}], 0x48) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x100081) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendto$x25(r0, &(0x7f0000000200)="28a6ceac23c5ca24422d8a6be6a56eabee92ae9d1ce2d120a39aaafcdd164de7cdb0760a60d1b61e601c45d370ef894161f795cd1bb6728e9cfcfe216a1445dfb1f34a6ed1cb39d52f5a7b14a990da9e705291066af5ec73a0e718ecda3b", 0x5e, 0x4040000, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, 0x0, 0x20000102000014) ioctl$LOOP_CLR_FD(r1, 0x4c01) [ 327.380744] FAULT_INJECTION: forcing a failure. [ 327.380744] name failslab, interval 1, probability 0, space 0, times 0 [ 327.396277] CPU: 1 PID: 15071 Comm: syz-executor.3 Not tainted 4.14.111 #1 [ 327.403851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.413209] Call Trace: [ 327.415890] dump_stack+0x138/0x19c [ 327.419616] should_fail.cold+0x10f/0x159 [ 327.423815] should_failslab+0xdb/0x130 [ 327.427781] kmem_cache_alloc_node+0x28a/0x780 [ 327.432438] __alloc_skb+0x9c/0x500 [ 327.436148] ? skb_scrub_packet+0x4b0/0x4b0 [ 327.440454] ? netlink_has_listeners+0x20a/0x330 [ 327.445330] kobject_uevent_env+0x74c/0xc41 [ 327.451146] kobject_uevent+0x20/0x26 [ 327.454936] loop_clr_fd+0x4a7/0xae0 [ 327.458718] lo_ioctl+0x8d0/0x1c70 [ 327.462276] ? SyS_mount+0xcf/0x120 [ 327.465979] ? save_stack+0xa9/0xd0 [ 327.469858] ? loop_probe+0x160/0x160 [ 327.473651] blkdev_ioctl+0x983/0x1880 [ 327.477531] ? blkpg_ioctl+0x980/0x980 [ 327.481407] ? __might_sleep+0x93/0xb0 [ 327.485277] ? __fget+0x210/0x370 [ 327.488798] block_ioctl+0xde/0x120 [ 327.492554] ? blkdev_fallocate+0x3b0/0x3b0 [ 327.496873] do_vfs_ioctl+0x7b9/0x1070 [ 327.500753] ? selinux_file_mprotect+0x5d0/0x5d0 [ 327.505492] ? lock_downgrade+0x6e0/0x6e0 [ 327.509641] ? ioctl_preallocate+0x1c0/0x1c0 [ 327.514049] ? __fget+0x237/0x370 [ 327.517511] ? security_file_ioctl+0x8f/0xc0 [ 327.522002] SyS_ioctl+0x8f/0xc0 [ 327.525379] ? do_vfs_ioctl+0x1070/0x1070 [ 327.529522] do_syscall_64+0x1eb/0x630 [ 327.533394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.538248] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.543429] RIP: 0033:0x458a97 [ 327.546613] RSP: 002b:00007f4f7c65fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.554310] RAX: ffffffffffffffda RBX: 00007f4f7c65fb40 RCX: 0000000000458a97 [ 327.561560] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000005 [ 327.568815] RBP: 0000000000000000 R08: 00007f4f7c65fb40 R09: 00007f4f7c65fae0 15:37:52 executing program 2 (fault-call:7 fault-nth:7): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 327.576091] R10: 0000000000100020 R11: 0000000000000246 R12: 0000000000000004 [ 327.583544] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000003 15:37:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f00000000c0)) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xbbd, 0x4800) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/118, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc) 15:37:52 executing program 3 (fault-call:2 fault-nth:60): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000040)={[{@nombcache='nombcache'}]}) [ 327.705292] FAULT_INJECTION: forcing a failure. [ 327.705292] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 327.717223] CPU: 1 PID: 15099 Comm: syz-executor.2 Not tainted 4.14.111 #1 [ 327.717231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.717235] Call Trace: [ 327.717258] dump_stack+0x138/0x19c [ 327.717275] should_fail.cold+0x10f/0x159 [ 327.717294] __alloc_pages_nodemask+0x1d6/0x7a0 [ 327.717303] ? fs_reclaim_acquire+0x20/0x20 [ 327.717320] ? __alloc_pages_slowpath+0x2930/0x2930 [ 327.717340] cache_grow_begin+0x80/0x410 [ 327.717354] kmem_cache_alloc+0x6a8/0x780 [ 327.717371] getname_flags+0xcb/0x580 [ 327.717382] getname+0x1a/0x20 [ 327.717391] do_sys_open+0x1e7/0x430 [ 327.717402] ? filp_open+0x70/0x70 [ 327.717415] ? do_sys_ftruncate.constprop.0+0x370/0x490 [ 327.717426] SyS_open+0x2d/0x40 [ 327.717434] ? do_sys_open+0x430/0x430 [ 327.717447] do_syscall_64+0x1eb/0x630 [ 327.717456] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.717471] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 327.717479] RIP: 0033:0x412bc1 [ 327.717485] RSP: 002b:00007f5ff3500a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 327.717495] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412bc1 [ 327.717501] RDX: 00007f5ff3500b0a RSI: 0000000000000002 RDI: 00007f5ff3500b00 [ 327.717506] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 327.717516] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 327.753251] ------------[ cut here ]------------ [ 327.753522] R13: 00000000004c7716 R14: 00000000004dd748 R15: 0000000000000005 [ 327.758540] WARNING: CPU: 0 PID: 15107 at fs/attr.c:213 notify_change+0xa32/0xd10 [ 327.778901] kobject: 'loop2' (ffff8880a49f3220): kobject_uevent_env [ 327.779573] Kernel panic - not syncing: panic_on_warn set ... [ 327.779573] [ 327.783341] kobject: 'loop2' (ffff8880a49f3220): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 327.788589] CPU: 0 PID: 15107 Comm: syz-executor.0 Not tainted 4.14.111 #1 [ 327.788595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.788599] Call Trace: [ 327.788616] dump_stack+0x138/0x19c [ 327.788632] panic+0x1f2/0x438 [ 327.797024] kobject: 'loop4' (ffff8880a4a62a60): kobject_uevent_env [ 327.800947] ? add_taint.cold+0x16/0x16 [ 327.800962] ? notify_change+0xa32/0xd10 [ 327.800972] ? __warn.cold+0x14/0x34 [ 327.813330] kobject: 'loop4' (ffff8880a4a62a60): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 327.815074] ? notify_change+0xa32/0xd10 [ 327.815086] __warn.cold+0x2f/0x34 [ 327.815100] ? ist_end_non_atomic+0x10/0x10 [ 327.963897] ? notify_change+0xa32/0xd10 [ 327.967965] report_bug+0x216/0x254 [ 327.971756] do_error_trap+0x1bb/0x310 [ 327.975645] ? math_error+0x360/0x360 [ 327.979451] ? lock_downgrade+0x6e0/0x6e0 [ 327.983594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.988429] do_invalid_op+0x1b/0x20 [ 327.992136] invalid_op+0x1b/0x40 [ 327.995585] RIP: 0010:notify_change+0xa32/0xd10 [ 328.000249] RSP: 0018:ffff88805baff5b0 EFLAGS: 00010216 [ 328.005603] RAX: 0000000000040000 RBX: ffff8880a4899100 RCX: ffffc90009c3c000 [ 328.013044] RDX: 00000000000026cb RSI: ffffffff81939db2 RDI: ffff8880a48991e0 [ 328.020336] RBP: ffff88805baff600 R08: ffff88808ba34540 R09: 0000000000000000 [ 328.027944] R10: 0000000000000000 R11: ffff88808ba34540 R12: ffff88805baff650 [ 328.045260] R13: 0000000000004200 R14: ffff8880a4899100 R15: ffff88805baff6c0 [ 328.052608] ? notify_change+0xa32/0xd10 [ 328.056690] file_remove_privs+0x229/0x430 [ 328.061436] ? dentry_needs_remove_privs.part.0+0x60/0x60 [ 328.066963] ? __save_stack_trace+0x7b/0xd0 [ 328.071296] ? depot_save_stack+0x11c/0x410 [ 328.075704] __generic_file_write_iter+0x15e/0x5b0 [ 328.080627] ? save_stack_trace+0x16/0x20 [ 328.084788] blkdev_write_iter+0x1e8/0x3a0 [ 328.089014] ? check_disk_change+0x120/0x120 [ 328.093413] ? __might_sleep+0x93/0xb0 [ 328.097289] ? save_trace+0x290/0x290 [ 328.101406] do_iter_readv_writev+0x41e/0x680 [ 328.105904] ? vfs_dedupe_file_range+0x8f0/0x8f0 [ 328.110666] ? rw_verify_area+0xea/0x2b0 [ 328.114717] do_iter_write+0x154/0x550 [ 328.118598] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 328.124322] ? __kmalloc+0x379/0x7a0 [ 328.128799] vfs_iter_write+0x77/0xb0 [ 328.134103] iter_file_splice_write+0x578/0xae0 [ 328.138884] ? touch_atime+0xce/0x250 [ 328.142712] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 328.148017] ? rw_verify_area+0xea/0x2b0 [ 328.152082] ? page_cache_pipe_buf_steal+0x2f0/0x2f0 [ 328.157181] direct_splice_actor+0x126/0x1a0 [ 328.161725] splice_direct_to_actor+0x2a1/0x7b0 [ 328.166654] ? generic_pipe_buf_nosteal+0x10/0x10 [ 328.171935] ? do_splice_to+0x170/0x170 [ 328.176120] ? rw_verify_area+0xea/0x2b0 [ 328.180178] do_splice_direct+0x18d/0x230 [ 328.184335] ? splice_direct_to_actor+0x7b0/0x7b0 [ 328.189174] ? rw_verify_area+0xea/0x2b0 [ 328.193227] do_sendfile+0x4db/0xbd0 [ 328.196935] ? do_compat_pwritev64+0x140/0x140 [ 328.201516] ? put_timespec64+0xb4/0x100 [ 328.205745] ? nsecs_to_jiffies+0x30/0x30 [ 328.209894] SyS_sendfile64+0x102/0x110 [ 328.213865] ? SyS_sendfile+0x130/0x130 [ 328.218009] ? do_syscall_64+0x53/0x630 [ 328.222408] ? SyS_sendfile+0x130/0x130 [ 328.226390] do_syscall_64+0x1eb/0x630 [ 328.230266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 328.235099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 328.240278] RIP: 0033:0x458c29 [ 328.243452] RSP: 002b:00007f01759c9c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 328.251323] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 328.258576] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 328.265830] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 328.273108] R10: 0020000102000014 R11: 0000000000000246 R12: 00007f01759ca6d4 [ 328.280391] R13: 00000000004c5e10 R14: 00000000004da5c8 R15: 00000000ffffffff [ 328.288447] Kernel Offset: disabled [ 328.292099] Rebooting in 86400 seconds..