571ce4040b3132acff16c50e3af09e05f604417b3da83867c6e27f25ef8b3850729fb803cb336803d791f3ac5e582f59b2b7af3fc632e51864ed8f44534a7ab88111c8309e913718b09cd037d9374cdc7153bd20359e4b4a27150499f3a2005a8a3291ded1bcaa42c12c16bb0c4aa8eb41e983b8e5e2114d666185f3c2b2c1a14f3f9ec1807d7d1492cdc7de0892afb54bdb8829e714d82a0054f37ae68fba1baafc9d359516777acfe4ad0921c1d2849a6e98cc4655b1373a12cdb0559bc985f26d01a74194a5ebadfa3f8196d36775fb21dafdc99023359e0bc47e83374a50dd11728ff3f4ec20642ecbef8f13e4598a30d4e449d7d5ce5b47e2a8e4cd364d2b38526e4722855d2c6fcf31d0038ef401dac889dc6140fc3b5835008bb97127b179cef2104911027a05731f4c522eb9e1f3745601734baf104239905505e767db55dac75b83128ff4b6d0559c8db7244c5aa46b5a5076e25010f6da2d1d24cede73bad15fa25871e3a6765f6975c59eecd776b67c3c2761caf4ad9a0558d7758f8806b3e001066a5b36e1d0c6ef24873b5748d030f7e8a6a33779f1324dac3fa3bb7459d1351ad84164fa95d52682b4cd47268950cb4867fa2213f8d6f80debd00923b4f41d1e6d4b8817af6c26e389110973b79b9989cb5bb9ccbe87e70f47aa0ec78189e273bb51da2b5d0d55f0e9436e31feef3089bfbd062cb43b7fe98732489316aefa1cbd6c598456becb811ed69699c7fbbde30a0f307f3a5fa645825b3687f320958ae6af2b06f653c3aa30c80ac7c73997a855e7565344327e0fbda12536250922df86164c89ca43a9d48f831c96f0edb05fdce323cfe55613980e40305eb09c8dfd75f8161f31cbcb221bd320eff77a97091f5462cc66eaa2c5373da5db42eae440fef3bda00bf335b2892c3fc8cde6c6196a58ea7b341a41a8a5980387e661670f9942746f53297f291d9360dcaaf71c8041ee46fded37d6800ce65e25f846fa0d0a9311dd1f427ee44ed454c10996066b85cfd17bd9612ec733c9b0caf43519ae1c982398d551379c5a223337ae95620c730f455412edc7709ae6e1a4c61566ab58a46b0f4e750d0483f6ca14d96c603157d03909daf18751738bd83dda5ba0a991044eb2160ec61c41a33534518343ca29f273aa892e9e1488423a9abbbc26b70d84b346e25817d89aee750a7ffcdef03bcdf9f46e977af700c7d68bdd12720d8c4cb255a0e9e40799e909ba3b12dd8938ce2e17abeb3cf2d495a11200408b9a8324c78218b9185ba62ab2fcdcb6369450412c4ef511da9c8ddf07062350f8550e21283f17c1d265f4ff3d6fe237d84a60aa394f9c704e4d08914d323b4c508e63e765a56662fc746de45d15a1356d5cd7ff40ace37819f373d6db07a20a9c70c6bcb1a142c986b5028a1180fbeb1dbf52541214ca22fe774015978c08e4b03b4ed709da2a386f7b3de20d6bf4915ecea67ab763e64782f8d48c1a7f09f78acd7ddfe8e97600d511637cff8fd974e56c044ad10d3afd1d0dc74f6ab7bd34f7ff1c031dd1b7df1e8757f774398aeb46e57413b1678262419e0ae2818cb87a199c5c945150b23a1898ce96609e879bf67d1cbccbedb4462f6763d071fddad09cc43964d4256a6e966dbadf5c694b97e9e181da780cb497c8d6", 0x1000}, {&(0x7f0000002600)="d705ff95bcab9ccbf6919fe56920aa75f8f4d4afd53831f00e952a5ae0a5245eed0b70344e4377c96b1a68936920288144acd35570e2c6b3cc8f082834b112c0a0ff86756c4f95a04ca0182aa320b29fa8ed692407c9b037e5bc83712b4e0612f8", 0x61}], 0x6, &(0x7f0000002b40)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0]}], 0x78, 0x1}, 0x20000811) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x1, 0xe7c2, 0x5, 0x9, 0x3, 0xdd}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00Zm\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:00 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2011ff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:00 executing program 4: socket(0xa, 0x6, 0x0) epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb05000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r4 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800) inotify_rm_watch(r3, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:00 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x240300) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) connect$llc(r0, &(0x7f0000000140)={0x1a, 0x33f, 0xffffffff, 0x3, 0x3, 0x1854000000, @random="b665a238a3f8"}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:01 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x307100, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2155.066569][T20030] hfsplus: unable to find HFS+ superblock 18:10:01 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x280, 0x0) bind$vsock_dgram(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711, @hyper}, 0x10) 18:10:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:01 executing program 4: socket(0xa, 0x6, 0x0) epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2000, &(0x7f000000e000/0x2000)=nil}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x7, 0x200000) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000100)={@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x6, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:01 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:01 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x3) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)='erspan\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000002c0)={{0x9, 0x4, 0x2, 0x61a, '\x00', 0x1}, 0x1, 0x20, 0x7, r1, 0x6, 0x7, 'syz0\x00', &(0x7f0000000140)=['\x00', 'erspan\x00', 'erspan\x00', 'erspan\x00', 'erspan\x00', '*\x00'], 0x1f, [], [0xffff, 0x0, 0x3, 0x9]}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x20900, 0x0) write$P9_RLOPEN(r2, &(0x7f0000000400)={0x18, 0xd, 0x1, {{0x90, 0x3, 0x4}, 0x8}}, 0x18) [ 2155.346906][T20057] hfsplus: unable to find HFS+ superblock 18:10:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1020000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2155.414390][ C1] net_ratelimit: 22 callbacks suppressed [ 2155.414396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2155.414422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2155.420141][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:01 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000004c0)={0x2, 0x0, 0x1, 0xffffffffffff731e, r3}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x804, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10d02) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:01 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:01 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x50b000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:01 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x240300) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) connect$llc(r0, &(0x7f0000000140)={0x1a, 0x33f, 0xffffffff, 0x3, 0x3, 0x1854000000, @random="b665a238a3f8"}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:01 executing program 3: r0 = request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='[,eth0eth0userppp1vboxnet1\x00', 0xfffffffffffffff8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000240)={0x9, 0x7a774f7e, 0x9, 0x6, 0x2, @stepwise={{0x9b9, 0x2}, {0xffffffffffffffe0, 0x7}, {0xf307}}}) keyctl$clear(0x7, r0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f00000003c0)={'mangle\x00', 0x1000, "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"}, &(0x7f0000000180)=0x1024) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000001400)=ANY=[@ANYBLOB="40000000100011014400000000000000000c00005944089d587df11ecfe989e6e7", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e002010000200040012000800040000000000781db8c9d57dc63c7291db16242f04036c58c30a179ca2bea66a7a4545fe8f5bed804b65dbf54373a6a4657c9294bded01e3fef8edd83bd726e195c53bacb96a9cad33d2f097f9e3ecc415475b2b86186f19efb20db7fd634f7e609bc03b149cecf2c5627973743543e4d462f720ae97a8bcf764c14812365459ea688a7981656408f0d42aa730c96af6b87d2e9b7f00e246968e8d5bc845824326392060b030b08c9b"], 0x40}}, 0x0) 18:10:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:01 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=0x0) tkill(r2, 0x32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x5a) r4 = shmget(0x0, 0x2000, 0x1, &(0x7f0000003000/0x2000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000380)=""/82) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x1) 18:10:01 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x70a000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2155.788511][T20094] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:01 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0x1010, &(0x7f0000ff7000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20680, 0x0) accept$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x1c) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x149, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2155.860746][T20100] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:01 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x11, "611bd91edb4a990137b2a1cad277c8e47bde"}, 0x14, 0x2) fcntl$setflags(r0, 0x2, 0x1) 18:10:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x713000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000004c0)={0x2, 0x0, 0x1, 0xffffffffffff731e, r3}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x210000, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000200)={0x2, 0xbc, &(0x7f0000000100)="53628e611497a1092c229157e658683ab93742c803bade6b059c9667900e8a20dfc45bd2e190dfb4bdeb198048612f6f54011fc4bacfe3bcc6c52ad8fa9808757322b1e0b2516dc0d36c73c4f12e3e531ead58d06274dedd36388dda3a650e838a06048cfb8dc21011ba2fadbaf4289324f9396dc3328cd828b6d8c807cd4074b7ed3fa979bd68ea3a25b3eba6d470c8198acdef789113431070ef47bb3bca4287a3a6ab3bd16d0150f3b0a22da41f59dbdb4593a5d3950f86e8faf1"}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="00e0ffffff4000b69736ed8fd1c1600065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xcd2, 0x18800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb4d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6c6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2754}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 2156.294397][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2156.300258][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2156.306137][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2156.311914][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:02 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x740000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000140)) getpeername$unix(r0, &(0x7f0000000580)=@abs, &(0x7f00000004c0)=0x6e) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) [ 2156.374409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2156.380206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2156.386044][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2156.395769][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x5000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2156.447650][T20140] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x6b) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001600)={0x0, 0x0}) r1 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000002c0)="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", 0x1000, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000140)={r1, 0x6, 0x1}, 0x0, &(0x7f00000012c0)="dbd6cbb5dc061dce77e1797dc72fdf4d2503d75abd0775b33e3219100e8e4b1567c445d49f1ec93f2c5ac1e9360fd01d3368426f4404de218754527597aeb10aa52f58966d6ad92bd9170b5b277115716f38ae34924df633f41cd1d0308dab0e6ca12554855e2123f9ff20d55be986c8ef3c5ce9b1017084e86e4da55ce0ed1e46b64558ad8772ac34537b2c26ad", &(0x7f0000001380)="4e5e32b4baaaa32fb090b426adae1736cc8bafac930377db446d5b54981333eddb5c9e52bbd4353b98f531e755301f9e1686f91669c1f67ccec993b534fe7d93d176e7b17028520ee9704175481c43a2eb3fba4a5ee5adff386d05169ab1285fc9a94e04392e86c51453a5554ddb6fd7cba3947e238c063b1486d0cf50cbd1410ee6a07d509d68162767b90a821cbabacc4bbb05dbf9f564579d9f62df51492841a220da70b6d85cd02ef2e1cc06510519682e9949714343a5201042d503bfca4d795ae508") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e0000100002000400120008000400000000002788f922d8a537564609fbb97f5c1e2e1553697757229172abb8404aa7c1e53584b1851034edab0f9dda19669ae4cb6d28698700a78b87362d22e198e4d1a376765da38239475d82854e21cfdfe8085411baaeb1eb350dddc6433fbdbeed2a50e865d82ad22a893a4602205dc43205f2c4de69a8b1837a6b2dac9318094d863ed125d07b096f"], 0x40}}, 0x0) 18:10:02 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 0: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x80) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000140)=0x22aa5c0c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200000000000000, 0x8080) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f00000000c0)) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000540)=""/222) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 18:10:02 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000004c0)={0x2, 0x0, 0x1, 0xffffffffffff731e, r3}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x624, 0x800) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000000)={0x6, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4188010}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x40}}, 0x7}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3}, 0x8) 18:10:02 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x940000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x10000000000, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:02 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) accept(0xffffffffffffffff, &(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000180)=0x80) sendmsg$xdp(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x2c, 0x3, r1, 0x37}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="a57de3683a466b444faacad9d0a9e7de5848d3ad538499d290e9ae25bd072dba35c19973b701a4bd268d30a268325e5672aa9949c8a2a33a0d666a20ba219c323ffcdbb8ff082d9f5f257f4c0e2061ab10abdbc36df0424d2289f2df03c7871ca309d80b7b8b83d20cea52b59c1d7c3b85b00df0a4f96b84", 0x78}, {&(0x7f0000000240)="e8f5", 0x2}, {&(0x7f0000000340)="f6c1c15ce954d147f1dbccccd3a4c36b65a6ec7c357fa7fe6cecb5f7033aa20d5d6b2c7841a0207901094da36e638b46e8fa06349a1152ff11fccf8392beb7c0671388ec26e76678b1e002f1693fccc6260cb46ebd006c14fa7edc975618ad84e557070531c63c85250814ce8b8d64429ad6418f060430d9dde823387ca05b578f28deb239929371d156def6cbe294493eaf01dafbaec8bc6cd7a4ecb175e13d2562438d2cafa2c8e7e352267d", 0xad}, {&(0x7f0000000400)="65ed02e41b79e7d942d81240d755dd6ef44dc3ffe4ad6e116276ed6bc746a8d36062de749dd0aca315bdc80285567de3315eccaba394dcfc4cb893d35f0fe512e98b122d1d353a35be42f7307be05d39f972da5dd809d19556505d3c2ff7ca2b7129c7b420c7be7af9745638f98037db75b32c2b4d5a4f2207dbaf0736029a0afb292c6d9d2eff0b9349a05484f8c0dc8a2f4ffb66f0b161eca64c24036445a1", 0xa0}], 0x4, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010b749b1d2e17b2bd7157a802c36072c", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:02 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000140)=0xe814) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6820000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:02 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='vboxnet0-\x00', 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000180)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='!ppp1\x00', 0xfffffffffffffffe) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x301000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x4) keyctl$reject(0x13, r1, 0x3, 0x81, r2) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40ff0000100011010000020031aec8970001abad", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000300)={0x1, 0x5, 0x9}) 18:10:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x800, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfc4e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:03 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa07000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:03 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000004c0)={0x2, 0x0, 0x1, 0xffffffffffff731e, r3}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2157.118615][ T26] kauditd_printk_skb: 80 callbacks suppressed [ 2157.118628][ T26] audit: type=1804 audit(1554833403.114:1396): pid=20190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5511/bus" dev="sda1" ino=17933 res=1 18:10:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:03 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000010000}, 0x0) [ 2157.220224][ T26] audit: type=1804 audit(1554833403.154:1397): pid=20190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5511/bus" dev="sda1" ino=17933 res=1 18:10:03 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb05000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:03 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(r0, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, r8, &(0x7f0000000700)=[{0x0}], 0xfffffffffffff35, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2157.299177][ T26] audit: type=1804 audit(1554833403.154:1398): pid=20190 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5511/bus" dev="sda1" ino=17933 res=1 18:10:03 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x9, 0x10000) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000340)={0x6, 0x6}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='erspan\x00', &(0x7f0000000140)='\veth0]ppp0\x00', &(0x7f0000000180)='cpuset,][/@\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)='erspan\x00']) 18:10:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2157.432200][ T26] audit: type=1804 audit(1554833403.344:1399): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3526/bus" dev="sda1" ino=16813 res=1 18:10:03 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2157.508145][ T26] audit: type=1804 audit(1554833403.364:1400): pid=20206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3526/bus" dev="sda1" ino=16813 res=1 18:10:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0xf) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2157.631736][ T26] audit: type=1804 audit(1554833403.364:1401): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3526/bus" dev="sda1" ino=16813 res=1 18:10:03 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xfffffffffffffffe, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001100471534b8b010d093191bb9556fe266a1cf1cac0df5f4c143c112a37f16e20ba94c39157f28fe00e8931a33a5480fc043d19be5fb39da2bfe260c074c59794b81be59aaf2d3144602f9fc5b8e00000000000000c581d9f3cc480e8daa5a386f9139d0d2054f5038215b30732d2f08d5681b43179b3539d42fbcb5404b2a1ea792a1506e", @ANYRES32=0x0, @ANYBLOB="000000000088dfffffffff642a2c9c1871e721383835bc000c00010065707370616e000010000200"], 0x40}}, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00', &(0x7f0000000040)=""/60, 0x3c) 18:10:03 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2157.714002][ T26] audit: type=1804 audit(1554833403.404:1402): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5512/bus" dev="sda1" ino=17929 res=1 18:10:03 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x240300) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) connect$llc(r0, &(0x7f0000000140)={0x1a, 0x33f, 0xffffffff, 0x3, 0x3, 0x1854000000, @random="b665a238a3f8"}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:03 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1020000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2157.813451][ T26] audit: type=1804 audit(1554833403.414:1403): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5512/bus" dev="sda1" ino=17929 res=1 [ 2157.865639][T20233] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:03 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) sendto$isdn(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0xee, 0xc0, &(0x7f0000000140)={0x22, 0x6, 0x9, 0x7fffffff, 0x81}, 0x6) [ 2157.921252][T20240] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:04 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2157.956658][ T26] audit: type=1804 audit(1554833403.414:1404): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5512/bus" dev="sda1" ino=17929 res=1 18:10:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9100000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2158.061970][ T26] audit: type=1804 audit(1554833403.564:1405): pid=20214 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3527/bus" dev="sda1" ino=17914 res=1 18:10:04 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001640)='/proc/capi/capi20\x00', 0x80c02, 0x0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000001680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x20002, 0x0) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000002c0)="80bccdfb09cd41642abfaef3fd0cf6fa53d6156214466aad745f39b421d9b6d36c632c215dc270126c9a7850fd58dac075c422de8846324b31106f5ebfc1f9ab2d3fee03433f18aeff53e36a33d2c7f16858c5f1bedeacace3d36d1d3d9e08a3fbe341dbb07e91b6f9a26ea922522cf5a08403f3881e55f0ce381e7c89ac66405c720027b3efab6a61b3752b57966571f00990a8a78bcea48cc8f03014d0951aaf334c785553a01dbf750af47441a662", 0xb0, 0x0) r3 = add_key(&(0x7f0000001540)='encrypted\x00', &(0x7f0000001580)={'syz', 0x0}, &(0x7f00000015c0)="91de89c064c8939b10778e7a5021453a719ae55c71e8ff7e8cc82e52251dfcecdb4feec0c0c08cf242cfceb9cd1e3c0fd35bab0c21d07fbfa53fccf7e6cff0e61e0878411670ab5837a6f0eb13fa081d51efe8d3d7392c56f94dcabb48", 0x5d, 0xfffffffffffffff9) getsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000001780)=""/141, &(0x7f0000001840)=0x8d) keyctl$instantiate_iov(0x14, r2, &(0x7f00000014c0)=[{&(0x7f0000000180)="d146f1eae97f8f869af99c8e1662fb8b3b649dd716d9f93a1f06922f76ec1e7924789d", 0x23}, {&(0x7f0000000200)="4f6ba31dc88f53727f6fe86374ff9750145a29855b998b9240df26b9345f0751ab1de66aaa2220982ac18b645b55d10a8f1f09018713565fe60b76b6def25d28e0e1c2221c8f68db5b9abbd54bc3", 0x4e}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="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", 0xff}, {&(0x7f0000001480)="ce0476cd0689236964dfd122af47a90596", 0x11}], 0x5, r3) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000016c0)={'mangle\x00', 0x2f, "49f6ece000d65f71a7605db3dd72ad425d0f52de98e04aa5d18c17744296697fdccdf7c055a9fdc826b888970abb26"}, &(0x7f0000001740)=0x53) 18:10:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0004, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000001, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000100)={0x0, 0x2, 0xd73, [], &(0x7f00000000c0)=0x1f}) 18:10:04 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 3: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000100)={{}, [@default, @bcast, @default, @netrom, @default, @remote, @netrom, @netrom]}, &(0x7f0000000040)=0x48, 0x0) fsetxattr(r0, &(0x7f0000000180)=@random={'security.', 'erspan\x00'}, &(0x7f0000000200)='ppp0#\x00', 0x6, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x90020000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=@ipmr_getroute={0x0, 0x1a, 0x300, 0x70bd2c, 0x25dfdbfb, {0x80, 0x14, 0x80, 0x0, 0x0, 0x4, 0x0, 0xb, 0x400}, ["", "", "", "", "", "", ""]}, 0xfffffffffffffe5c}}, 0x0) 18:10:04 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x240300) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) connect$llc(r0, &(0x7f0000000140)={0x1a, 0x33f, 0xffffffff, 0x3, 0x3, 0x1854000000, @random="b665a238a3f8"}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:04 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000140)={0x101, 0x0, 0x4, 0x8, 0x4000000000}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7, 0x400000) write$FUSE_DIRENT(r3, &(0x7f00000000c0)={0xd8, 0x49dcce89e5dc294d, 0x2, [{0x6, 0x1, 0xd, 0x1ff, 'ppp0.vboxnet0'}, {0x0, 0xffffffff, 0x9, 0x1, '/dev/kvm\x00'}, {0x3, 0xffffffffffff3dc1, 0x9, 0x5, '/dev/kvm\x00'}, {0x4, 0x9, 0x9, 0x1, '/dev/kvm\x00'}, {0x4, 0x81, 0x9, 0x1, '/dev/kvm\x00'}]}, 0xd8) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:04 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000100)='erspan\x00', 0x7, 0x2) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x5000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x12000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3193a406, 0x202a00) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000cc6100011010000000000000036926b542f", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f00000000c0)) 18:10:04 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x5820000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:04 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x240300) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) connect$llc(r0, &(0x7f0000000140)={0x1a, 0x33f, 0xffffffff, 0x3, 0x3, 0x1854000000, @random="b665a238a3f8"}, 0x10) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:04 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x0, 0x7530}}, 0x100) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1f000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000540)='bpf\x00', 0x101c, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x100}}, {@mode={'mode', 0x3d, 0xfffffffffffff4f5}}, {@mode={'mode', 0x3d, 0x100000000}}, {@mode={'mode', 0x3d, 0xffffffff}}], [{@euid_gt={'euid>', r0}}]}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="cbe60000cce32bd8", @ANYRES16=r2, @ANYBLOB="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"], 0x244}}, 0x8010) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ptrace$poke(0x4, r4, &(0x7f0000000140), 0x0) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:05 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x23000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmmsg(0xffffffffffffff9c, &(0x7f00000038c0)=[{{&(0x7f0000000240), 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/110, 0x6e}, {&(0x7f00000006c0)=""/73, 0x49}], 0x3, &(0x7f0000000780)=""/221, 0xdd}, 0x9b6}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/9, 0x9}, {&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/123, 0x7b}], 0x3}, 0x40}, {{&(0x7f0000000b00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b80)=""/155, 0x9b}, {&(0x7f0000000c40)=""/182, 0xb6}, {&(0x7f0000000d00)=""/74, 0x4a}], 0x3, &(0x7f0000000dc0)=""/70, 0x46}, 0x8}, {{&(0x7f0000000e40)=@tipc, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/15, 0xf}, {&(0x7f0000001f00)=""/231, 0xe7}, {&(0x7f0000002000)=""/209, 0xd1}, {&(0x7f0000002100)=""/155, 0x9b}], 0x5, &(0x7f0000002240)=""/56, 0x38}, 0x9}, {{&(0x7f0000002280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002300)=""/103, 0x67}, {&(0x7f0000002380)=""/12, 0xc}, {&(0x7f00000023c0)=""/67, 0x43}, {&(0x7f0000002440)=""/21, 0x15}, {&(0x7f0000002480)=""/132, 0x84}, {&(0x7f0000002540)=""/148, 0x94}, {&(0x7f0000002600)=""/26, 0x1a}, {&(0x7f0000002640)=""/183, 0xb7}, {&(0x7f0000002700)=""/252, 0xfc}], 0x9, &(0x7f00000028c0)=""/4096, 0x1000}, 0x31c}], 0x5, 0x40000000, &(0x7f0000003a00)) bind$unix(r3, &(0x7f0000003a40)=@file={0x1, './file0\x00'}, 0x6e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0xf1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000480)={r4, @in={{0x2, 0x4e22, @remote}}, 0xd65, 0x6, 0x6ed4, 0x4, 0x4}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r4, 0xac4, 0x1d3e, 0x1f, 0x6, 0x2e, 0x9, 0x6, {r5, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}}, 0x3, 0x4, 0x7ff, 0x5}}, &(0x7f0000000380)=0xfffffe48) 18:10:05 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:05 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000240)={0x1, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000300)={r0, r0, 0x7}) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00002228bd7000fedbdf250280b0000001ff0b000800c2"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000340)=0x1000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e0000100002fc030012000800040000000000"], 0x3}}, 0x0) 18:10:05 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3f000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 4: socket(0xa, 0x6, 0x0) r0 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffc) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000140)={{0x8000, 0x8001, 0x5, 0x100, 0x512, 0x7}, 0xf5}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000100)={'ip_vti\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x200, 0x58b, 0x2, 0x7, 0xd015}, 0x14) 18:10:05 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065729070616e100010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/12) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:05 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f00000000c0)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="b4b1f2846b1bb4a7d82e0c913d85e55f9a4f06d19e453f8131b147d8f737f2219e174f793e4ffe906a8d050310e05215b69794b4d5fcd8018c54ff1f9600991083edc838d7d8c0530aab27844ca004aba06bad4edfe86b9aa8e29bd0578b64ea77722420b7edb626b727c167a92fff2d09d62a8abdfff6e6900a6457889dca4bc9c74e62", 0x84, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) 18:10:05 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2159.606141][T20358] hfsplus: unable to find HFS+ superblock 18:10:05 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x5, &(0x7f0000000140)=[{0x8, 0x1ff}, {0x241, 0x107b00c7}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x625}]}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x0, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900000000ff0f00000000000000"], 0x1) 18:10:05 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x63000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:05 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x400000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000040)={0x6, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x100000a0004, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:05 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:06 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x200, 0x0) 18:10:06 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x10, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:06 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x9100000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe4ffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x5, &(0x7f0000000140)=[{0x8, 0x1ff}, {0x241, 0x107b00c7}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x625}]}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x0, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900000000ff0f00000000000000"], 0x1) 18:10:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0x100, 0x2, 0x400, 0x2, 0x5}) 18:10:06 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x141101, 0x0) 18:10:06 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140), 0x0, r9) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xeffdffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 3: r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x7d) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) [ 2160.454392][ C1] net_ratelimit: 15 callbacks suppressed [ 2160.454399][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.465848][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.471649][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.477449][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.534784][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.541442][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.547753][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.553934][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:06 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000004c0)={0x5, &(0x7f0000000140)=[{0x8, 0x1ff}, {0x241, 0x107b00c7}, {0x2, 0x8}, {0x2, 0x9}, {0x0, 0x625}]}) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x0, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1) 18:10:06 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x1, 0x100) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000200)=@req={0x8, 0xffffffffffffff6e, 0x3, 0x6}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000000c0)) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000180)={0x8, 0xfffffffffffffffc, 0x1, 0x9, 0x10, 0xffffffffffffffff}) 18:10:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf4ffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x200000) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x100, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x1}) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:06 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000600)=@ll={0x11, 0x0, r9, 0x1, 0x1, 0x6, @remote}, 0x80) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1) 18:10:06 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) lookup_dcookie(0x6, &(0x7f0000000040)=""/29, 0x1d) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:06 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf5ffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:07 executing program 4: socket(0xa, 0x6, 0x0) r0 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x109900) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:07 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = semget(0x0, 0x3, 0x200) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000240)=[{0x3, 0x1, 0x800}, {0x3, 0x68, 0x800}, {0x1, 0x5, 0x800}], 0x3, &(0x7f0000000300)={r2, r3+30000000}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000200)={r5, r6, 0x4}) 18:10:07 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x12000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x88000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000001c0)) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000140)=""/35, &(0x7f0000000180)=0x23) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x3, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2161.238730][T20479] hfsplus: unable to find HFS+ superblock 18:10:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x10000, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000180)={@empty, 0x14, r2}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:07 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:07 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1f000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfeffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:07 executing program 4: socket(0xa, 0x6, 0x0) r0 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x109900) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) close(r1) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:07 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f0000000100)=@alg, &(0x7f0000000040)=0x80) setsockopt$inet6_dccp_buf(r1, 0x21, 0xf, &(0x7f0000000200)="e144351d8df40ffe1972d31866237741b4a4586c903993c99817af7a767e769c6a174c9988432ff64724777ef1953f4ff2517a76e64172f13f3bb288b3dc1ae9d7f726eede8dfc5bcb10b694813fe40990330fd02f12", 0x56) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) 18:10:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x100000000, 0x4, 0xd88, 0x6eb0, 0xa6, 0x9, 0x3, 0x7d, 0x2, 0x80000000, 0x1000, 0x0, 0x1, 0x3, 0xd0d8, 0x8], 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:07 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2161.571300][T20505] hfsplus: unable to find HFS+ superblock 18:10:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff010000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:07 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0xc0000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x4, 0x3, "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", 0x1e, 0x2, 0x5, 0xfffffffffffffffd, 0x3ff, 0x2, 0x5, 0x1}, r2}}, 0x120) 18:10:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2021}, {r0, 0x100}, {r0, 0x200}, {r0, 0x4000}, {r0, 0x10}, {r0, 0x524}], 0x6, &(0x7f00000000c0), &(0x7f0000000100)={0x4}, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) write$vnet(r2, &(0x7f0000000300)={0x1, {&(0x7f0000000180)=""/80, 0x50, &(0x7f0000000240)=""/189, 0x3, 0x3}}, 0x68) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x400, @loopback, 0x9}}, 0x0, 0x7fff, 0x3, 0x100000000, 0xa3}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000500)={r3, @in6={{0xa, 0x4e20, 0x5, @local, 0x101}}, 0x3}, &(0x7f00000003c0)=0x90) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2161.654450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2161.654484][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:07 executing program 4: socket(0xa, 0x6, 0x0) r0 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x109900) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f00000000c0)) close(r1) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:07 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:07 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000040)={0x7fffffff, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff0f0000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:07 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x23000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2161.850873][T20537] hfsplus: unable to find HFS+ superblock 18:10:07 executing program 4 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x797, 0x80) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000140)={r4, 0x2}) 18:10:08 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x9, 0x200000) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0x800, 0x0, [], {0x9f4027c9cda4e2d1, @reserved}}) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x2, 0x48400) [ 2162.008022][T20554] FAULT_INJECTION: forcing a failure. [ 2162.008022][T20554] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.025428][T20554] CPU: 0 PID: 20554 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2162.034578][T20554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.044624][T20554] Call Trace: [ 2162.047897][T20554] dump_stack+0x172/0x1f0 [ 2162.052213][T20554] should_fail.cold+0xa/0x15 [ 2162.056910][T20554] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2162.062697][T20554] ? ___might_sleep+0x163/0x280 [ 2162.067526][T20554] __should_failslab+0x121/0x190 [ 2162.072444][T20554] should_failslab+0x9/0x14 [ 2162.076926][T20554] __kmalloc+0x2dc/0x740 [ 2162.081148][T20554] ? fput_many+0x12c/0x1a0 [ 2162.085564][T20554] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2162.091786][T20554] ? strnlen_user+0x1f0/0x280 [ 2162.096439][T20554] ? __x64_sys_memfd_create+0x13c/0x470 [ 2162.101962][T20554] __x64_sys_memfd_create+0x13c/0x470 [ 2162.107309][T20554] ? memfd_fcntl+0x1820/0x1820 [ 2162.112054][T20554] ? do_syscall_64+0x26/0x610 [ 2162.116711][T20554] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2162.122467][T20554] ? trace_hardirqs_on+0x67/0x230 [ 2162.127479][T20554] do_syscall_64+0x103/0x610 [ 2162.132169][T20554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2162.138042][T20554] RIP: 0033:0x4582b9 [ 2162.141927][T20554] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2162.161681][T20554] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2162.170065][T20554] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004582b9 [ 2162.178015][T20554] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bd207 [ 2162.185967][T20554] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2162.194022][T20554] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4ecdc6d4 [ 2162.201968][T20554] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:08 executing program 4 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:08 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3f000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff112000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:08 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r2 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) getpgid(r2) r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x80000) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001000)={0x7, 0x0, [{0xf000, 0x5c, &(0x7f0000000640)=""/92}, {0x5000, 0xf8, &(0x7f0000000840)=""/248}, {0x0, 0x1000, &(0x7f0000001b80)=""/4096}, {0x0, 0xb6, &(0x7f00000009c0)=""/182}, {0x2000, 0xe8, &(0x7f0000000a80)=""/232}, {0x10000, 0xa5, &(0x7f0000000c00)=""/165}, {0x6000, 0x8d, &(0x7f0000000f40)=""/141}]}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000600)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4369de6cda4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x800, 0x0, 0x14d) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x1c, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x7fc}, 0x8050) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r5, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r6 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r6) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r7) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) [ 2162.293413][ T26] kauditd_printk_skb: 87 callbacks suppressed [ 2162.293426][ T26] audit: type=1804 audit(1554833408.284:1493): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3546/bus" dev="sda1" ino=16884 res=1 [ 2162.350764][T20569] FAULT_INJECTION: forcing a failure. [ 2162.350764][T20569] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.378041][ T26] audit: type=1804 audit(1554833408.324:1494): pid=20566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5532/bus" dev="sda1" ino=16982 res=1 [ 2162.399300][T20569] CPU: 0 PID: 20569 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2162.411805][T20569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2162.411811][T20569] Call Trace: [ 2162.411830][T20569] dump_stack+0x172/0x1f0 [ 2162.411853][T20569] should_fail.cold+0xa/0x15 [ 2162.411874][T20569] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2162.425187][T20569] ? ___might_sleep+0x163/0x280 [ 2162.425208][T20569] __should_failslab+0x121/0x190 [ 2162.425222][T20569] ? shmem_destroy_callback+0xc0/0xc0 [ 2162.425236][T20569] should_failslab+0x9/0x14 [ 2162.425256][T20569] kmem_cache_alloc+0x2b2/0x6f0 [ 2162.438525][ T26] audit: type=1804 audit(1554833408.334:1495): pid=20567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3546/bus" dev="sda1" ino=16884 res=1 [ 2162.439938][T20569] ? shmem_destroy_callback+0xc0/0xc0 [ 2162.439953][T20569] shmem_alloc_inode+0x1c/0x50 [ 2162.439979][T20569] alloc_inode+0x66/0x190 [ 2162.451605][ T26] audit: type=1804 audit(1554833408.334:1496): pid=20564 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3546/bus" dev="sda1" ino=16884 res=1 [ 2162.455062][T20569] new_inode_pseudo+0x19/0xf0 [ 2162.455089][T20569] new_inode+0x1f/0x40 [ 2162.455101][T20569] shmem_get_inode+0x84/0x7e0 [ 2162.455119][T20569] __shmem_file_setup.part.0+0x7e/0x2b0 [ 2162.455135][T20569] shmem_file_setup+0x66/0x90 [ 2162.455152][T20569] __x64_sys_memfd_create+0x2a2/0x470 [ 2162.464131][ T26] audit: type=1804 audit(1554833408.334:1497): pid=20566 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5532/bus" dev="sda1" ino=16982 res=1 [ 2162.464451][T20569] ? memfd_fcntl+0x1820/0x1820 [ 2162.464465][T20569] ? do_syscall_64+0x26/0x610 [ 2162.464481][T20569] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2162.595660][T20569] ? trace_hardirqs_on+0x67/0x230 [ 2162.600684][T20569] do_syscall_64+0x103/0x610 [ 2162.605303][T20569] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2162.611187][T20569] RIP: 0033:0x4582b9 [ 2162.615078][T20569] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2162.634674][T20569] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2162.643080][T20569] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004582b9 18:10:08 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x513100, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0xff) r1 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0xfff, 0x8001}, {0x1, 0x1}]}, 0x14, 0x2) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) [ 2162.651043][T20569] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bd207 [ 2162.659006][T20569] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2162.666982][T20569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4ecdc6d4 [ 2162.675030][T20569] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff600000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:08 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x1a0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400480, 0x0) setxattr$security_ima(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@v1={0x2, "03636858a1163dbfe9285b1770e722bd99c9"}, 0x13, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="06012bbd7000ffdbdf250e00000058000000080004004e240000080006006f766600080001000a00000008000600727200000c0007003a00000004000000080004004e21000008000200af00000008000b007369700008000b007369700008000900350000002000020008000500ff0f6c4914000100ac1414bb000000000000000000000000080004000408000008000500090000000800002a0000000c000200c8bea0d6716ea167b90af7c65471c30ba5a6de3950892394315b04c96c52e0e2"], 0xb8}, 0x1, 0x0, 0x0, 0x400c000}, 0x41) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2162.783765][ T26] audit: type=1804 audit(1554833408.774:1498): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3547/bus" dev="sda1" ino=16760 res=1 18:10:08 executing program 4 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:08 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1d2826926507d2556495eac2500"/44, 0x2c, 0x4000001, 0x0, 0xfffffffffffffd40) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0x83e, &(0x7f0000000480)) io_setup(0xcd8, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:08 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000005c0)={'veth0_to_bridge\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xffffffffffffffff, 0xb8, 0xf5da, @buffer={0x0, 0xb3, &(0x7f00000002c0)=""/179}, &(0x7f0000000380)="ea54e6e25a1e16d61c993c233ad99081d15ff422d8afe288313de5623bcc90a88ff9682b4a8338ca1cdfa8116d3e1844481000fc5d5279a87ee0ba342c7ba3d1f3b06819ccafcf59d4aff2fcdc2969786d34958d9fc17017a528227d304a469af801341227731bbb44a6c720aa1e3672f8676309eae61e20bf52f39a79e53eab1d2b6fc8ccef67091eaf614ba2bbdcb260fa6c11391a24c650e6892ef4043ba0495e1a6f561dce16e2c30a26a5761cf325b5efea0faf7f8e", &(0x7f0000000180)=""/48, 0x47, 0x2, 0x2, &(0x7f0000000200)}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, r0, 0x0, 0x1, &(0x7f0000000240)='\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) rt_tgsigqueueinfo(r1, r2, 0x2c, &(0x7f0000000540)={0x6, 0x2, 0x8}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0xffffff84}}, 0x0) [ 2162.868709][ T26] audit: type=1804 audit(1554833408.824:1499): pid=20589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5533/bus" dev="sda1" ino=16982 res=1 18:10:08 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffdef, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2162.945476][T20596] FAULT_INJECTION: forcing a failure. [ 2162.945476][T20596] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.973277][ T26] audit: type=1804 audit(1554833408.844:1500): pid=20589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5533/bus" dev="sda1" ino=16982 res=1 [ 2163.028477][T20596] CPU: 0 PID: 20596 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2163.037705][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.047762][T20596] Call Trace: [ 2163.051060][T20596] dump_stack+0x172/0x1f0 [ 2163.055399][T20596] should_fail.cold+0xa/0x15 [ 2163.060001][T20596] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2163.063122][ T26] audit: type=1804 audit(1554833408.844:1501): pid=20589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5533/bus" dev="sda1" ino=16982 res=1 [ 2163.065811][T20596] __should_failslab+0x121/0x190 [ 2163.065829][T20596] should_failslab+0x9/0x14 [ 2163.065842][T20596] kmem_cache_alloc+0x2b2/0x6f0 [ 2163.065859][T20596] ? current_time+0x6b/0x140 [ 2163.109388][T20596] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 2163.115188][T20596] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2163.115203][T20596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2163.115218][T20596] ? timespec64_trunc+0xf0/0x180 [ 2163.115233][T20596] __d_alloc+0x2e/0x8c0 [ 2163.127224][T20596] d_alloc_pseudo+0x1e/0x70 [ 2163.127239][T20596] alloc_file_pseudo+0xe2/0x280 [ 2163.127259][T20596] ? alloc_file+0x4d0/0x4d0 [ 2163.127273][T20596] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2163.127296][T20596] __shmem_file_setup.part.0+0x108/0x2b0 [ 2163.144366][ T26] audit: type=1804 audit(1554833409.024:1502): pid=20607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3548/bus" dev="sda1" ino=17071 res=1 [ 2163.145652][T20596] shmem_file_setup+0x66/0x90 [ 2163.145674][T20596] __x64_sys_memfd_create+0x2a2/0x470 [ 2163.196629][T20596] ? memfd_fcntl+0x1820/0x1820 [ 2163.201404][T20596] ? do_syscall_64+0x26/0x610 [ 2163.206082][T20596] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2163.211361][T20596] ? trace_hardirqs_on+0x67/0x230 [ 2163.216382][T20596] do_syscall_64+0x103/0x610 [ 2163.220970][T20596] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2163.226857][T20596] RIP: 0033:0x4582b9 [ 2163.230748][T20596] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.250352][T20596] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2163.258760][T20596] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004582b9 [ 2163.266723][T20596] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bd207 18:10:09 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x3, 0x8, [{0x5b9f, 0x0, 0xc}, {0x4cf, 0x0, 0x80}, {0x6, 0x0, 0x1}]}) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000140)=0x473dd85e, 0x2) 18:10:09 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x61000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2163.274687][T20596] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2163.282646][T20596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4ecdc6d4 [ 2163.290604][T20596] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:09 executing program 4 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x1f) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x61b400000, 0x1, 0x3]}) 18:10:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xba, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xf000, &(0x7f00000000c0), 0x2, r2, 0x4}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:10:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffff7f, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:09 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(r4) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, r3}, 0xb8fb, 0x9, 0x0, 0x8001, r5, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f00000006c0)='/dev/loop#\x00', 0x6, 0x1ffb) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000004c0)=0x7fff) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r8) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r9) io_setup(0xa7e7, &(0x7f0000000480)) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000580)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/501], 0x1) [ 2163.419705][T20621] FAULT_INJECTION: forcing a failure. [ 2163.419705][T20621] name failslab, interval 1, probability 0, space 0, times 0 [ 2163.438913][T20621] CPU: 0 PID: 20621 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2163.448040][T20621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.458087][T20621] Call Trace: [ 2163.461384][T20621] dump_stack+0x172/0x1f0 [ 2163.465722][T20621] should_fail.cold+0xa/0x15 [ 2163.470324][T20621] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2163.476136][T20621] ? ___might_sleep+0x163/0x280 [ 2163.481006][T20621] __should_failslab+0x121/0x190 [ 2163.485943][T20621] should_failslab+0x9/0x14 [ 2163.490441][T20621] kmem_cache_alloc+0x2b2/0x6f0 [ 2163.495295][T20621] __alloc_file+0x27/0x300 [ 2163.499731][T20621] alloc_empty_file+0x72/0x170 [ 2163.504487][T20621] alloc_file+0x5e/0x4d0 [ 2163.508744][T20621] alloc_file_pseudo+0x189/0x280 [ 2163.513684][T20621] ? alloc_file+0x4d0/0x4d0 [ 2163.518186][T20621] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2163.524435][T20621] __shmem_file_setup.part.0+0x108/0x2b0 [ 2163.530069][T20621] shmem_file_setup+0x66/0x90 [ 2163.534742][T20621] __x64_sys_memfd_create+0x2a2/0x470 [ 2163.540108][T20621] ? memfd_fcntl+0x1820/0x1820 [ 2163.544866][T20621] ? do_syscall_64+0x26/0x610 [ 2163.549545][T20621] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2163.554828][T20621] ? trace_hardirqs_on+0x67/0x230 [ 2163.559857][T20621] do_syscall_64+0x103/0x610 [ 2163.564460][T20621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2163.570342][T20621] RIP: 0033:0x4582b9 [ 2163.574232][T20621] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2163.593828][T20621] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2163.602243][T20621] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004582b9 [ 2163.610215][T20621] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bd207 [ 2163.618186][T20621] RBP: 000000000073bf00 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2163.626153][T20621] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4ecdc6d4 [ 2163.634121][T20621] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:09 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe0ffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:09 executing program 4 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:09 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffe4, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:09 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) syz_read_part_table(0x4, 0x8, &(0x7f0000002700)=[{&(0x7f0000000300)="efbd75511120e8cb80f38eb6dfd58f0893baa1d8d0026699c291015ed81be81db6815511b4cdc19e49ad5162d8a2479195a36fbccc92077c3a6db456540bfb79534e1dcfb1f6abe15f2f6cb1fa3e8b9730a431a750e537", 0x57, 0x401}, {&(0x7f0000000380)="58be17064cf25e9d2677dbf5d0f376c568787b73beb25385792f17f88bef3769d3afd18f1a103955f8b6b22df29b05cc8c37d782687ca62ec958bf09a73315ff7234656585921650f3a15f6658e880ae4672fd2a2bf3144883014fa2a0d74b4c49aff64d024670a9e02d24ed6eff5228658b52630d", 0x75, 0x3ff}, {&(0x7f0000000400)="029fb38a829782faa30ad7e82f4ff78acb0cf354f197abb25af463775acbb1835db7ed79015a7ab7f97c182ee447921ce6596b1cc116a2a75e79aacb02724032ec79f178ed3a3a4391788e4d791107623eb6702ecde49212c5528591dd911bb068dd3e66aff08fec980e050b365e27c42b985bf7a9fe6515d87ebc13608956aeeb63dee95e5df1506ba5be8500583289ac77f2ba905c96ad56a9b3bcbed5ad681fedeaa10c435e5b44b0cc906bdfaaf442892a50e71fbc1bb534962e0c1ec5d862903084b864e5b08b62", 0xca, 0x1}, {&(0x7f0000000500)="4676b811401efa9610fb9e2bb7e41c1ce6014615f43909a423b55d57cce2a247f032f2abe6c6054c8ce127e113d50f1cc133f88cc5eb8cd0af751cbdb477d5d025cbfeeb4e5dec6415753a05778647b6ceb300b1cdc92f2b369d90fb3ff147dd229d8afcb9f36c670c5b4f4fbea795b26c20a76c0f5056f777decd6786ae7bd0fead420a832810d4e1ca3c4719c51c9b5d23c5841af87b4605cbffc04a7bfb928c62436dbaee83be384fcb56315c851c1a55d148bb1e4ee158714aca3f5fe6b67f1d7fc22f6058e92d37c0e4d9731aa763f947cb452a584ba056041e9778f5f9b491595ed9d565d77e1d81e7bfeaa56d96d8481f9915", 0xf6, 0x8}, {&(0x7f0000000600)="5d5070923461", 0x6, 0x9}, {&(0x7f0000000640)="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", 0x1000, 0x7ff}, {&(0x7f0000001640)="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", 0x1000, 0xfffffffffffffeff}, {&(0x7f0000002640)="7aad645937cec1328745e7adc1c2652b1c5b48a2e65a2bf379a0159e0fc9f42906fbd19891e6fd543c341fce936a6fed878c83eddc6a188dff8cbfcfafbc383395a8bbd80dc41b78b3194d0e3db826dc02c6992bcf642ea5d93196d1fa80cf05f186c7479356f5668b3e061d9e6d995a5df02ffcc0fec7f40d8d26059d55f622008c1c32fcbeb43635774bf7edba1a56c4bfb9837c46f4fa34d1c3cb3c3a72b291257308e2548eda1531553e9bdc", 0xae, 0x101}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x200000, 0x168) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000240), &(0x7f00000002c0)=0xb) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180), &(0x7f0000000200)=0x4) r3 = add_key$keyring(&(0x7f00000027c0)='keyring\x00', &(0x7f0000002800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003a00)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000003b00)=0xe8) getgroups(0x7, &(0x7f0000003b40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff]) keyctl$chown(0x4, r3, r4, r5) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000002840)={r3, 0x1000, 0x63ed}, &(0x7f0000002880)={'enc=', 'oaep', ' hash=', {'sha224-avx2\x00'}}, &(0x7f0000002900)="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", &(0x7f0000003900)=""/240) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf90}) 18:10:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20100, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x6f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 2163.869730][T20647] FAULT_INJECTION: forcing a failure. [ 2163.869730][T20647] name failslab, interval 1, probability 0, space 0, times 0 18:10:09 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe4ffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2163.935287][T20647] CPU: 0 PID: 20647 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2163.944619][T20647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2163.956176][T20647] Call Trace: [ 2163.959454][T20647] dump_stack+0x172/0x1f0 [ 2163.963768][T20647] should_fail.cold+0xa/0x15 [ 2163.968338][T20647] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2163.974124][T20647] ? ___might_sleep+0x163/0x280 [ 2163.979074][T20647] __should_failslab+0x121/0x190 [ 2163.984221][T20647] should_failslab+0x9/0x14 [ 2163.988706][T20647] kmem_cache_alloc+0x2b2/0x6f0 [ 2163.993535][T20647] ? rcu_read_lock_sched_held+0x110/0x130 [ 2163.999232][T20647] ? kmem_cache_alloc+0x32e/0x6f0 [ 2164.004236][T20647] security_file_alloc+0x39/0x170 [ 2164.009237][T20647] __alloc_file+0xac/0x300 [ 2164.013635][T20647] alloc_empty_file+0x72/0x170 [ 2164.018379][T20647] alloc_file+0x5e/0x4d0 [ 2164.022598][T20647] alloc_file_pseudo+0x189/0x280 [ 2164.027515][T20647] ? alloc_file+0x4d0/0x4d0 [ 2164.031999][T20647] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2164.038221][T20647] __shmem_file_setup.part.0+0x108/0x2b0 [ 2164.043829][T20647] shmem_file_setup+0x66/0x90 [ 2164.048489][T20647] __x64_sys_memfd_create+0x2a2/0x470 [ 2164.053842][T20647] ? memfd_fcntl+0x1820/0x1820 [ 2164.058582][T20647] ? do_syscall_64+0x26/0x610 [ 2164.063236][T20647] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2164.068499][T20647] ? trace_hardirqs_on+0x67/0x230 [ 2164.073502][T20647] do_syscall_64+0x103/0x610 [ 2164.078074][T20647] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2164.083960][T20647] RIP: 0033:0x4582b9 [ 2164.087842][T20647] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2164.107528][T20647] RSP: 002b:00007f4e4ecbaa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2164.115914][T20647] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004582b9 [ 2164.124222][T20647] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 00000000004bd207 [ 2164.132177][T20647] RBP: 000000000073bfa0 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2164.140125][T20647] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4ecbb6d4 [ 2164.148188][T20647] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000003 18:10:10 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x5fabaf84, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000600)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8100, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r6, 0x4008ae73, &(0x7f0000000580)={0x80, 0x3}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r8) socket$tipc(0x1e, 0x0, 0x0) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r9) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"/513], 0x1) 18:10:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff4, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:10 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x100000000000) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000efa900110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="208b11f8f6174bf83f372286d840f0ff71226ae4", 0x14}], 0x1) 18:10:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x2000000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x240, @time={0x77359400}, 0x3f, {0x7, 0x3}, 0xcaf, 0x1, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:10 executing program 4 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:10 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xeffdffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:10 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x2000, 0xa09, &(0x7f0000ffd000/0x2000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/154, 0x9a}], 0x1}, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000004240)=[{{&(0x7f00000011c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000001240)=""/159, 0x9f}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000001380)=""/242, 0xf2}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000001480)=""/115, 0x73}], 0x5, &(0x7f0000004640)=""/242, 0xf2}}, {{&(0x7f0000002940)=@can, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000029c0)=""/62, 0x3e}, {&(0x7f0000002a00)=""/137, 0x89}], 0x100000000000031b, &(0x7f0000000740)=""/115, 0x73}}, {{&(0x7f0000003fc0)=@nfc_llcp, 0x80, &(0x7f0000004140), 0x0, &(0x7f0000000240)=""/170, 0xaa}}], 0x3, 0x0, &(0x7f00000043c0)={0x0, 0x989680}) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000100), 0x4) r4 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000004c0)=0x101, 0x4) r5 = getpgid(r4) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x4, 0x64, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='As(\x8aO\xff\x14\x89\xe0H^\xe1\x1d\x81\xde\x97\x1e\x1f\xe4\xa1ymme', &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x179, r8) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, 0x0) 18:10:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff5, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2164.394948][T20679] FAULT_INJECTION: forcing a failure. [ 2164.394948][T20679] name failslab, interval 1, probability 0, space 0, times 0 18:10:10 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x8001, 0x2) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000140)={0x100000000, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000727370616e000010000200"/22], 0x40}}, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x400, 0x0) dup3(r2, r2, 0x80001) [ 2164.470376][T20679] CPU: 1 PID: 20679 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2164.479509][T20679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2164.479516][T20679] Call Trace: [ 2164.479536][T20679] dump_stack+0x172/0x1f0 [ 2164.479557][T20679] should_fail.cold+0xa/0x15 [ 2164.501754][T20679] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2164.507559][T20679] ? __should_failslab+0x87/0x190 [ 2164.507580][T20679] __should_failslab+0x121/0x190 [ 2164.507601][T20679] should_failslab+0x9/0x14 [ 2164.522009][T20679] kmem_cache_alloc+0x2b2/0x6f0 [ 2164.526878][T20679] ? notify_change+0x6d5/0xfb0 [ 2164.531649][T20679] ? do_sys_ftruncate+0x41e/0x550 [ 2164.536687][T20679] getname_flags+0xd6/0x5b0 [ 2164.541194][T20679] getname+0x1a/0x20 [ 2164.545090][T20679] do_sys_open+0x2c9/0x5d0 [ 2164.549508][T20679] ? filp_open+0x80/0x80 [ 2164.553761][T20679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2164.560011][T20679] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2164.565475][T20679] ? do_syscall_64+0x26/0x610 [ 2164.570154][T20679] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2164.576214][T20679] ? do_syscall_64+0x26/0x610 [ 2164.580911][T20679] __x64_sys_open+0x7e/0xc0 [ 2164.585417][T20679] do_syscall_64+0x103/0x610 [ 2164.590020][T20679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2164.595909][T20679] RIP: 0033:0x412251 [ 2164.599806][T20679] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 18:10:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x1ff}, &(0x7f0000000140)=0x8) getpeername$netlink(r0, &(0x7f0000000180), &(0x7f0000000200)=0xc) 18:10:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:10 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf0ffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2164.619531][T20679] RSP: 002b:00007f4e4ecdba80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2164.627943][T20679] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412251 [ 2164.635910][T20679] RDX: 00007f4e4ecdbb0a RSI: 0000000000000002 RDI: 00007f4e4ecdbb00 [ 2164.643879][T20679] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2164.651843][T20679] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 2164.659817][T20679] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:10 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x600, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) accept$unix(r0, &(0x7f0000000100), &(0x7f0000000080)=0x6e) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[]}, 0x1, 0x0, 0x0, 0x800}, 0x40) 18:10:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffb, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:10 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000140)=0x5) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {0x0}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000004c0)={r6, 0x3}) r9 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r8) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r9) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/hwrng\x00', 0x20000, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 18:10:10 executing program 4 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:10 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf4ffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:10 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000844ff5c38b3c07e000010065727370616e000010000200040012000800f5ff00000000"], 0x40}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) 18:10:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2164.996085][T20730] FAULT_INJECTION: forcing a failure. [ 2164.996085][T20730] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2165.009301][T20730] CPU: 1 PID: 20730 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2165.018398][T20730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.028449][T20730] Call Trace: [ 2165.031726][T20730] dump_stack+0x172/0x1f0 [ 2165.036048][T20730] should_fail.cold+0xa/0x15 [ 2165.040615][T20730] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2165.046404][T20730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2165.051859][T20730] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2165.057133][T20730] ? retint_kernel+0x2d/0x2d [ 2165.061705][T20730] should_fail_alloc_page+0x50/0x60 [ 2165.066883][T20730] __alloc_pages_nodemask+0x1a1/0x7e0 [ 2165.072232][T20730] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2165.077923][T20730] ? find_held_lock+0x35/0x130 [ 2165.082672][T20730] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2165.088459][T20730] cache_grow_begin+0x9c/0x860 [ 2165.093200][T20730] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2165.099418][T20730] kmem_cache_alloc+0x62d/0x6f0 [ 2165.104247][T20730] ? notify_change+0x6d5/0xfb0 [ 2165.108988][T20730] ? do_sys_ftruncate+0x41e/0x550 [ 2165.113991][T20730] getname_flags+0xd6/0x5b0 [ 2165.118997][T20730] getname+0x1a/0x20 [ 2165.122879][T20730] do_sys_open+0x2c9/0x5d0 [ 2165.127275][T20730] ? filp_open+0x80/0x80 [ 2165.131491][T20730] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2165.137710][T20730] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2165.143187][T20730] ? do_syscall_64+0x26/0x610 [ 2165.147841][T20730] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2165.153977][T20730] ? do_syscall_64+0x26/0x610 [ 2165.158634][T20730] __x64_sys_open+0x7e/0xc0 [ 2165.163115][T20730] do_syscall_64+0x103/0x610 [ 2165.167694][T20730] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2165.173559][T20730] RIP: 0033:0x412251 [ 2165.177433][T20730] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2165.197010][T20730] RSP: 002b:00007f4e4ecdba80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2165.205396][T20730] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412251 [ 2165.213344][T20730] RDX: 00007f4e4ecdbb0a RSI: 0000000000000002 RDI: 00007f4e4ecdbb00 [ 2165.221295][T20730] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2165.229253][T20730] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 2165.237207][T20730] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:11 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:11 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf5ffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0xfffffffffffffff8, 0xffff, 0xb05, 0x1]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2165.349517][T20730] hfsplus: unable to find HFS+ superblock 18:10:11 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)={0x8000, 0x1, 0xee1, 0xffffffffffffd258, 0x1000, 0x9}) 18:10:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:11 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffff9c, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r0}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010000000000000e5ffffffffffffff0089cdbb2a90cf00c2419dce4ca199821b90ae68ad86d26e637d66543e36cc7d844aa142b44109fedd6e61d88eb227ee15dc46ccd3d9b021b7cddebf359719dfd80f8bd5e3f86288ffee4ad8fcc7c9c041ad02e0f6ad542cb724ae6e8ae29168f76cc9dd9a7fc296ffd0092c1f6620653d05d8ca5c0bb7ef54589d8bd17061094547373ad11a43e0cb3529023b160fa7282741dd14708066557b8282a4421bdd14178716c02ff52eb549c86f2e25f55133efbe75a3010d0393072c2ac9136911b1b067bea9bcb9f814b4e9959357f09d", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:11 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x3, 0x4, 0x8, 0x9, 0x0, 0xe2, 0xf1}, 0xc) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:11 executing program 4 (fault-call:1 fault-nth:7): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x202080, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000100)={0x6, 0xd, 0x2, 0x1d, 0xb, 0x941, 0x6, 0xca, 0x1}) r4 = semget(0x2, 0x3, 0x6f4) semctl$SETVAL(r4, 0x3, 0x10, &(0x7f0000000140)=0x80000001) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0xa01) 18:10:11 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2165.575574][T20760] FAULT_INJECTION: forcing a failure. [ 2165.575574][T20760] name failslab, interval 1, probability 0, space 0, times 0 [ 2165.624478][T20760] CPU: 1 PID: 20760 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2165.633749][T20760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2165.643810][T20760] Call Trace: [ 2165.647110][T20760] dump_stack+0x172/0x1f0 [ 2165.651452][T20760] should_fail.cold+0xa/0x15 [ 2165.656044][T20760] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2165.656065][T20760] ? ___might_sleep+0x163/0x280 [ 2165.656084][T20760] __should_failslab+0x121/0x190 [ 2165.656100][T20760] should_failslab+0x9/0x14 [ 2165.656117][T20760] kmem_cache_alloc+0x2b2/0x6f0 [ 2165.656130][T20760] ? __save_stack_trace+0x99/0x100 [ 2165.656148][T20760] __alloc_file+0x27/0x300 [ 2165.656163][T20760] alloc_empty_file+0x72/0x170 [ 2165.656179][T20760] path_openat+0xef/0x46e0 [ 2165.656192][T20760] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2165.656202][T20760] ? kasan_slab_alloc+0xf/0x20 [ 2165.656214][T20760] ? kmem_cache_alloc+0x11a/0x6f0 [ 2165.656231][T20760] ? getname_flags+0xd6/0x5b0 [ 2165.671791][T20760] ? getname+0x1a/0x20 [ 2165.671806][T20760] ? do_sys_open+0x2c9/0x5d0 [ 2165.671816][T20760] ? __x64_sys_open+0x7e/0xc0 [ 2165.671835][T20760] ? do_syscall_64+0x103/0x610 [ 2165.737969][T20760] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2165.744044][T20760] ? __lock_acquire+0x548/0x3fb0 [ 2165.748978][T20760] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2165.754357][T20760] ? __alloc_fd+0x430/0x530 [ 2165.758855][T20760] do_filp_open+0x1a1/0x280 [ 2165.763366][T20760] ? may_open_dev+0x100/0x100 [ 2165.768044][T20760] ? lock_downgrade+0x880/0x880 [ 2165.772900][T20760] ? kasan_check_read+0x11/0x20 [ 2165.777742][T20760] ? do_raw_spin_unlock+0x57/0x270 [ 2165.782954][T20760] ? _raw_spin_unlock+0x2d/0x50 [ 2165.787800][T20760] ? __alloc_fd+0x430/0x530 [ 2165.792307][T20760] do_sys_open+0x3fe/0x5d0 [ 2165.796723][T20760] ? filp_open+0x80/0x80 [ 2165.800967][T20760] __x64_sys_open+0x7e/0xc0 [ 2165.805474][T20760] ? do_syscall_64+0x5b/0x610 [ 2165.810145][T20760] do_syscall_64+0x103/0x610 [ 2165.814372][ C0] net_ratelimit: 21 callbacks suppressed [ 2165.814379][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2165.814742][T20760] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2165.820412][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2165.826037][T20760] RIP: 0033:0x412251 [ 2165.826051][T20760] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2165.826058][T20760] RSP: 002b:00007f4e4ecdba80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 18:10:11 executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/114, 0x72}], 0x1, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x40000000000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:11 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x60ffffffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2165.826070][T20760] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412251 [ 2165.826082][T20760] RDX: 00007f4e4ecdbb0a RSI: 0000000000000002 RDI: 00007f4e4ecdbb00 [ 2165.885399][T20760] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2165.893376][T20760] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 2165.901339][T20760] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2165.910395][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2165.916615][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:11 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x683, 0x80080) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@null=' \x00', 0x2, 'nlmon0\x00'}) 18:10:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f0000000000)='[', 0x1, 0x4000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="fe", 0x1, 0x4000, 0x0, 0x0) close(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:12 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfeffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x740000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:12 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100011010000000000000000cc92caec", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:12 executing program 4 (fault-call:1 fault-nth:8): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:12 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000600)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00), 0x29083466f6ee5c1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x100, 0x9, 0x12, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x7, 0x8001, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x3a2cd68d, 0x0, 0x6, 0xffb, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_config_ext={0xffffffffffffff14, 0x4}, 0x100, 0x8, 0x4, 0x6, 0x0, 0x3ff, 0xc1f}, 0x0, 0xe, r1, 0x4) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="961a7e71dbbbdc77b717f06339a2402d4fd2b193395e29806a5f68554c8e5fef429a627178e7d81051b78b2c822a6098c3b813d9", 0xf6b2f21c12a85e8f}, {&(0x7f00000008c0)="985a1496249af0576345b6e24bf2b5e7075fb44eeb5dd3720f8c87641a719dceb8e3a30e997c214eb3aca1580200b509fa92edf48d6af5bc8c1d0e8a46566b575883480f199ad0ac3e1c039bba6101770837afc6bd3a01c04e168fdf649aa0e7d4f2dad9908f2cc8841abaff52583335baf8f7f54471c0e6696bd6c07552", 0x7e}, {&(0x7f0000001b80)="c916eddf8863018b8414f33d788241454e8c883b3b740007a3f4af99d415f9ad36cc21f435a7818ca3dc7c6983e8869a77c3ec5bca0ea80f0a9c46130c019370f2fbc75d03aa9d41f700edcae91b3c7114bb3b9f2d18703ad4fe0abbf68e87e04b840936479b98344d7657631a3afd16ea908e34a97d955316228880367331e27f0d0a749777175e1723f3ffaf419db03706a286d7376853fe16de73e7b5241eb0640cd462e30efe31fbcb51731963884f5447f46e4d76fc0b39a034863c609d33d0c2a64a0bf4fbfc510545ee009f4cbabe8dc1cf83b712c1fd33c318a3b54442f12c8fcfa0414c4d8dcd165eace55a7bb23377a067fbae0288599ea7527d389f5d5e8c46507f59575ba709b6c38247fccec34d91e1e19fe535c640f3ae885d4e21bf08c1a6d20993c4b592cf4b3492d44d8419ffec14b7d16ff9f43f4953c663c22849a37babba45bc466ed3d45d4b80127759fc05edae330b65079d64a8faf22bd2d84cec930e3edcf6ad66a9fd97d93aa7a471f742a994e1f3d7f1e0529f2b9521e0e9bef511cb6e90f9d0a39de9c7512bc380381f2c60abe2f448b82fc733d6c6bbf9696cfe6e7c88b92ec42ddc36a1c84676a2115dd1e28e04af9d99cde7b8a99482cd3db8976eaa191b5e4cb155bffc44d0aaa3b8b3102b80436d98fa6150e328b227e6fcc9a4492579ffab15f890dc896341b0ced3b1a83fb32d65c8fe8a4baf99ee1aa8505b8a5a54b04d102694eac98102dc9c67e2a1fe740d1c05900ce75d1d3e20fda381ef27416ab7c00d14defa0981f4e99872284f33b620276caddd1345c8712f71d1c1512775044cbd5807990a89e4169005319836ff0e27616df1ffbcfe9172c32648de89dea9f7877a670d4d4df33602ed75cbc25f563363fa2edd4cf384e585104b77bf777bc96218f0ebee91ceffad11819cfb63148fe58fae2f6d1d79172d4d76cc0f842943826e76f3d46aa441fd79387e48b6a4796040d70fe20ed75ed42845a93fadb3845e75ec5212182154db20efe08c4d41ccbf5f3393bce809badba70fdac1e01ed00004d7bb5f1a7ae413a81730db9d1e5b7a05653e6d7240e1ca9e021c5817b5b41c457fbafd10eb26e1f08f1096b44e80e0e83a35d476fdd9ee6d2890fe145ad6c41ecdb7e0d451e2fbd64407cbf7aff9b139a4ad9b4bcd4277658887fc18119cda9f257e7a417773b7cb6f68a4a5aea4aa1ce44dea89e33c71380ee75cb8470bf524bb83e19d9d77a789663c8d123cf718478228b3205686fab87f4416f7f22b81e7142eca61ab56557f048bc1133ede8c8a629467994b13bbf37f557158ae95a15ce8ab345bccad2293551330b87e1c6e5447c3df6778e21df3269f28454d7eb308e5480724b76b40c7ff378a914cdf197f56d5110729ecc26c19bf842936081dea22b3cbdb146966bd9b5793f1a751a7c7bfd125cc19e9619b6246f5097a55fc424bdbe17ecf11c459a3b2b9f2e59d6dc6da01873ac982948b09ab6fe365a33fdd2d0bdf782eb1e919ee6bfd970ebb27a7467fdec6d11b8744fbbd07770ca88a8ec307ef4b1aa1f31fa53cb461e10f26264fbf6c94e9c7cf4226c319f2b6d43995e56650c7254b1f123683f478bed717dd81d9c1029b40f897b1a8a744d24a0cf7418caaa809eef82307b2fb371e5ed95ffb5af63b901d2716d02c00c55ffc3793246c1e4cb0dc19ed8cb65480800f02925ca4a9c6cd8fd36b71def2dab00697d6619410d29e7bcf93bee8ff7e79b178e2e5313b8c0a3d7c8b3ebeaf055baff70a6b4467df07d7fd4408142399b91b97cc1a90d145f242b6dc89abdcbd342ac01dba933bc90e16629a19aafd9982db95d4512eeab9dda33a0a02e2606d7643135a18ec1aa98ea4a2836c96f8b0b025027371e9f4e9330a58f9f4af4c1c680fbfff62a69a59abe5c39e75d75b26d386adefcd307a2f2de440f63bfd546915fe55a5e04ccf58bbcab75e53bc78677396bd73cabadc4da013b847a235974f4e82f5e49462ae13e497163d9f7ca0573e8483b0a5dcd778eb815481aa03cb0dd3f9fdfedd759b6eaf48e8977f75d2ae6a0a181be10ef60188211428d4e86f9b8b7534bd153d42463d74193aa8fef02ed2c94d19ff15b5665999334fd8d5dff1aafb998d10b092e7e25fbc8116ffd2ede4e73a5a9ed2deb2f3c3cb7d997a6dd12e5a7780774eeb9ef215d50befba645bd9a37e08e09afbb3ab2c09883941f04a1735e37a1c5852a2241d6b39418c74ac4c90c369302af444955111bc43f1c02eb9cd1025273dc5085299c7f45087a1f46d0fd77fd08872b3420c8025e56ae0d57bd0c9f9cbafae4941f23de3a9f5f0390783c42fa7688699da5056c10ac2a0dd0ab374ea7faa320bff8a2ca6b3a0cca60a76293b647329802e6bdb12faa7f4adffc81247b89428f119dea0f9be5e64ad1cfa1f4dbe4a0a85357e8a0e5b98678882a49ffd8131d51b4da8344babc9602d73a252b597d73fde87360ccae34f43c379dec08ea5a9bebe5451bd3a01d30cfe4f835a94e807eb23040a758dae17c531e91b7b5ec7bd1e8e8f0cb05733eefaede130ecd4252115b82dc68046eae2941561707ae09df06d992e7bbfc87138c06afc9017c9ac58e45cdfa1a9a9f8f192cf5c449a2eae970afc1c93951ad0668a7949519a2ab5f882b84b097651a02d45d61e2e2d92130b5181c9a5a79acfe20462b110a41a27b5688bed7bfc3fc60962667d1adddd1cc211153e7dd3c357027250030d26e5d3739365155884215600bc35b6ca758ce2fecdd465f20a51e956cdc734adb8e07832c356d55ad5dcf712c87aac71a0ff998ea2c54fecdddecbd300da1f40176ab85e7f762f05f0d7804218afb06887e71845eb24759d73ab4683a78147fd8e666b7d22a940a9d3673ecde0e0f74d82370983759b6beca1f50280c5303c02375c6dbdbfa7b0a3348540a38a866215ee02116767532d46002845db1166dfae8a79f65257c63361ca979e50296b65951e28793e3fc7bc9c22bfa9cadf76b7969e39018c49fdbfe7102e943d38b9d3c1d11178a09675cd2014660b05881e7a9c360e2c0ebefdadd32de0dbc02d1b98948bc0737a578da958b43ecc3ab5aef740830d081106a7664f3917b418312c1e13324d22997ce6ffdd4dd5a8f7f42a458d4a461454b110e1e517f0bbc92c4997fda6838f277c0448133d7ed1e74ccffe71a1476820277d15a5aee7a06bb10a8d932a9714ea6a7e015caba4774de82326d9a4ec5b41c5198f51af6e523b31a64a5a4446fa936e3c88e0a391c6a37bfdda169a40821409aa19f6fbfd8d6a0848d4dc00b98d42d90c4fe5efdf4fa1d1fd29b5cb85d95145ee893910e478889e8a44a03d3023b411ab18f09ccc6bab4e79eebf2a062f656243d2322ad0d66efcc99233f466f61f1bd809703f441c8f2b19e9c095f6338e59c43c4d67ff48a01be98ff47dd3ff99a8ed786c9c9e189c2a29acb05e371958d6372e5202ad305e0a12f2916f31a4130d223afb690a7d3f927b7db83de846a551c7ef752eed02eecd1258721f5d5166d67bb5887fe7d2bf2bdd5a3b17ce39f7b2697f44520387344ec9eadb4ebe0a793565fbe96906e913bcb417b478fe0aa8507fd6857d02a434829fee9b6686ea28152a0b9aa299c420026553023abd79bde944965dbd9aa48f1e276f7a1634ce24d95897f6d4c7d08d452888ec46b8170cb9081240bc6f2168508166b09de3cbc476bb8cfde557681f09e587d306a8ad455e5155eb58da994c8b46c670f7348aa500cd3074272c519c9e39cbc98f6123b5c6cc7c3df67fe7a6168d2fd8c3a75e9ae1860a3c76acda5906fa981a6d73255660db4f42043aef42078fbfcad8d776592092d35112ab780fd4c2a891ca70beee10cd0a4a2afe47b5f8663c4fcab689dd1a1fe704db3af38a0c47af8e814b6b1063834ee3695ba700dbc471e5fc8b4891855cc234831e3e3de2450a6de857cf11219cb434001d1e1a3fdac74a019b97868e4f5c245b26f9985ec82c39e27bdb9c38f70f238a5d62f06a9962fa86cae4f5c23257d3dc8f82f05f1c9810c27e55f6a2effe45de75328198d3bbb3835ba2818bbb65bde434bd0a8c765b0a9cf82490de050c3c6b389299c5533fcc1a003c1c81e632f87d1e7d1449665d61b1794893501ac42c71b5975ae47315cb821da4fcc216b16c1d4621b9a43f43fb5e9df9a4896bc01b21ee3479e34b9ad54b9027360278cbeb0e70e63ebbf64ee9d0083dd89df2c4fd21e91a74d866f59cf7c190dac71a3d498f478e73cfe226d246fd44e2a1566c4e0323da0e739c3c2c6281e514fedcefeb8181f7d12a8774cf1d16e41fc8b3aec4e2b37c484fd5d77a9f8d6add335b971e3e7d5db095bd9204324840e94d7dc48b115d14c7abb63b4b9634e1b118ee808f0a5d1d8ecdc4d57ac8bfc2965f4277a9d763c3d0ba49f7e7cfccf88a5b9dd9674bc789ef35b08734b18d04f2016241e3c0886840a97b12c19187203abbeaa0aed5305894fe19567a8993be26601744ef9222ae9b3cb9e17396809e21ebe71199f34143dc826d5f5c8399295e05d4566edc3eae713a0aefe1de29616f5f1568a573890d3e5e6b1ea07ef9d68688576423c5a8bc72848266461e5aad3ea6ce66ec2a7285b9ada32f84fe1b7756a7435734c977eea401febbea79a4982569ac93e2fbde7de0080bb7a9a087d745ef4d1ff42671c4ff61ea514ca7936f04b19c04c0705ac2510bf766a2ea5e7b7aaa3ea6c21c86335516d20d5dbabb255b083582a0c505e7210f5b45bc970244453467d1e9eab25ef8533faad205115047f32177fac815a1a616c5b7e03e9fdd192710d1d9856ae2c8c9fdfb89cf491392425e869c09ba21c708d6b4f53d6c245932cb0d2a0c3820c22e6014dc446d888158b7eb217f14120db7d4caa3f2eb764011ea2def0f26c3dbaf3e20e2b7261bb4196b923ba399493be896148cd903ba40756b51d4dd0622d3929e3738a0bb15586dba4fe24243bd06d8e1e417bf66edfd586afad8a1c2cc6a2cc26fb1a1a317396d59b0747aea3092e344f919877348219029c8b4d12f57602ca3e1023ac8bedabeba382e640caf80f5afd42154e46b0cf6769a26a98bce9bb800945e637b384294e7883509abf902383da4535afe9ec7b1758485c4a0135bbe4b87a73d7d1643212452536be2848880c70fc7e8e93019faa1e659ae455ef17bed3f576da87c1175be2f1057e21b78865c012ed10f32611007e998f91e81cd7d43224b291e1e3d48b35a188829c7ee8703dadd9c0604e8c3cf61c28442e5cd57afbb9970eb76d2deea5179b79816f88c3672d26fbb191d175b4e52c40cd9f3b6fb58a614fa3e752a151a2705369a20ece819c0cb5fe1766fb2aae204f0dff9bfb9557a985e88d9e46904ee19e49e4fd78c1ff34bcb011d0ec4c78cb3295c6b9cd325d843e9e2a837f9ce3b3dde6eb6cc4a4360fc114e463123defed6217e34025cf6f27c022211db5d63c5992f447c3fe8859279dbd2e086ec1c51adf74ffa01f3271ef7f224077345587f6341801c6775f5282e15c30690401978c52fe2e572d113b65b57eee2b5ff6257b3709769e8e28f2ab5e82326501b814c978b38324b93b9bce9f66a3b9792a7af9de03f9128c300ba4d6d6353a41a9c45cae6221a2d31d5e0eeed4df7093aca2ad826e8fb920f8ffa384e049de3b0c4d7e39961dff587c0421b834e5b7b9df7580ce5d3e2ca6bf09513395471403840266025f9c98100c55d2e54e0392e5bd329f717fe96ce895d48", 0x1000}, {&(0x7f00000009c0)="99c312591315dcc04d8df86ed61967801b88a0ff6a25fd644502b160ffdcfd29571488ceac4160b100550382e41b1269bb008105214194275716e674b65869ff7b7cd63504876599713fae9a273691153f393661963cdd89333ffb0dae924013b5313bfa29afbba2adbf487830f0edef82c1c86e7d8574afd79547f3689bc764e5594f250ce2810c4f697d40f3a5ee2bb80ed8518af7918d7170efe613ba88", 0x9f}], 0x4, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x64, &(0x7f0000000780)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1b21}, @in6={0xa, 0x4e23, 0x2a4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x200}, @in6={0xa, 0x4e24, 0x9, @rand_addr="9bc36f36a805588576853a8c216e44ed", 0x1}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000f40)=ANY=[], &(0x7f0000000740)) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7fce0c154000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:12 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff010000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:12 executing program 3: pipe2(&(0x7f0000000140), 0x80800) r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x9, 0x2001) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) inotify_init() prctl$PR_GET_NAME(0x10, &(0x7f00000002c0)=""/4096) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000000)={0x2, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50aa000000101f00ffa90500000000006400fffc00007d7ecae8265345030e3bf6a43600"/46, @ANYRES32=0x0, @ANYBLOB="0000ff7f00000000200012000c00010165727370616e000010000200040012002600040000000000"], 0x40}}, 0x0) [ 2166.321880][T20803] FAULT_INJECTION: forcing a failure. [ 2166.321880][T20803] name failslab, interval 1, probability 0, space 0, times 0 18:10:12 executing program 0: r0 = socket(0x7, 0x80006, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000380)={0x80000001, 0x5, 0x140450b2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000001000/0x4000)=nil, 0x4000}, &(0x7f00000002c0)=0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0)="aa56cf20e39413b5acb4e2fc8ae69711d2771ed26fb9b463ccc65d4af3db4bd79da8694b68b149c61a72d34aed3fda8f1730c2b7daeb2b6a1e10c9c0362e1bb4fa3175938ba273e80d477723a5ce95f6875736f4db00da83c698725b25d0e8681449d7f310bd900e5be3144cbfc4b6209082207e19cdb4c05bcb6468427a81d8d4440f5c019e36967ca0ff21871f20216562396f7454a2c8c2cfac2ae9ef2f7fe2d0d53389daf7f62d88bfdfab3ec092342198d1c38afae6f337fe4d8cae2544754285286b42d0734339e62154a879", 0xcf}, 0x68) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000300)) truncate(&(0x7f0000000000)='./file0\x00', 0xffffffffffff8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2166.379842][T20803] CPU: 0 PID: 20803 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2166.389075][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.399130][T20803] Call Trace: [ 2166.402421][T20803] dump_stack+0x172/0x1f0 [ 2166.406758][T20803] should_fail.cold+0xa/0x15 [ 2166.411356][T20803] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2166.417168][T20803] ? ___might_sleep+0x163/0x280 [ 2166.422024][T20803] __should_failslab+0x121/0x190 [ 2166.426980][T20803] should_failslab+0x9/0x14 [ 2166.431493][T20803] kmem_cache_alloc+0x2b2/0x6f0 [ 2166.436341][T20803] ? rcu_read_lock_sched_held+0x110/0x130 [ 2166.442052][T20803] ? kmem_cache_alloc+0x32e/0x6f0 [ 2166.447060][T20803] security_file_alloc+0x39/0x170 [ 2166.452062][T20803] __alloc_file+0xac/0x300 [ 2166.456459][T20803] alloc_empty_file+0x72/0x170 [ 2166.461201][T20803] path_openat+0xef/0x46e0 [ 2166.465592][T20803] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2166.471568][T20803] ? kasan_slab_alloc+0xf/0x20 [ 2166.476309][T20803] ? kmem_cache_alloc+0x11a/0x6f0 [ 2166.481311][T20803] ? getname_flags+0xd6/0x5b0 [ 2166.485968][T20803] ? getname+0x1a/0x20 [ 2166.490012][T20803] ? do_sys_open+0x2c9/0x5d0 [ 2166.494580][T20803] ? __x64_sys_open+0x7e/0xc0 [ 2166.499235][T20803] ? do_syscall_64+0x103/0x610 [ 2166.503974][T20803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2166.510021][T20803] ? __lock_acquire+0x548/0x3fb0 [ 2166.514930][T20803] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2166.520284][T20803] ? __alloc_fd+0x430/0x530 [ 2166.524771][T20803] do_filp_open+0x1a1/0x280 [ 2166.529247][T20803] ? may_open_dev+0x100/0x100 [ 2166.533906][T20803] ? lock_downgrade+0x880/0x880 [ 2166.538734][T20803] ? kasan_check_read+0x11/0x20 [ 2166.543559][T20803] ? do_raw_spin_unlock+0x57/0x270 [ 2166.548646][T20803] ? _raw_spin_unlock+0x2d/0x50 [ 2166.553469][T20803] ? __alloc_fd+0x430/0x530 [ 2166.557960][T20803] do_sys_open+0x3fe/0x5d0 [ 2166.562353][T20803] ? filp_open+0x80/0x80 [ 2166.566571][T20803] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2166.572802][T20803] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2166.578234][T20803] ? do_syscall_64+0x26/0x610 [ 2166.582890][T20803] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2166.588935][T20803] ? do_syscall_64+0x26/0x610 [ 2166.593592][T20803] __x64_sys_open+0x7e/0xc0 [ 2166.598078][T20803] do_syscall_64+0x103/0x610 [ 2166.602663][T20803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2166.608545][T20803] RIP: 0033:0x412251 [ 2166.612437][T20803] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 2a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 73 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2166.632018][T20803] RSP: 002b:00007f4e4ecdba80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2166.640416][T20803] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000412251 [ 2166.648367][T20803] RDX: 00007f4e4ecdbb0a RSI: 0000000000000002 RDI: 00007f4e4ecdbb00 [ 2166.656331][T20803] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2166.664278][T20803] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000005 [ 2166.672229][T20803] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:12 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7fffffffefff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:12 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff0f0000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2166.774382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.774415][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.780167][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.785890][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.791606][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.797310][ C1] protocol 88fb is buggy, dev hsr_slave_0 18:10:12 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) r6 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r8) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000140)='em1em1\x00') add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r9) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:12 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0xffffbfffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000110100000000c500000000000000f31fc3f3d08b", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) 18:10:12 executing program 4 (fault-call:1 fault-nth:9): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:13 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff112000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x940000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:13 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x604000) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000100)={0xfff, 0x0, 0x3}) 18:10:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x1c000000000}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x81, 0x8, 0x6e, 0x6, r4}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10) [ 2167.095190][T20847] FAULT_INJECTION: forcing a failure. [ 2167.095190][T20847] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.136424][T20847] CPU: 1 PID: 20847 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2167.145569][T20847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.155624][T20847] Call Trace: [ 2167.158916][T20847] dump_stack+0x172/0x1f0 [ 2167.163248][T20847] should_fail.cold+0xa/0x15 [ 2167.167843][T20847] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2167.173651][T20847] ? ___might_sleep+0x163/0x280 [ 2167.178507][T20847] __should_failslab+0x121/0x190 [ 2167.183442][T20847] ? loop_info64_to_compat+0x6d0/0x6d0 [ 2167.188905][T20847] should_failslab+0x9/0x14 [ 2167.193407][T20847] kmem_cache_alloc_trace+0x2d1/0x760 [ 2167.198776][T20847] ? lockdep_init_map+0x1be/0x6d0 [ 2167.203800][T20847] ? loop_info64_to_compat+0x6d0/0x6d0 [ 2167.209357][T20847] __kthread_create_on_node+0xf2/0x460 [ 2167.214851][T20847] ? lo_ioctl+0x49d/0x23a0 [ 2167.219274][T20847] ? kthread_parkme+0xb0/0xb0 [ 2167.223957][T20847] ? lo_ioctl+0x49d/0x23a0 [ 2167.228396][T20847] ? kasan_check_read+0x11/0x20 [ 2167.233243][T20847] ? loop_info64_to_compat+0x6d0/0x6d0 [ 2167.238699][T20847] kthread_create_on_node+0xbb/0xf0 [ 2167.243895][T20847] ? __kthread_create_on_node+0x460/0x460 [ 2167.249616][T20847] ? lockdep_init_map+0x1be/0x6d0 [ 2167.254639][T20847] ? lockdep_init_map+0x1be/0x6d0 [ 2167.259668][T20847] lo_ioctl+0xc1b/0x23a0 [ 2167.263914][T20847] ? lo_rw_aio+0x1130/0x1130 [ 2167.268500][T20847] blkdev_ioctl+0x6f2/0x1d10 [ 2167.273085][T20847] ? blkpg_ioctl+0xa90/0xa90 [ 2167.277669][T20847] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2167.283477][T20847] ? __fget+0x35a/0x550 [ 2167.287638][T20847] block_ioctl+0xee/0x130 [ 2167.291957][T20847] ? blkdev_fallocate+0x410/0x410 [ 2167.296982][T20847] do_vfs_ioctl+0xd6e/0x1390 [ 2167.301576][T20847] ? ioctl_preallocate+0x210/0x210 [ 2167.306682][T20847] ? __fget+0x381/0x550 [ 2167.310867][T20847] ? ksys_dup3+0x3e0/0x3e0 [ 2167.315280][T20847] ? do_sys_open+0x31d/0x5d0 [ 2167.319869][T20847] ? tomoyo_file_ioctl+0x23/0x30 [ 2167.324799][T20847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2167.331031][T20847] ? security_file_ioctl+0x93/0xc0 [ 2167.336152][T20847] ksys_ioctl+0xab/0xd0 [ 2167.340306][T20847] __x64_sys_ioctl+0x73/0xb0 [ 2167.345011][T20847] do_syscall_64+0x103/0x610 [ 2167.349622][T20847] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2167.355501][T20847] RIP: 0033:0x458127 [ 2167.359390][T20847] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2167.378986][T20847] RSP: 002b:00007f4e4ecbaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2167.387401][T20847] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2167.395450][T20847] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2167.403413][T20847] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2167.411378][T20847] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2167.419371][T20847] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000003 [ 2167.438613][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 2167.438627][ T26] audit: type=1804 audit(1554833413.434:1558): pid=20852 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3560/bus" dev="sda1" ino=17071 res=1 18:10:13 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff600000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:13 executing program 4 (fault-call:1 fault-nth:10): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2167.480657][ T26] audit: type=1804 audit(1554833413.464:1559): pid=20852 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3560/bus" dev="sda1" ino=17071 res=1 18:10:13 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9b04ff2f8dd5637274a6bbc6903f30a2e9a68195f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a340c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee5ac7bf8ae820ef1dffffffffdf34e0fcbf1d6c01d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11a75f5007287c9a384dc06cc2b035bc9ff58923133a155957d844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15d6638df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/496], 0x1) 18:10:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2167.560487][ T26] audit: type=1804 audit(1554833413.554:1560): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5546/bus" dev="sda1" ino=17281 res=1 18:10:13 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)='^vmnet0\x00'}, 0x30) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x6) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000240)={0x0, 0x8, 0x10000, 0xffffffff}) sched_getattr(r0, &(0x7f0000000200), 0x30, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000f136d47e0c00e8ff65727370ac5949538e33519e037d12000800040000000000"], 0x40}}, 0x0) [ 2167.651746][T20863] FAULT_INJECTION: forcing a failure. [ 2167.651746][T20863] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.673009][ T26] audit: type=1804 audit(1554833413.594:1561): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5546/bus" dev="sda1" ino=17281 res=1 [ 2167.697446][T20863] CPU: 0 PID: 20863 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2167.706568][T20863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.716620][T20863] Call Trace: [ 2167.719929][T20863] dump_stack+0x172/0x1f0 [ 2167.724263][T20863] should_fail.cold+0xa/0x15 [ 2167.728862][T20863] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2167.734677][T20863] ? ___might_sleep+0x163/0x280 [ 2167.739540][T20863] __should_failslab+0x121/0x190 [ 2167.744483][T20863] should_failslab+0x9/0x14 [ 2167.748995][T20863] kmem_cache_alloc+0x2b2/0x6f0 [ 2167.753971][T20863] ? mark_held_locks+0xa4/0xf0 [ 2167.758735][T20863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2167.764196][T20863] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2167.769665][T20863] __kernfs_new_node+0xf0/0x6d0 [ 2167.772010][ T26] audit: type=1804 audit(1554833413.594:1562): pid=20858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5546/bus" dev="sda1" ino=17281 res=1 [ 2167.774526][T20863] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2167.774549][T20863] ? retint_kernel+0x2d/0x2d [ 2167.774575][T20863] kernfs_new_node+0x96/0x120 [ 2167.774592][T20863] kernfs_create_dir_ns+0x52/0x160 [ 2167.774610][T20863] internal_create_group+0x7f8/0xc40 [ 2167.824269][T20863] ? bd_set_size+0x89/0xb0 [ 2167.828695][T20863] ? remove_files.isra.0+0x190/0x190 [ 2167.833998][T20863] sysfs_create_group+0x20/0x30 [ 2167.838738][ T26] audit: type=1804 audit(1554833413.644:1563): pid=20867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3561/bus" dev="sda1" ino=17220 res=1 [ 2167.838868][T20863] lo_ioctl+0x124a/0x23a0 [ 2167.867810][T20863] ? lo_rw_aio+0x1130/0x1130 [ 2167.872408][T20863] blkdev_ioctl+0x6f2/0x1d10 [ 2167.877001][T20863] ? blkpg_ioctl+0xa90/0xa90 [ 2167.881590][T20863] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2167.887403][T20863] ? __fget+0x35a/0x550 [ 2167.891561][T20863] block_ioctl+0xee/0x130 [ 2167.895887][T20863] ? blkdev_fallocate+0x410/0x410 [ 2167.900932][T20863] do_vfs_ioctl+0xd6e/0x1390 [ 2167.905528][T20863] ? ioctl_preallocate+0x210/0x210 [ 2167.910634][T20863] ? __fget+0x381/0x550 [ 2167.914811][T20863] ? ksys_dup3+0x3e0/0x3e0 [ 2167.919227][T20863] ? do_sys_open+0x31d/0x5d0 [ 2167.923814][T20863] ? tomoyo_file_ioctl+0x23/0x30 [ 2167.928854][T20863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2167.935102][T20863] ? security_file_ioctl+0x93/0xc0 [ 2167.940215][T20863] ksys_ioctl+0xab/0xd0 [ 2167.944374][T20863] __x64_sys_ioctl+0x73/0xb0 [ 2167.948965][T20863] do_syscall_64+0x103/0x610 [ 2167.955101][T20863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2167.960991][T20863] RIP: 0033:0x458127 [ 2167.964882][T20863] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2167.985143][T20863] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2167.993548][T20863] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2168.001517][T20863] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2168.009488][T20863] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2168.017538][T20863] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2168.025512][T20863] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2168.038627][ T26] audit: type=1804 audit(1554833414.034:1564): pid=20872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3561/bus" dev="sda1" ino=17220 res=1 18:10:14 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffdef, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2168.100338][T20863] hfsplus: unable to find HFS+ superblock [ 2168.123352][T20877] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2168.139000][ T26] audit: type=1804 audit(1554833414.034:1565): pid=20867 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3561/bus" dev="sda1" ino=17220 res=1 18:10:14 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6900000000000091b5864ca0391cd64a110c7b3041e6dcf1be9a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aac29c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a002c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x10000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xb6e4, 0x42880) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x2c) 18:10:14 executing program 4 (fault-call:1 fault-nth:11): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:14 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/142) [ 2168.230823][ T26] audit: type=1804 audit(1554833414.164:1566): pid=20879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5547/bus" dev="sda1" ino=17281 res=1 [ 2168.315063][T20890] FAULT_INJECTION: forcing a failure. [ 2168.315063][T20890] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.328124][T20890] CPU: 0 PID: 20890 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2168.337226][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.339361][ T26] audit: type=1804 audit(1554833414.184:1567): pid=20879 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5547/bus" dev="sda1" ino=17281 res=1 [ 2168.347289][T20890] Call Trace: [ 2168.374895][T20890] dump_stack+0x172/0x1f0 [ 2168.379234][T20890] should_fail.cold+0xa/0x15 [ 2168.383823][T20890] ? mark_held_locks+0xa4/0xf0 [ 2168.388587][T20890] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2168.394401][T20890] __should_failslab+0x121/0x190 [ 2168.399340][T20890] should_failslab+0x9/0x14 [ 2168.403840][T20890] kmem_cache_alloc+0x47/0x6f0 [ 2168.408598][T20890] ? retint_kernel+0x2d/0x2d [ 2168.413207][T20890] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 2168.419533][T20890] idr_get_free+0x425/0x8d0 [ 2168.424041][T20890] idr_alloc_u32+0x19e/0x330 [ 2168.428630][T20890] ? __fprop_inc_percpu_max+0x230/0x230 [ 2168.434173][T20890] ? mark_held_locks+0xf0/0xf0 [ 2168.438942][T20890] idr_alloc_cyclic+0x132/0x270 [ 2168.443793][T20890] ? idr_alloc+0x150/0x150 [ 2168.448213][T20890] __kernfs_new_node+0x172/0x6d0 [ 2168.453146][T20890] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2168.458618][T20890] ? __lock_acquire+0x548/0x3fb0 [ 2168.463554][T20890] kernfs_new_node+0x96/0x120 [ 2168.468232][T20890] kernfs_create_dir_ns+0x52/0x160 [ 2168.473341][T20890] internal_create_group+0x7f8/0xc40 [ 2168.478621][T20890] ? bd_set_size+0x89/0xb0 [ 2168.483044][T20890] ? remove_files.isra.0+0x190/0x190 [ 2168.488335][T20890] sysfs_create_group+0x20/0x30 [ 2168.493186][T20890] lo_ioctl+0x124a/0x23a0 [ 2168.497517][T20890] ? lo_rw_aio+0x1130/0x1130 [ 2168.502106][T20890] blkdev_ioctl+0x6f2/0x1d10 [ 2168.506699][T20890] ? blkpg_ioctl+0xa90/0xa90 [ 2168.511283][T20890] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2168.517083][T20890] ? __fget+0x35a/0x550 [ 2168.521240][T20890] ? lock_release+0x4c1/0xa00 [ 2168.525916][T20890] block_ioctl+0xee/0x130 [ 2168.530241][T20890] ? blkdev_fallocate+0x410/0x410 [ 2168.535264][T20890] do_vfs_ioctl+0xd6e/0x1390 [ 2168.539858][T20890] ? ioctl_preallocate+0x210/0x210 [ 2168.544979][T20890] ? __fget+0x381/0x550 [ 2168.549141][T20890] ? ksys_dup3+0x3e0/0x3e0 [ 2168.553558][T20890] ? do_sys_open+0x31d/0x5d0 [ 2168.558160][T20890] ? tomoyo_file_ioctl+0x23/0x30 [ 2168.563093][T20890] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2168.569439][T20890] ? security_file_ioctl+0x93/0xc0 [ 2168.574550][T20890] ksys_ioctl+0xab/0xd0 [ 2168.578704][T20890] __x64_sys_ioctl+0x73/0xb0 [ 2168.583307][T20890] do_syscall_64+0x103/0x610 [ 2168.587897][T20890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2168.593788][T20890] RIP: 0033:0x458127 18:10:14 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffff7f, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2168.597680][T20890] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2168.617273][T20890] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2168.625678][T20890] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2168.633644][T20890] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2168.641609][T20890] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2168.649575][T20890] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2168.657537][T20890] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioperm(0x20, 0x1, 0xe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0xffffffffffffd5c6, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:14 executing program 3: r0 = socket(0x9, 0xb, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400000) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$netlink(0x10, 0x3, 0xf) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2a0a02, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) [ 2168.813459][T20890] hfsplus: unable to find HFS+ superblock 18:10:14 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000000)={0x5, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@dev, @rand_addr, 0x0}, &(0x7f00000002c0)=0xc) getsockopt(r2, 0x1000, 0x3, &(0x7f0000000080)=""/89, &(0x7f0000000100)=0x59) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', r3}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000180)) r4 = semget(0x3, 0x1, 0x100) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000200)=[0x5, 0x15ea0000000, 0x4, 0x1]) 18:10:14 executing program 4 (fault-call:1 fault-nth:12): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:14 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffe0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:15 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) removexattr(&(0x7f0000000340)='./file0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="2cfcdc35da4b3c347762830eb4fc8c7e63de68389cfd1124c8076a1d15237fab6107eb55fbc337714b2b2c96b8c14acbd227107bb2d7d7ef64a66ebcf346c28bd595343500f2646a5fa58e5c9b07a73d4ba39c00000000dd75a5370d5c735d7d0f3025e0c84047943ce7a4fc31fe1b814f010605f7f743334ac7eed20b0000000000000000"]) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000180)={@loopback, @multicast1}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2168.991715][T20921] FAULT_INJECTION: forcing a failure. [ 2168.991715][T20921] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.004881][T20921] CPU: 0 PID: 20921 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2169.013987][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.024036][T20921] Call Trace: [ 2169.027332][T20921] dump_stack+0x172/0x1f0 [ 2169.031678][T20921] should_fail.cold+0xa/0x15 [ 2169.036277][T20921] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2169.042095][T20921] __should_failslab+0x121/0x190 [ 2169.047029][T20921] should_failslab+0x9/0x14 [ 2169.051533][T20921] kmem_cache_alloc+0x47/0x6f0 [ 2169.056294][T20921] ? save_stack+0xa9/0xd0 [ 2169.060620][T20921] ? save_stack+0x45/0xd0 [ 2169.064948][T20921] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2169.070755][T20921] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 2169.077173][T20921] idr_get_free+0x425/0x8d0 [ 2169.081686][T20921] idr_alloc_u32+0x19e/0x330 [ 2169.086278][T20921] ? __fprop_inc_percpu_max+0x230/0x230 [ 2169.091816][T20921] ? retint_kernel+0x2d/0x2d [ 2169.096416][T20921] idr_alloc_cyclic+0x132/0x270 [ 2169.101272][T20921] ? idr_alloc+0x150/0x150 [ 2169.105710][T20921] __kernfs_new_node+0x172/0x6d0 [ 2169.110650][T20921] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2169.116112][T20921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2169.121581][T20921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2169.127468][T20921] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2169.132748][T20921] ? retint_kernel+0x2d/0x2d [ 2169.137332][T20921] ? __lock_acquire+0x548/0x3fb0 [ 2169.142257][T20921] ? mark_held_locks+0xa4/0xf0 [ 2169.147018][T20921] kernfs_new_node+0x96/0x120 [ 2169.151696][T20921] kernfs_create_dir_ns+0x52/0x160 [ 2169.156810][T20921] internal_create_group+0x7f8/0xc40 [ 2169.162089][T20921] ? bd_set_size+0x89/0xb0 [ 2169.166509][T20921] ? remove_files.isra.0+0x190/0x190 [ 2169.171805][T20921] sysfs_create_group+0x20/0x30 [ 2169.176656][T20921] lo_ioctl+0x124a/0x23a0 [ 2169.181010][T20921] ? lo_rw_aio+0x1130/0x1130 [ 2169.185598][T20921] blkdev_ioctl+0x6f2/0x1d10 [ 2169.190182][T20921] ? blkpg_ioctl+0xa90/0xa90 [ 2169.194770][T20921] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2169.200590][T20921] ? __fget+0x35a/0x550 [ 2169.204752][T20921] block_ioctl+0xee/0x130 [ 2169.209078][T20921] ? blkdev_fallocate+0x410/0x410 [ 2169.214098][T20921] do_vfs_ioctl+0xd6e/0x1390 [ 2169.218688][T20921] ? ioctl_preallocate+0x210/0x210 [ 2169.223814][T20921] ? __fget+0x381/0x550 [ 2169.227967][T20921] ? ksys_dup3+0x3e0/0x3e0 [ 2169.232383][T20921] ? do_sys_open+0x31d/0x5d0 [ 2169.236969][T20921] ? tomoyo_file_ioctl+0x23/0x30 [ 2169.241899][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2169.248133][T20921] ? security_file_ioctl+0x93/0xc0 [ 2169.253243][T20921] ksys_ioctl+0xab/0xd0 [ 2169.257402][T20921] __x64_sys_ioctl+0x73/0xb0 [ 2169.261990][T20921] do_syscall_64+0x103/0x610 [ 2169.266583][T20921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2169.272463][T20921] RIP: 0033:0x458127 [ 2169.276352][T20921] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.295952][T20921] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2169.304354][T20921] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2169.312326][T20921] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2169.320310][T20921] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2169.328269][T20921] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 18:10:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x6, 0x101000) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000280)={0x0, 0x1, [0x4, 0x3, 0x4, 0x2, 0x9, 0x2, 0x6, 0x9]}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x8, 0x4, 0x401, 0x6, 0x0, 0x48d, 0xa0, 0x7, 0xe7, 0x8, 0x3, 0xfffffffffffffffc, 0x7fffffff, 0x101, 0x9, 0x4, 0xe93e, 0x4, 0x0, 0x0, 0x7, 0x7, 0x200, 0x0, 0xffff, 0xecaa, 0xffffffff, 0x7ff, 0x9, 0x7, 0x80000000, 0x62a0, 0x3, 0x0, 0x2, 0x2, 0x0, 0xff, 0x2, @perf_config_ext={0x2, 0xe9e}, 0x880, 0xffffffff945667e0, 0x2, 0x2, 0xfffffffffffff936, 0x5, 0x7}, r3, 0x6, 0xffffffffffffffff, 0xb) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x0, 0x80) bind$bt_sco(r5, &(0x7f0000000180)={0x1f, {0x200, 0x800, 0x101, 0x10001, 0x7fffffff, 0x100000001}}, 0x8) r6 = shmget$private(0x0, 0x1000, 0x158, &(0x7f0000016000/0x1000)=nil) shmat(r6, &(0x7f000000c000/0x3000)=nil, 0x3000) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) init_module(&(0x7f00000001c0)='\x00', 0x1, &(0x7f0000000200)='/dev/kvm\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:10:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x30710000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2169.336344][T20921] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:15 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x12000) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) [ 2169.438655][T20921] hfsplus: unable to find HFS+ superblock 18:10:15 executing program 4 (fault-call:1 fault-nth:13): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:15 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffe4, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mincore(&(0x7f0000008000/0x3000)=nil, 0x3000, &(0x7f0000003440)=""/4096) 18:10:15 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x40150cce7f0000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2169.633067][T20948] FAULT_INJECTION: forcing a failure. [ 2169.633067][T20948] name failslab, interval 1, probability 0, space 0, times 0 [ 2169.672530][T20948] CPU: 1 PID: 20948 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2169.681663][T20948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.691720][T20948] Call Trace: [ 2169.695022][T20948] dump_stack+0x172/0x1f0 [ 2169.699370][T20948] should_fail.cold+0xa/0x15 [ 2169.703968][T20948] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2169.709787][T20948] ? ___might_sleep+0x163/0x280 [ 2169.714644][T20948] __should_failslab+0x121/0x190 [ 2169.719584][T20948] should_failslab+0x9/0x14 [ 2169.724087][T20948] kmem_cache_alloc+0x2b2/0x6f0 [ 2169.728936][T20948] ? find_held_lock+0x35/0x130 [ 2169.733702][T20948] ? kernfs_activate+0x192/0x1f0 [ 2169.738659][T20948] __kernfs_new_node+0xf0/0x6d0 [ 2169.743514][T20948] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2169.748970][T20948] ? mutex_trylock+0x1e0/0x1e0 [ 2169.753739][T20948] ? lock_downgrade+0x880/0x880 [ 2169.758594][T20948] ? mark_held_locks+0xa4/0xf0 [ 2169.763358][T20948] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 2169.768906][T20948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2169.774360][T20948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2169.779815][T20948] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2169.785100][T20948] ? retint_kernel+0x2d/0x2d [ 2169.789690][T20948] ? trace_hardirqs_on_caller+0x6a/0x220 [ 2169.795341][T20948] kernfs_new_node+0x96/0x120 [ 2169.800022][T20948] __kernfs_create_file+0x51/0x340 [ 2169.805132][T20948] sysfs_add_file_mode_ns+0x222/0x560 [ 2169.810511][T20948] internal_create_group+0x35b/0xc40 [ 2169.815792][T20948] ? bd_set_size+0x89/0xb0 [ 2169.820214][T20948] ? remove_files.isra.0+0x190/0x190 [ 2169.825508][T20948] sysfs_create_group+0x20/0x30 [ 2169.830363][T20948] lo_ioctl+0x124a/0x23a0 [ 2169.834694][T20948] ? lo_rw_aio+0x1130/0x1130 [ 2169.839286][T20948] blkdev_ioctl+0x6f2/0x1d10 [ 2169.843883][T20948] ? blkpg_ioctl+0xa90/0xa90 [ 2169.848473][T20948] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2169.854282][T20948] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2169.859758][T20948] ? __fget+0x35a/0x550 [ 2169.863918][T20948] block_ioctl+0xee/0x130 [ 2169.868244][T20948] ? blkdev_fallocate+0x410/0x410 [ 2169.873266][T20948] do_vfs_ioctl+0xd6e/0x1390 [ 2169.877856][T20948] ? ioctl_preallocate+0x210/0x210 [ 2169.882961][T20948] ? __fget+0x381/0x550 [ 2169.887119][T20948] ? ksys_dup3+0x3e0/0x3e0 [ 2169.891556][T20948] ? do_sys_open+0x31d/0x5d0 [ 2169.896152][T20948] ? tomoyo_file_ioctl+0x23/0x30 [ 2169.901086][T20948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2169.907333][T20948] ? security_file_ioctl+0x93/0xc0 [ 2169.912443][T20948] ksys_ioctl+0xab/0xd0 [ 2169.916620][T20948] __x64_sys_ioctl+0x73/0xb0 [ 2169.921206][T20948] do_syscall_64+0x103/0x610 [ 2169.925795][T20948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2169.931678][T20948] RIP: 0033:0x458127 [ 2169.935569][T20948] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.955654][T20948] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2169.964062][T20948] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2169.972030][T20948] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 18:10:16 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) clock_gettime(0x7, &(0x7f0000000200)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{}, {r1, r2/1000+30000}}) [ 2169.979994][T20948] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2169.993549][T20948] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2170.001522][T20948] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:16 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2170.058792][T20948] hfsplus: unable to find HFS+ superblock 18:10:16 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x8000000001, 0x70, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x20007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x400000000000000, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4000000000000000) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(r1, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)=0xff0d) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x200, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f00000004c0)) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1) 18:10:16 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x115000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x96501, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r4, &(0x7f0000000080), 0x1c) r5 = dup2(r4, r4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=ANY=[], 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000180)="d4ef6bcc35141872ea46a2ff505b88ab", 0x10) wait4(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0x4, 0x4) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x0) tkill(r6, 0x3c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:16 executing program 4 (fault-call:1 fault-nth:14): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x80000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2170.217690][T20974] FAULT_INJECTION: forcing a failure. [ 2170.217690][T20974] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.266841][T20974] CPU: 1 PID: 20974 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2170.275981][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.286037][T20974] Call Trace: [ 2170.289335][T20974] dump_stack+0x172/0x1f0 [ 2170.293671][T20974] should_fail.cold+0xa/0x15 [ 2170.298269][T20974] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2170.304098][T20974] ? ___might_sleep+0x163/0x280 [ 2170.308966][T20974] __should_failslab+0x121/0x190 [ 2170.313910][T20974] should_failslab+0x9/0x14 [ 2170.318420][T20974] kmem_cache_alloc+0x2b2/0x6f0 [ 2170.323283][T20974] ? kstrdup_const+0x4d/0x80 [ 2170.327873][T20974] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 2170.333427][T20974] __kernfs_new_node+0xf0/0x6d0 [ 2170.338298][T20974] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2170.343754][T20974] ? wait_for_completion+0x440/0x440 [ 2170.349031][T20974] ? mutex_unlock+0xd/0x10 [ 2170.353435][T20974] ? kernfs_activate+0x192/0x1f0 [ 2170.358357][T20974] kernfs_new_node+0x96/0x120 [ 2170.363016][T20974] __kernfs_create_file+0x51/0x340 [ 2170.368111][T20974] sysfs_add_file_mode_ns+0x222/0x560 [ 2170.373471][T20974] internal_create_group+0x35b/0xc40 [ 2170.378742][T20974] ? remove_files.isra.0+0x190/0x190 [ 2170.384006][T20974] ? retint_kernel+0x2d/0x2d [ 2170.388588][T20974] sysfs_create_group+0x20/0x30 [ 2170.393418][T20974] lo_ioctl+0x124a/0x23a0 [ 2170.397727][T20974] ? lo_rw_aio+0x1130/0x1130 [ 2170.402304][T20974] blkdev_ioctl+0x6f2/0x1d10 [ 2170.406885][T20974] ? blkpg_ioctl+0xa90/0xa90 [ 2170.411456][T20974] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2170.417247][T20974] ? __fget+0x35a/0x550 [ 2170.421390][T20974] block_ioctl+0xee/0x130 [ 2170.425712][T20974] ? blkdev_fallocate+0x410/0x410 [ 2170.430721][T20974] do_vfs_ioctl+0xd6e/0x1390 [ 2170.435302][T20974] ? ioctl_preallocate+0x210/0x210 [ 2170.440391][T20974] ? __fget+0x381/0x550 [ 2170.444542][T20974] ? ksys_dup3+0x3e0/0x3e0 [ 2170.448938][T20974] ? do_sys_open+0x31d/0x5d0 [ 2170.453509][T20974] ? tomoyo_file_ioctl+0x23/0x30 [ 2170.458428][T20974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2170.464643][T20974] ? security_file_ioctl+0x93/0xc0 [ 2170.469734][T20974] ksys_ioctl+0xab/0xd0 [ 2170.473868][T20974] __x64_sys_ioctl+0x73/0xb0 [ 2170.478442][T20974] do_syscall_64+0x103/0x610 [ 2170.483013][T20974] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2170.488880][T20974] RIP: 0033:0x458127 [ 2170.492759][T20974] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:10:16 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff4, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2170.512340][T20974] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2170.520730][T20974] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2170.528679][T20974] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2170.536627][T20974] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2170.544577][T20974] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2170.552543][T20974] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:16 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) set_robust_list(&(0x7f0000000200)={&(0x7f0000000100)={&(0x7f0000000040)}, 0x9, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) r1 = accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000300)=@req3={0x3dec, 0x100000001, 0x2, 0x4, 0x3, 0x0, 0x1000}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00e4d465727370616e00001000020004001200080004ffffffff009821f766255e7521884bfdb6724ffb57727bb7dceed9d966b46d1a3b067dcfbccdf63e370239316f1e5f50654efcffb2fb3155ffb5c19b125430977c3f624db0f5725e9af6"], 0x40}}, 0x0) 18:10:16 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e00001000020004001200080004000000000094b116806f059ac30766a9197ec0633d2dd3c9bb7268ad0cc942fb60eaf47c609a02fdf59383a3b915666deabc5a30e8f1331f1790773e0d"], 0x40}}, 0x0) [ 2170.644569][T20974] hfsplus: unable to find HFS+ superblock 18:10:16 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr, @loopback, @rand_addr=0x4, @empty, @local]}, 0x2c) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@generic={0x3, "c954104d6e4e8209bb89c93f4f11ad3f5d3edc0efa476a1bcda2c7df05c98994e86513062aa803c47bc31151320a1b693993c29a0d11f03879294548077d85b9aed11e3c46013fb8b642bbf06121c520d3ddd0936141454a0b10805c81ec0019abcf96b54600d0ae940583706e0bba1b6daee8c93df30577ffb4456ff458"}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:16 executing program 4 (fault-call:1 fault-nth:15): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:16 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa0700000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:16 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffff5, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:16 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0xfffffffffffffffd) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) socketpair(0x10, 0x3, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100)={0x656e, 0x7f, 0x1000000, 0x5}, 0x8) [ 2170.934391][ C0] net_ratelimit: 18 callbacks suppressed [ 2170.934399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.934703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.940170][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2170.946059][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2170.951768][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.957745][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.963163][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2170.969014][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:17 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40627a00060000000000be5913de000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/btrfs-control\x00', 0x1, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x9) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000380)=0xffffffffffffffff) write$nbd(r0, &(0x7f00000002c0)={0x67446698, 0x0, 0x1, 0x3, 0x4, "fd78300c9d267adaf73639b242906b932f059404633f26850ee1f098e073260c330e6afac4d68ced9129bd021f66b17d607c501f0b9cd78346e06b2ade3f0260895bad0d09878058c72a4ef31674182489e28035933d95fa2649c816cb3c43f911885cd2a13ce1670f4fb8f8f20f493b762a86f67b928b742130fdb69663d7838491ae73d912ab92f14212bd1e4bdde6f4088582713ff0df43b4b4fc182b743194c2172571b7be5cc485e5e231"}, 0xbd) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x10000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000100)={0x5, 0x5, [{0x4, 0x0, 0x20}, {0x9, 0x0, 0x7}, {0x4, 0x0, 0x982}, {0xfffffffffffffffd, 0x0, 0xb86}, {0xef7, 0x0, 0x5a4}]}) sendfile(r0, r1, &(0x7f0000000240), 0x3f) [ 2171.078804][T21016] FAULT_INJECTION: forcing a failure. [ 2171.078804][T21016] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.144967][T21016] CPU: 0 PID: 21016 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2171.154106][T21016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.164145][T21016] Call Trace: [ 2171.167428][T21016] dump_stack+0x172/0x1f0 [ 2171.171744][T21016] should_fail.cold+0xa/0x15 [ 2171.176318][T21016] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.182110][T21016] ? ___might_sleep+0x163/0x280 [ 2171.186946][T21016] __should_failslab+0x121/0x190 [ 2171.191865][T21016] should_failslab+0x9/0x14 [ 2171.196348][T21016] kmem_cache_alloc+0x2b2/0x6f0 [ 2171.201178][T21016] ? lock_downgrade+0x880/0x880 [ 2171.206019][T21016] __kernfs_new_node+0xf0/0x6d0 [ 2171.210855][T21016] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2171.216295][T21016] ? wait_for_completion+0x440/0x440 [ 2171.221563][T21016] ? mutex_unlock+0xd/0x10 [ 2171.225961][T21016] ? kernfs_activate+0x192/0x1f0 [ 2171.230879][T21016] kernfs_new_node+0x96/0x120 [ 2171.235542][T21016] __kernfs_create_file+0x51/0x340 [ 2171.240632][T21016] sysfs_add_file_mode_ns+0x222/0x560 [ 2171.245988][T21016] internal_create_group+0x35b/0xc40 [ 2171.251254][T21016] ? bd_set_size+0x89/0xb0 [ 2171.255654][T21016] ? remove_files.isra.0+0x190/0x190 [ 2171.260924][T21016] sysfs_create_group+0x20/0x30 [ 2171.265756][T21016] lo_ioctl+0x124a/0x23a0 [ 2171.270065][T21016] ? lo_rw_aio+0x1130/0x1130 [ 2171.274637][T21016] blkdev_ioctl+0x6f2/0x1d10 [ 2171.279211][T21016] ? blkpg_ioctl+0xa90/0xa90 [ 2171.283783][T21016] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2171.289573][T21016] ? __fget+0x35a/0x550 [ 2171.293708][T21016] block_ioctl+0xee/0x130 [ 2171.298017][T21016] ? blkdev_fallocate+0x410/0x410 [ 2171.303023][T21016] do_vfs_ioctl+0xd6e/0x1390 [ 2171.307595][T21016] ? ioctl_preallocate+0x210/0x210 [ 2171.312685][T21016] ? __fget+0x381/0x550 [ 2171.316825][T21016] ? ksys_dup3+0x3e0/0x3e0 [ 2171.321222][T21016] ? do_sys_open+0x31d/0x5d0 [ 2171.325795][T21016] ? tomoyo_file_ioctl+0x23/0x30 [ 2171.330713][T21016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.336945][T21016] ? security_file_ioctl+0x93/0xc0 [ 2171.342038][T21016] ksys_ioctl+0xab/0xd0 [ 2171.346175][T21016] __x64_sys_ioctl+0x73/0xb0 [ 2171.350750][T21016] do_syscall_64+0x103/0x610 [ 2171.355321][T21016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2171.361197][T21016] RIP: 0033:0x458127 [ 2171.365071][T21016] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2171.384664][T21016] RSP: 002b:00007f4e4ecbaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2171.393053][T21016] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2171.401002][T21016] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2171.408952][T21016] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2171.416900][T21016] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2171.424848][T21016] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000003 [ 2171.455113][T21016] hfsplus: unable to find HFS+ superblock 18:10:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x16, 0x8}, 0xc) 18:10:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb0500000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:17 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffb, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:17 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x4, 0x1, 0x401, 0x100, 0x3, 0x6, 0x27fcb8dd, 0x260, 0x40, 0x3de, 0xffffffffffff0000, 0x2, 0x38, 0x2, 0xcac, 0x6, 0x3}, [{0x7, 0x2, 0x3, 0x10000, 0xf81, 0x5, 0x100000001, 0x8}, {0x1, 0xe142, 0x7, 0x2, 0x4, 0x1ff, 0x7, 0x25c1}], "ff06b8a8b1f3d938884db5eca882725ded1042a156bc62a3891e88c140fd8f454f2a27c76a9bd28f4bc66c1badb4826e6434fbc5dd675e88", [[], [], [], [], [], [], []]}, 0x7e8) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x4c, 0x20, 0x400, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x4}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x400}, @FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7f}]}, 0x4c}}, 0x0) 18:10:17 executing program 4 (fault-call:1 fault-nth:16): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:17 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x6, 0x2) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x1) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000004c0)=0x4) [ 2171.763269][T21031] FAULT_INJECTION: forcing a failure. [ 2171.763269][T21031] name failslab, interval 1, probability 0, space 0, times 0 [ 2171.790082][T21031] CPU: 1 PID: 21031 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2171.799228][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.809283][T21031] Call Trace: 18:10:17 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @rose}, [@default, @rose, @remote, @default, @rose, @remote, @rose]}, &(0x7f0000000040)=0x48) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000200)={0x3, @bcast, r2}) [ 2171.812583][T21031] dump_stack+0x172/0x1f0 [ 2171.816921][T21031] should_fail.cold+0xa/0x15 [ 2171.821522][T21031] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.827337][T21031] ? ___might_sleep+0x163/0x280 [ 2171.832202][T21031] __should_failslab+0x121/0x190 [ 2171.837158][T21031] should_failslab+0x9/0x14 [ 2171.841667][T21031] kmem_cache_alloc+0x2b2/0x6f0 [ 2171.846526][T21031] ? lock_downgrade+0x880/0x880 [ 2171.851387][T21031] __kernfs_new_node+0xf0/0x6d0 [ 2171.856242][T21031] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2171.861705][T21031] ? wait_for_completion+0x440/0x440 [ 2171.867019][T21031] ? mutex_unlock+0xd/0x10 [ 2171.871435][T21031] ? kernfs_activate+0x192/0x1f0 [ 2171.876375][T21031] kernfs_new_node+0x96/0x120 [ 2171.881053][T21031] __kernfs_create_file+0x51/0x340 [ 2171.886174][T21031] sysfs_add_file_mode_ns+0x222/0x560 [ 2171.891553][T21031] internal_create_group+0x35b/0xc40 [ 2171.896836][T21031] ? bd_set_size+0x89/0xb0 [ 2171.901245][T21031] ? remove_files.isra.0+0x190/0x190 [ 2171.906518][T21031] sysfs_create_group+0x20/0x30 [ 2171.911354][T21031] lo_ioctl+0x124a/0x23a0 [ 2171.915668][T21031] ? lo_rw_aio+0x1130/0x1130 [ 2171.920240][T21031] blkdev_ioctl+0x6f2/0x1d10 [ 2171.924812][T21031] ? blkpg_ioctl+0xa90/0xa90 [ 2171.929383][T21031] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2171.935180][T21031] ? __fget+0x35a/0x550 [ 2171.939322][T21031] block_ioctl+0xee/0x130 [ 2171.943627][T21031] ? blkdev_fallocate+0x410/0x410 [ 2171.948635][T21031] do_vfs_ioctl+0xd6e/0x1390 [ 2171.953692][T21031] ? ioctl_preallocate+0x210/0x210 [ 2171.958787][T21031] ? __fget+0x381/0x550 [ 2171.962926][T21031] ? ksys_dup3+0x3e0/0x3e0 [ 2171.967327][T21031] ? tomoyo_file_ioctl+0x23/0x30 [ 2171.972245][T21031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.978461][T21031] ? security_file_ioctl+0x93/0xc0 [ 2171.983556][T21031] ksys_ioctl+0xab/0xd0 [ 2171.987695][T21031] __x64_sys_ioctl+0x73/0xb0 [ 2171.992264][T21031] ? do_syscall_64+0x5b/0x610 [ 2171.996920][T21031] do_syscall_64+0x103/0x610 [ 2172.001497][T21031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2172.007367][T21031] RIP: 0033:0x458127 [ 2172.011242][T21031] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2172.030823][T21031] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2172.039210][T21031] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2172.047160][T21031] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2172.055107][T21031] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2172.063064][T21031] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2172.071011][T21031] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2172.134386][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2172.134414][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2172.180540][T21031] hfsplus: unable to find HFS+ superblock 18:10:18 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:18 executing program 4 (fault-call:1 fault-nth:17): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:18 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r0, 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000, 0x0) fchdir(r1) connect$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x2, 0x2, 0x3ff, 0x7ff, "903f809dc2142b325ced0c5c30fa70e16b951587c2c2aea70a55386079e23349d5c4c81f80e1733615cf524c0c16822ced09537a2ddcdd492e59d717c74675", 0x10}, 0x60) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) 18:10:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = fcntl$dupfd(r2, 0x406, r1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r4, 0x0, 0x1000}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:18 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) ioctl(r0, 0x7, &(0x7f00000002c0)="18958bc5d81bec1feb85153abb5064fdede4df2cd412d04fa7efedcf01583869127831854460bc0cb91e9f8f98df69e444e2407d3fbef8") r1 = socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x800, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000ddca8e856ade896fcb0e0a6d08bd100010fe10010000000000095a00000000000f7224e04a7612f7c7f56d3f6929c6", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c000100657201000000040000000000000000fbff00000000000000071570b554eaac31e7e1a9dbb101139c4fe92e04e80f0e647f"], 0x40}}, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000300)) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000340)=0x7, &(0x7f0000000380)=0x4) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x3f}, &(0x7f0000000200)=0x8) 18:10:18 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x102000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:18 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000008c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x3e9, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000140)=[0xfffffffffffffffe], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x84, r9, 0xc11e8c8b54b4fec, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000740)=ANY=[], 0x0) [ 2172.504111][T21072] FAULT_INJECTION: forcing a failure. [ 2172.504111][T21072] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.510204][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 2172.510217][ T26] audit: type=1804 audit(1554833418.494:1606): pid=21074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5556/bus" dev="sda1" ino=17094 res=1 [ 2172.532955][T21072] CPU: 0 PID: 21072 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2172.556645][T21072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.566697][T21072] Call Trace: [ 2172.569990][T21072] dump_stack+0x172/0x1f0 [ 2172.574326][T21072] should_fail.cold+0xa/0x15 [ 2172.578922][T21072] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2172.584729][T21072] ? ___might_sleep+0x163/0x280 [ 2172.589581][T21072] __should_failslab+0x121/0x190 [ 2172.594522][T21072] should_failslab+0x9/0x14 [ 2172.599024][T21072] kmem_cache_alloc+0x2b2/0x6f0 [ 2172.603880][T21072] ? lock_downgrade+0x880/0x880 [ 2172.608740][T21072] __kernfs_new_node+0xf0/0x6d0 [ 2172.613598][T21072] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2172.619059][T21072] ? wait_for_completion+0x440/0x440 [ 2172.624365][T21072] ? mutex_unlock+0xd/0x10 [ 2172.628779][T21072] ? kernfs_activate+0x192/0x1f0 [ 2172.633722][T21072] kernfs_new_node+0x96/0x120 [ 2172.638411][T21072] __kernfs_create_file+0x51/0x340 [ 2172.643527][T21072] sysfs_add_file_mode_ns+0x222/0x560 [ 2172.648901][T21072] internal_create_group+0x35b/0xc40 [ 2172.654181][T21072] ? bd_set_size+0x89/0xb0 [ 2172.658606][T21072] ? remove_files.isra.0+0x190/0x190 [ 2172.663898][T21072] sysfs_create_group+0x20/0x30 [ 2172.668746][T21072] lo_ioctl+0x124a/0x23a0 [ 2172.673086][T21072] ? lo_rw_aio+0x1130/0x1130 [ 2172.677676][T21072] blkdev_ioctl+0x6f2/0x1d10 [ 2172.682265][T21072] ? blkpg_ioctl+0xa90/0xa90 [ 2172.686853][T21072] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2172.692665][T21072] ? __fget+0x35a/0x550 [ 2172.696825][T21072] block_ioctl+0xee/0x130 [ 2172.701150][T21072] ? blkdev_fallocate+0x410/0x410 [ 2172.706176][T21072] do_vfs_ioctl+0xd6e/0x1390 [ 2172.710771][T21072] ? ioctl_preallocate+0x210/0x210 [ 2172.715880][T21072] ? __fget+0x381/0x550 [ 2172.720040][T21072] ? ksys_dup3+0x3e0/0x3e0 [ 2172.724461][T21072] ? do_sys_open+0x31d/0x5d0 [ 2172.729055][T21072] ? tomoyo_file_ioctl+0x23/0x30 [ 2172.733998][T21072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2172.740234][T21072] ? security_file_ioctl+0x93/0xc0 [ 2172.745344][T21072] ksys_ioctl+0xab/0xd0 [ 2172.749504][T21072] __x64_sys_ioctl+0x73/0xb0 [ 2172.754105][T21072] do_syscall_64+0x103/0x610 [ 2172.758696][T21072] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2172.764579][T21072] RIP: 0033:0x458127 [ 2172.768467][T21072] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2172.788073][T21072] RSP: 002b:00007f4e4ecbaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2172.796487][T21072] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 18:10:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2172.804456][T21072] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2172.812422][T21072] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2172.820391][T21072] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2172.828356][T21072] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000003 [ 2172.844687][ T26] audit: type=1804 audit(1554833418.834:1607): pid=21074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5556/bus" dev="sda1" ino=17094 res=1 [ 2172.856389][T21072] hfsplus: unable to find HFS+ superblock 18:10:18 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100011734b450200733ff20000000000b0c6aec243a42ee62ee8c3c043631bb7ff7214c7bb10ca5d365b938ffd0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x400, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x80000000, {{0xa, 0x4e24, 0x135, @local, 0xd55f}}}, 0x88) [ 2172.920501][ T26] audit: type=1804 audit(1554833418.834:1608): pid=21074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5556/bus" dev="sda1" ino=17094 res=1 [ 2173.002274][ T26] audit: type=1804 audit(1554833418.894:1609): pid=21082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3570/bus" dev="sda1" ino=17475 res=1 18:10:19 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x60ffffffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2173.068882][T21086] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2173.117626][ T26] audit: type=1804 audit(1554833419.114:1610): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5557/bus" dev="sda1" ino=17093 res=1 [ 2173.125433][T21092] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 18:10:19 executing program 4 (fault-call:1 fault-nth:18): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:19 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x113082) accept4$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x80800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) [ 2173.198195][ T26] audit: type=1804 audit(1554833419.154:1611): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5557/bus" dev="sda1" ino=17093 res=1 18:10:19 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x740000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2173.247861][ T26] audit: type=1804 audit(1554833419.154:1612): pid=21089 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5557/bus" dev="sda1" ino=17093 res=1 [ 2173.269192][T21101] FAULT_INJECTION: forcing a failure. [ 2173.269192][T21101] name failslab, interval 1, probability 0, space 0, times 0 18:10:19 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', r7) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0, r7) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=""/58, 0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000004c0)={0xffffffffffffffff}, 0x0, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000005c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x3, {0xa, 0x4e22, 0x9, @ipv4={[], [], @rand_addr=0x17}, 0x100}, r8}}, 0x38) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r7) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2173.347095][ T26] audit: type=1804 audit(1554833419.174:1613): pid=21095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3571/bus" dev="sda1" ino=17102 res=1 [ 2173.391714][T21101] CPU: 1 PID: 21101 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2173.400862][T21101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.410911][T21101] Call Trace: [ 2173.414203][T21101] dump_stack+0x172/0x1f0 [ 2173.418539][T21101] should_fail.cold+0xa/0x15 [ 2173.423132][T21101] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2173.428942][T21101] ? ___might_sleep+0x163/0x280 [ 2173.433792][T21101] __should_failslab+0x121/0x190 [ 2173.438726][T21101] should_failslab+0x9/0x14 [ 2173.443223][T21101] kmem_cache_alloc+0x2b2/0x6f0 [ 2173.448070][T21101] ? lock_downgrade+0x880/0x880 [ 2173.452928][T21101] __kernfs_new_node+0xf0/0x6d0 [ 2173.457781][T21101] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2173.463234][T21101] ? wait_for_completion+0x440/0x440 [ 2173.468526][T21101] ? mutex_unlock+0xd/0x10 [ 2173.472940][T21101] ? kernfs_activate+0x192/0x1f0 [ 2173.477878][T21101] kernfs_new_node+0x96/0x120 [ 2173.482560][T21101] __kernfs_create_file+0x51/0x340 [ 2173.487672][T21101] sysfs_add_file_mode_ns+0x222/0x560 [ 2173.493074][T21101] internal_create_group+0x35b/0xc40 [ 2173.498354][T21101] ? bd_set_size+0x89/0xb0 [ 2173.502776][T21101] ? remove_files.isra.0+0x190/0x190 [ 2173.508068][T21101] sysfs_create_group+0x20/0x30 [ 2173.512913][T21101] lo_ioctl+0x124a/0x23a0 [ 2173.517244][T21101] ? lo_rw_aio+0x1130/0x1130 [ 2173.521837][T21101] blkdev_ioctl+0x6f2/0x1d10 [ 2173.526427][T21101] ? blkpg_ioctl+0xa90/0xa90 [ 2173.531026][T21101] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2173.536842][T21101] ? __fget+0x35a/0x550 [ 2173.541011][T21101] block_ioctl+0xee/0x130 [ 2173.545334][T21101] ? blkdev_fallocate+0x410/0x410 [ 2173.550353][T21101] do_vfs_ioctl+0xd6e/0x1390 [ 2173.554943][T21101] ? ioctl_preallocate+0x210/0x210 [ 2173.560049][T21101] ? __fget+0x381/0x550 [ 2173.564208][T21101] ? ksys_dup3+0x3e0/0x3e0 [ 2173.568619][T21101] ? do_sys_open+0x31d/0x5d0 [ 2173.573207][T21101] ? tomoyo_file_ioctl+0x23/0x30 [ 2173.578140][T21101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2173.584376][T21101] ? security_file_ioctl+0x93/0xc0 [ 2173.589488][T21101] ksys_ioctl+0xab/0xd0 [ 2173.593641][T21101] __x64_sys_ioctl+0x73/0xb0 [ 2173.598228][T21101] do_syscall_64+0x103/0x610 [ 2173.602832][T21101] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.608719][T21101] RIP: 0033:0x458127 [ 2173.612613][T21101] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2173.632210][T21101] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:10:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:19 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000200)={0x800, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x101040) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010001101000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xc0, 0x101000) write$capi20_data(r2, &(0x7f0000000100)={{0x10, 0x5, 0x87, 0x82, 0x401, 0x5}, 0x81, "2719fd2509183b48521b558f61b48bb747d1011c89f9d8efa4637f4ed71ea73db0d6683daf49ee8018e3dadaaaed9124de1915701605cc6452cddd7f44649edc179ba11924c4d78794522570de3b566cac04cc8f88e62a86a62767a3cba9c6d32f8be3c01896e3615f3850e09c4c2973330ac9ba3aa29dd2344a798b6c545cc1f8"}, 0x93) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f00000003c0)=0x5) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in={{0x2, 0x4e22, @local}}}, 0x84) [ 2173.640614][T21101] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2173.648583][T21101] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2173.656550][T21101] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2173.664515][T21101] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2173.672476][T21101] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2173.757537][ T26] audit: type=1804 audit(1554833419.754:1614): pid=21109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3572/bus" dev="sda1" ino=17104 res=1 [ 2173.758042][T21101] hfsplus: unable to find HFS+ superblock [ 2173.815558][ T26] audit: type=1804 audit(1554833419.784:1615): pid=21113 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5558/bus" dev="sda1" ino=17187 res=1 18:10:19 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x8, 0x4}]]}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x4300) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000002c0)={{0x1, 0x1, 0x5785, 0xa6e, '\x00', 0x7}, 0x0, [0x4, 0x5, 0x7, 0x7fffffff, 0x7, 0x800, 0x0, 0xfe3, 0xf000000000000000, 0x6eb50041, 0x2, 0x10001, 0x5, 0xc00000000000000, 0x7fff, 0xe4, 0xfffffffffffffffa, 0x0, 0x800, 0x6, 0x2, 0x1ff, 0x4, 0x7, 0xfffffffffffffffb, 0x72, 0xfffffffffffff000, 0x1, 0x4c4, 0xf475, 0x2434, 0xffff, 0x4, 0x6, 0x6, 0x7, 0x9, 0x6, 0x2, 0x3f, 0x502, 0x0, 0x80000000, 0x2, 0x1, 0x2, 0x9, 0x0, 0x9, 0x0, 0x6, 0x0, 0x7, 0x6, 0x5, 0xf91, 0xff, 0x8, 0x1, 0x3ff, 0xc91, 0x10001, 0x8001, 0x55f089f7, 0x0, 0x5, 0x100000000, 0x2, 0x95, 0x0, 0x7, 0x959, 0x6, 0xfffffffff3a650e2, 0x2c8, 0x9, 0x0, 0x8, 0x5, 0x7fff, 0x3, 0x4, 0x2, 0xe75, 0x0, 0x101, 0x3, 0x3, 0x0, 0xb6, 0x7f, 0x20000, 0xff, 0x6, 0x4, 0xc883, 0x5, 0x2000000000, 0xe72d, 0x7b02, 0x3, 0x7, 0x100000000, 0x3f, 0x5, 0x3f, 0x1, 0x1, 0x4, 0x44, 0x0, 0x2, 0x3, 0xfff, 0x7ff, 0x20000000, 0x3df, 0x6, 0x5, 0x101, 0x7, 0xd6, 0x0, 0x0, 0x1000, 0x2, 0x9, 0x4], {0x0, 0x1c9c380}}) 18:10:19 executing program 4 (fault-call:1 fault-nth:19): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:19 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7f997fa83000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) eventfd2(0x983, 0x80800) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/76, 0x4c}], 0x1, &(0x7f00000001c0)=""/197, 0xc5}, 0x6}, {{&(0x7f00000002c0)=@ax25={{}, [@remote, @netrom, @rose, @null, @rose, @default, @default, @rose]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/84, 0x54}], 0x5}, 0x3f}, {{&(0x7f0000000640)=@alg, 0x80, &(0x7f0000000a80)=[{&(0x7f00000006c0)=""/149, 0x95}, {&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000000800)=""/241, 0xf1}, {&(0x7f0000000900)=""/105, 0x69}, {&(0x7f0000000980)=""/107, 0x6b}, {&(0x7f0000000a00)=""/81, 0x51}], 0x6, &(0x7f0000000b00)=""/204, 0xcc}, 0x8}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/69, 0x45}, {&(0x7f0000000c80)=""/115, 0x73}, {&(0x7f0000000d00)=""/92, 0x5c}, {&(0x7f0000000d80)=""/32, 0x20}, {&(0x7f0000000dc0)=""/148, 0x94}], 0x5}, 0x7}, {{&(0x7f0000000f00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f80)=""/43, 0x2b}], 0x1}, 0x100}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/193, 0xc1}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/190, 0xbe}], 0x4}, 0xcd}, {{&(0x7f00000022c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000002500)=[{&(0x7f0000002340)=""/117, 0x75}, {&(0x7f00000023c0)=""/190, 0xbe}, {&(0x7f0000002480)=""/74, 0x4a}], 0x3}, 0x4}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000002540)=""/222, 0xde}, {&(0x7f0000002640)=""/101, 0x65}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/244, 0xf4}], 0x4}, 0x1}], 0x8, 0x40010000, &(0x7f0000003a00)={0x77359400}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000003ac0)={@llc={0x1a, 0x10f, 0x4, 0xfff, 0x10000, 0x8, @remote}, {&(0x7f0000003a40)=""/55, 0x37}, &(0x7f0000003a80), 0x5}, 0xa0) [ 2174.030761][T21124] FAULT_INJECTION: forcing a failure. [ 2174.030761][T21124] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.092653][T21124] CPU: 1 PID: 21124 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2174.101800][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.111851][T21124] Call Trace: [ 2174.111875][T21124] dump_stack+0x172/0x1f0 [ 2174.111897][T21124] should_fail.cold+0xa/0x15 [ 2174.111917][T21124] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2174.111936][T21124] ? ___might_sleep+0x163/0x280 [ 2174.111964][T21124] __should_failslab+0x121/0x190 [ 2174.111984][T21124] should_failslab+0x9/0x14 [ 2174.124644][T21124] kmem_cache_alloc_trace+0x2d1/0x760 [ 2174.124672][T21124] kobject_uevent_env+0x389/0x1031 [ 2174.124697][T21124] kobject_uevent+0x20/0x26 [ 2174.159644][T21124] lo_ioctl+0x12c6/0x23a0 [ 2174.163985][T21124] ? lo_rw_aio+0x1130/0x1130 [ 2174.168580][T21124] blkdev_ioctl+0x6f2/0x1d10 [ 2174.173169][T21124] ? blkpg_ioctl+0xa90/0xa90 [ 2174.173192][T21124] ? retint_kernel+0x2d/0x2d [ 2174.173219][T21124] ? block_ioctl+0x1b/0x130 [ 2174.186844][T21124] block_ioctl+0xee/0x130 [ 2174.186860][T21124] ? blkdev_fallocate+0x410/0x410 [ 2174.186877][T21124] do_vfs_ioctl+0xd6e/0x1390 [ 2174.186895][T21124] ? ioctl_preallocate+0x210/0x210 [ 2174.186910][T21124] ? __fget+0x381/0x550 [ 2174.186930][T21124] ? ksys_dup3+0x3e0/0x3e0 [ 2174.214445][T21124] ? do_sys_open+0x31d/0x5d0 [ 2174.219042][T21124] ? tomoyo_file_ioctl+0x23/0x30 [ 2174.223985][T21124] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2174.230227][T21124] ? security_file_ioctl+0x93/0xc0 [ 2174.235341][T21124] ksys_ioctl+0xab/0xd0 [ 2174.239501][T21124] __x64_sys_ioctl+0x73/0xb0 [ 2174.244094][T21124] do_syscall_64+0x103/0x610 [ 2174.248694][T21124] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2174.254583][T21124] RIP: 0033:0x458127 [ 2174.258475][T21124] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2174.278069][T21124] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:10:20 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x301000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x1000000000, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000f379fe21129387025870ee10b2a3f71cdd3457e5e1ce1f5decee9b135367f0ff408e739056fc0c85ffdc4d688892b92e6390e68a22d51bff883e90e41d8714f8cba94b6eaace0774"], 0x40}}, 0x0) [ 2174.286480][T21124] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2174.294450][T21124] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2174.302421][T21124] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2174.310391][T21124] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2174.318366][T21124] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2174.383513][T21124] hfsplus: unable to find HFS+ superblock 18:10:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:20 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x7fffffffefff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xdb, "5c06f1f86de7a28758e50bf50a9bd03011d6207fbfb2966d3abcca6863d3124f8006d770ac8691b3d9aced19cd5d22454c07d991d167c5f020513f523aa9bdd5336df33fdb9cba817b30026b42b1733a40b689c9df7439b7ee32b58a0381e130043d9550c45439f01337e17bfa0b332e314355fcab0cd48b74f1468ea6c63a5536a8797be09e098c394e1373f10e574c13ed037db17f85c6917e99b0016b414c2401d7e3b5dec81e20f045f8df34dd821da05d2fa0af6aa0d3decbd0342a4cbcfd135c9b26bccea695a3fe47f32353cc3f149b219f86aaa5bf8269"}, &(0x7f00000001c0)=0xe3) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r5, 0x74, 0x3}, &(0x7f00000002c0)=0xc) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x10900, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000200)={r5, 0xa, "99db996810c9365bf0f9e846a4adbc"}, &(0x7f0000000240)=0x17) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000001a000/0x18000)=nil, 0x0, 0xffffffffffffff46, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:20 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@local}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000004c0)=0xe8) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x200000000000004b, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000140)) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1) 18:10:20 executing program 4 (fault-call:1 fault-nth:20): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:20 executing program 3: ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xde, 0x20100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000002c0)={0x1, 0x7, 0x0, 'queue0\x00', 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x18000, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0x2b, @remote, 0x4e24, 0x3, 'nq\x00', 0x0, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x4e21, 0x2004, 0x8001, 0x2, 0x8}}, 0x44) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000200)={0x200, 0x6, 0x400}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000110100"/20, @ANYRES32=0x0, @ANYBLOB="000000020000000065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) [ 2174.559474][T21149] FAULT_INJECTION: forcing a failure. [ 2174.559474][T21149] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.613070][T21149] CPU: 1 PID: 21149 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2174.622211][T21149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.632266][T21149] Call Trace: [ 2174.635566][T21149] dump_stack+0x172/0x1f0 [ 2174.639922][T21149] should_fail.cold+0xa/0x15 [ 2174.644524][T21149] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2174.650342][T21149] ? ___might_sleep+0x163/0x280 [ 2174.655201][T21149] __should_failslab+0x121/0x190 [ 2174.660143][T21149] should_failslab+0x9/0x14 [ 2174.664647][T21149] __kmalloc+0x2dc/0x740 [ 2174.668892][T21149] ? kobject_uevent_env+0x389/0x1031 [ 2174.674191][T21149] ? rcu_read_lock_sched_held+0x110/0x130 [ 2174.679920][T21149] ? kobject_get_path+0xc4/0x1b0 [ 2174.684864][T21149] kobject_get_path+0xc4/0x1b0 [ 2174.689642][T21149] kobject_uevent_env+0x3ad/0x1031 [ 2174.694776][T21149] kobject_uevent+0x20/0x26 [ 2174.699287][T21149] lo_ioctl+0x12c6/0x23a0 [ 2174.703624][T21149] ? lo_rw_aio+0x1130/0x1130 [ 2174.708218][T21149] blkdev_ioctl+0x6f2/0x1d10 [ 2174.712814][T21149] ? blkpg_ioctl+0xa90/0xa90 [ 2174.717408][T21149] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2174.723215][T21149] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2174.728686][T21149] ? __fget+0x35a/0x550 [ 2174.732857][T21149] block_ioctl+0xee/0x130 [ 2174.737197][T21149] ? blkdev_fallocate+0x410/0x410 [ 2174.742222][T21149] do_vfs_ioctl+0xd6e/0x1390 [ 2174.746821][T21149] ? ioctl_preallocate+0x210/0x210 [ 2174.748700][T21162] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2174.751927][T21149] ? __fget+0x381/0x550 [ 2174.751955][T21149] ? ksys_dup3+0x3e0/0x3e0 [ 2174.769751][T21149] ? do_sys_open+0x31d/0x5d0 [ 2174.774348][T21149] ? tomoyo_file_ioctl+0x23/0x30 [ 2174.779292][T21149] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2174.785535][T21149] ? security_file_ioctl+0x93/0xc0 [ 2174.790648][T21149] ksys_ioctl+0xab/0xd0 [ 2174.794805][T21149] __x64_sys_ioctl+0x73/0xb0 [ 2174.799394][T21149] do_syscall_64+0x103/0x610 [ 2174.803990][T21149] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2174.809892][T21149] RIP: 0033:0x458127 [ 2174.813784][T21149] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2174.833386][T21149] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2174.841804][T21149] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2174.849776][T21149] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 18:10:20 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000100)) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000006, 0x2010, r0, 0x180000000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400490010000009000600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012000c00010065727370616e000010000200040012000800040000000000"], 0x40}}, 0x0) [ 2174.857748][T21149] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2174.865720][T21149] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2174.873688][T21149] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:20 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x940000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = accept(0xffffffffffffff9c, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80) ioctl$SIOCX25CALLACCPTAPPRV(r3, 0x89e8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) [ 2175.047916][T21149] hfsplus: unable to find HFS+ superblock 18:10:21 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x682000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 18:10:21 executing program 4 (fault-call:1 fault-nth:21): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, 0x0, 0xfffffffffffffde1, 0x40000000, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000780)={0x0, 0x5, 0x10000}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000800)={r4, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000008c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYBLOB="a1030a00040000001f00f805010002000700f900630003004cc2d4d0c6378402ab5d13feae8b4acda28379fe15575128a62882edf008f629b2081315116cf46f614f14a30e2f35b848f1a645f99fb4cc2262f339bf1aec81a9332f2aa7cb4bb3814e2cbf6014d1e212df324e5795b5cb1435583f42ee4ff49dafed3a2743a24bd01d62"], &(0x7f00000000c0)=0x1c) 18:10:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x800000000000000) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0xfffffdee) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x80000, 0x0) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0c000016fffefffff31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60cfd0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15dd3bea3f8783ec8ffb2bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/511], 0x1) 18:10:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2175.389653][T21195] FAULT_INJECTION: forcing a failure. [ 2175.389653][T21195] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.422297][T21195] CPU: 0 PID: 21195 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2175.431430][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.441478][T21195] Call Trace: [ 2175.444771][T21195] dump_stack+0x172/0x1f0 [ 2175.449112][T21195] should_fail.cold+0xa/0x15 [ 2175.453715][T21195] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2175.459529][T21195] ? ___might_sleep+0x163/0x280 [ 2175.464384][T21195] __should_failslab+0x121/0x190 [ 2175.469327][T21195] should_failslab+0x9/0x14 [ 2175.473843][T21195] kmem_cache_alloc_node+0x264/0x710 [ 2175.479128][T21195] ? find_held_lock+0x35/0x130 [ 2175.483910][T21195] __alloc_skb+0xd5/0x5e0 [ 2175.488251][T21195] ? skb_trim+0x190/0x190 [ 2175.492756][T21195] ? kasan_check_read+0x11/0x20 [ 2175.497610][T21195] alloc_uevent_skb+0x83/0x1e2 [ 2175.502377][T21195] kobject_uevent_env+0xaaa/0x1031 [ 2175.507493][T21195] kobject_uevent+0x20/0x26 [ 2175.511995][T21195] lo_ioctl+0x12c6/0x23a0 [ 2175.516331][T21195] ? lo_rw_aio+0x1130/0x1130 [ 2175.520925][T21195] blkdev_ioctl+0x6f2/0x1d10 [ 2175.525517][T21195] ? blkpg_ioctl+0xa90/0xa90 [ 2175.530118][T21195] ? retint_kernel+0x2d/0x2d [ 2175.534736][T21195] block_ioctl+0xee/0x130 [ 2175.539068][T21195] ? blkdev_fallocate+0x410/0x410 [ 2175.544101][T21195] do_vfs_ioctl+0xd6e/0x1390 [ 2175.548697][T21195] ? ioctl_preallocate+0x210/0x210 [ 2175.553812][T21195] ? __fget+0x381/0x550 [ 2175.557987][T21195] ? ksys_dup3+0x3e0/0x3e0 [ 2175.562407][T21195] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2175.567876][T21195] ? tomoyo_file_ioctl+0x23/0x30 [ 2175.572829][T21195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2175.579070][T21195] ? security_file_ioctl+0x93/0xc0 [ 2175.584189][T21195] ksys_ioctl+0xab/0xd0 [ 2175.588353][T21195] __x64_sys_ioctl+0x73/0xb0 [ 2175.592948][T21195] do_syscall_64+0x103/0x610 [ 2175.597558][T21195] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2175.603449][T21195] RIP: 0033:0x458127 [ 2175.607349][T21195] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2175.626952][T21195] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 18:10:21 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) 18:10:21 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x10000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2175.635368][T21195] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2175.643342][T21195] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2175.651315][T21195] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2175.659287][T21195] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2175.667263][T21195] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2175.771419][T21195] hfsplus: unable to find HFS+ superblock 18:10:21 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0xcb59) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x14, 0x2000) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000004611c3e8ed00e84bf0b77f80f6a17b1ae0411093f9d46b9f0a79af4c18018856adb0c2aa21d85cd9098a1145eb598e83e36a0936797555f3344829e931e4c6d2e13256", @ANYRES16=r4, @ANYBLOB="080726bd7000fcdbdf25010000000800050001000000080002000900000008000600020000000800060007000000140004000100008006000000050000007200000008000600f900000008000600050000000c0004005d0000000600000014000100fe800000000000000000000000000016"], 0x78}}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:21 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x20000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:21 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x6, 0x480000000) r3 = gettid() r4 = socket(0xa, 0x3, 0x9) setsockopt$packet_buf(r4, 0x107, 0x1f, &(0x7f0000000280)="86025c556b25046c6a92973c8d8af43add44de7bfff8ec54a5e4d58bf9fc47f7d3d8bb417c4c8b0ddadcfb015e00d9574e9a43c7be25d2a509a8b06ab1bb0626958c9f18c3093e1226e96f950f0b7fea1b15bbb492b0f32d01a0abec83fe29c9747592241c090c4f048b773b4e778765004b861e796276cd9e7d580332dce8c0c79f0ab1e611c25da4372bcbcd54f2b1ac801e69a16c18adc96d86126ed8885eb892502fe8", 0xa5) sendto$inet6(r4, &(0x7f00000006c0)="2ba8fc853e1f4dff637f61cd409f8b0a16de79777aca788bb2356802151872294a90fb017d61385e34321d3a81aca1bdc6bb2622d61d102fb6b1210333a2bce09ecab09b1ffd5df73dfd4e8f327066ebc6399ea509212a99b4e75bbdfbd7fb864a7235d2f9e1ebb1cf639a5f25263c5c06b0851598f1dad972543c792fef7f9d81826e9c31c5b10c81a6a70955f827f8d76343936621a3a03c50b4b8ac8e14128cdf15c65d297ad621b74bc5d73456027ac582f90d7adb", 0xb7, 0x2dde56204d041736, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000640), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00\x00\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a1, &(0x7f0000000180)={'bridge0\x00', 0x2000}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000800)={@remote, @loopback, @mcast2, 0x0, 0x78, 0x0, 0x4000000100, 0x3}) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x1, 0x6, 0x4, 0x8}, &(0x7f00000005c0)=0x98) connect$l2tp(r4, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1f}}}, 0xffffffc3) r6 = socket(0x8, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000600)={0x0, 0x100, 0x2, 0x0, 0x100000000, 0x9b, 0x400, 0x639d, r5}, 0x1) connect$inet(r0, &(0x7f0000000240)={0x2, 0x20010004e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0xffffffffffffff78) write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0x2b, 0x87, 0x0) unshare(0x8000400) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="873246bd173bea9e6b8f3d987878c3447fafc38cee6fba25f0bedcead83444e643ab8291fa9305cd9cc7bd41bbfef63b63897cd2ddb5842e1a50d06f7ec87456756c6873d15c22410528b0bf2c72087e4ff4a5e11795004111625cee8b4d7fc4a3af9b57bb9a444405e0180f6107fec8e0b107c1cfefd33a1fc33416f7cfd936c0c2bfb124c35d089e33d7c479df36ac5954c3e462013773c94ef3ff93f047e27ceb9d05cb944fbc340fe8ec3ea4025481f7d1f84ec243b10821e84cf9ae37f35c598c2032745b754af4f14eb7e6e8fdc483aa90e4bc087e7d0c2ecbce044a5e8113f8a1607ba5f30e9274d7acd559dee03d642410d3b4b1", 0xf8}], 0x1, 0x31) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r8, 0x20000000008912, &(0x7f0000000940)="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") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001b00)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000001c00)=0xe8) bind$bt_hci(r6, &(0x7f0000001c40)={0x1f, r9, 0x3}, 0xc) setsockopt$inet_pktinfo(r7, 0x6, 0x1b, &(0x7f0000000100)={0x0, @multicast1}, 0xc) 18:10:21 executing program 4 (fault-call:1 fault-nth:22): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:21 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2175.966700][T21218] FAULT_INJECTION: forcing a failure. [ 2175.966700][T21218] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.004271][T21222] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.011526][T21222] bridge0: port 1(bridge_slave_0) entered disabled state [ 2176.037460][T21218] CPU: 1 PID: 21218 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2176.046612][T21218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2176.056677][T21218] Call Trace: [ 2176.059982][T21218] dump_stack+0x172/0x1f0 [ 2176.064326][T21218] should_fail.cold+0xa/0x15 [ 2176.068935][T21218] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2176.074758][T21218] ? ___might_sleep+0x163/0x280 [ 2176.079646][T21218] __should_failslab+0x121/0x190 [ 2176.084594][T21218] should_failslab+0x9/0x14 [ 2176.089113][T21218] kmem_cache_alloc_node+0x264/0x710 [ 2176.094407][T21218] ? find_held_lock+0x35/0x130 [ 2176.099187][T21218] __alloc_skb+0xd5/0x5e0 [ 2176.103527][T21218] ? skb_trim+0x190/0x190 [ 2176.107868][T21218] ? kasan_check_read+0x11/0x20 [ 2176.112729][T21218] alloc_uevent_skb+0x83/0x1e2 [ 2176.118022][T21218] kobject_uevent_env+0xaaa/0x1031 [ 2176.123156][T21218] kobject_uevent+0x20/0x26 [ 2176.127675][T21218] lo_ioctl+0x12c6/0x23a0 [ 2176.132023][T21218] ? lo_rw_aio+0x1130/0x1130 [ 2176.136629][T21218] blkdev_ioctl+0x6f2/0x1d10 [ 2176.141234][T21218] ? blkpg_ioctl+0xa90/0xa90 [ 2176.145845][T21218] ? retint_kernel+0x2d/0x2d [ 2176.150455][T21218] ? block_ioctl+0xdd/0x130 [ 2176.154973][T21218] block_ioctl+0xee/0x130 [ 2176.159308][T21218] ? blkdev_fallocate+0x410/0x410 [ 2176.164342][T21218] do_vfs_ioctl+0xd6e/0x1390 [ 2176.168946][T21218] ? ioctl_preallocate+0x210/0x210 [ 2176.174064][T21218] ? __fget+0x381/0x550 [ 2176.178262][T21218] ? ksys_dup3+0x3e0/0x3e0 [ 2176.182691][T21218] ? do_sys_open+0x31d/0x5d0 [ 2176.187295][T21218] ? tomoyo_file_ioctl+0x23/0x30 [ 2176.192236][T21218] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2176.198481][T21218] ? security_file_ioctl+0x93/0xc0 [ 2176.202314][T21231] device bridge_slave_1 left promiscuous mode [ 2176.203603][T21218] ksys_ioctl+0xab/0xd0 [ 2176.203623][T21218] __x64_sys_ioctl+0x73/0xb0 [ 2176.203641][T21218] do_syscall_64+0x103/0x610 [ 2176.203664][T21218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2176.228897][T21218] RIP: 0033:0x458127 [ 2176.232813][T21218] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2176.247021][T21231] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.252421][T21218] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2176.252437][T21218] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000458127 [ 2176.252445][T21218] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 2176.252454][T21218] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2176.252462][T21218] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2176.252471][T21218] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2176.309055][ C0] net_ratelimit: 21 callbacks suppressed [ 2176.309063][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.320555][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:22 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x30710000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2176.374404][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.380283][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2176.388841][T21218] hfsplus: unable to find HFS+ superblock 18:10:22 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x3, 0x4, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x5}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r4, r5, r6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000140)={0xffffffffffffffe1, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={r7, 0x7fffffff}) 18:10:22 executing program 4 (fault-call:1 fault-nth:23): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:22 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x30a87f997f0000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2176.562981][T21231] device bridge_slave_0 left promiscuous mode [ 2176.591160][T21231] bridge0: port 1(bridge_slave_0) entered disabled state 18:10:22 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x80000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:22 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x807a00, 0x0) r0 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) [ 2176.827252][T21256] FAULT_INJECTION: forcing a failure. [ 2176.827252][T21256] name failslab, interval 1, probability 0, space 0, times 0 18:10:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x910000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:22 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101000, 0x0) recvfrom$inet(r0, &(0x7f0000000100)=""/116, 0x74, 0x40, &(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-control\x00', 0x8001, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8d4040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_MEDIA={0x78, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x476b}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ceb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd440}]}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18:10:22 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000580)={@null, @default, @null, 0x63, 0x6, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2176.902082][T21256] CPU: 0 PID: 21256 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2176.911231][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2176.921286][T21256] Call Trace: [ 2176.921308][T21256] dump_stack+0x172/0x1f0 [ 2176.921331][T21256] should_fail.cold+0xa/0x15 [ 2176.921349][T21256] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2176.921371][T21256] ? ___might_sleep+0x163/0x280 [ 2176.944196][T21256] __should_failslab+0x121/0x190 [ 2176.949144][T21256] should_failslab+0x9/0x14 [ 2176.949163][T21256] kmem_cache_alloc+0x2b2/0x6f0 [ 2176.949178][T21256] ? __fget+0x381/0x550 [ 2176.949198][T21256] getname_flags+0xd6/0x5b0 [ 2176.962680][T21256] do_mkdirat+0xa0/0x2a0 [ 2176.962716][T21256] ? __ia32_sys_mknod+0xb0/0xb0 [ 2176.962730][T21256] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2176.962747][T21256] ? do_syscall_64+0x26/0x610 [ 2176.976312][T21256] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2176.992472][T21256] ? do_syscall_64+0x26/0x610 [ 2176.992490][T21256] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2176.992510][T21256] __x64_sys_mkdir+0x5c/0x80 [ 2176.992533][T21256] do_syscall_64+0x103/0x610 [ 2177.011640][T21256] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2177.017537][T21256] RIP: 0033:0x4576d7 [ 2177.021441][T21256] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2177.041047][T21256] RSP: 002b:00007f4e4ecbaa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 18:10:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0x20000, 0x0, [0x4, 0x100, 0x1ff, 0x7, 0x1ff, 0x5, 0x1, 0x7]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2177.049455][T21256] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004576d7 [ 2177.057423][T21256] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000280 [ 2177.065383][T21256] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2177.073340][T21256] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2177.081298][T21256] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2177.174421][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2177.174455][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2177.180256][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2177.185999][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2177.191696][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2177.197375][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:23 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet6(0xffffffffffffff9c, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:23 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xa0700000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:23 executing program 4 (fault-call:1 fault-nth:24): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:23 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) write$nbd(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x106) recvfrom$inet(r0, 0x0, 0x0, 0x102005, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0xffffffffffffffff) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffbfd], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000040)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) 18:10:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x8482, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'vxcan1\x00', {0x2, 0x4e20, @local}}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10001, 0x400000) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x8, &(0x7f0000001740)=[{&(0x7f0000000200)="7eb56de48116bd2397c0538a923dd5ac4df5cca6ccce50765a30c8d1ddb34d8f5b2cf66c18d83f843afdb780890c55a26d4303a4236819cf1892781240abc362516426b9280b4115968df72d840c11be6197b3c988d8542f5255fcce0b5de719ccad988a2e1d4e27e4bf23533b6dc359145f68abf6010552b37d466a0c850fa6e6a824d1c8c0ac55528b164a327d32082591db5e0fee8f2baf581512b2db1f4dfd859b598e57dd80a6680fb15ad5a779f6e7f11ad0090c", 0xb7, 0xd8d}, {&(0x7f00000002c0)="15ce32a481a17808b304e0676866697aef89d12483ac838fec7fdf11896cdbb9157c69f2", 0x24, 0x7f}, {&(0x7f0000000300)="d503128555f996dded99cf4049c0c0368eae98de12c3ce407e8c29ceb649430048b43ff5118658d4cc4dd5ccaee45888b765a5db899f8c8af875ef5a5bec5ebb6561c7163af4090672fbaf3eed087683291bd7e90d3cad1b4ab8f777a3f25cb2546887dff52753b8e22f6c09e3b30b71136ba8d99c23d8275f61e148cd506715e2afe5ba2878c7c6604ce5c7a92624f6b84a49c49d366262175ed9548259d0df", 0xa0, 0x200}, {&(0x7f0000000440)="33e934d26760f9f1f17d666ea1692d18592a2c5132bb932f398333500a5d571e62a5", 0x22, 0x4}, {&(0x7f0000000480)="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", 0x1000, 0x100}, {&(0x7f0000001480)="ce2ae13c0d2ec4e6393b2215be3636eea863270eada72a84bcc0a6bdd56f1d8b87e6545d1a29320ba216f1ca07d3eaeb5d865b702a89f211254b50a6fa1692fe830f59c5f17f3113190f29ea82a9aa7f64d740ee16669f3bdf464caca23701b8895fe9022acbf8a3663328677bc5ad82a3a938d076c52df93c47170b1aa26e81a51615c37d1f5a42a6131aa3f93cd7b6722afbe56fae08d29869c0ddfb481c0f5bec5e46cf62133d795b290fee3bd1cbd1dd95e243947d0ee8dd1f764504a066eb8aff6ec2d5b262913c77f44ecbb1764f7b0b913d583cb2ce5ecb4749940985ebe9bd9e9b2e421d", 0xe8, 0x3}, {&(0x7f0000001580)="b3e32492cef2d1a8d66c5d74ddf8d1569453e4a857fbd80373234113d1aa3344bfcd8df45955d5e58d53d3421af792c4ffb9b6cd5ec3562f343d7cdb4b70b40fe02fdc21cd9c7e17ba5238a4b7db459e23f294b4fa1a6b79c870bfa936e0315e2cb63583ce0750fb12c0d5c177decc7beaaab4a5bdd01e68df4166bcd9d9067508a38dabb5f0258c0b7820289be335c5d3558a855cb156609023", 0x9a, 0x9}, {&(0x7f0000001640)="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", 0xff, 0x5}], 0x200000, &(0x7f0000001940)={[{@gid={'gid', 0x3d, r5}}, {@decompose='decompose'}, {@umask={'umask', 0x3d, 0x80000000}}, {@nodecompose='nodecompose'}, {@uid={'uid', 0x3d, r6}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/kvm\x00'}}, {@dont_measure='dont_measure'}, {@audit='audit'}, {@obj_user={'obj_user', 0x3d, 'selfGPL\x84'}}, {@subj_role={'subj_role', 0x3d, 'vboxnet1em1*-*!vmnet1eth1'}}]}) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f00000000c0)=0x9) 18:10:23 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xb0500000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:23 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x180000000005421, &(0x7f0000000300)) 18:10:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd00000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2177.601368][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 2177.601382][ T26] audit: type=1804 audit(1554833423.594:1671): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5569/bus" dev="sda1" ino=17954 res=1 [ 2177.732235][T21310] FAULT_INJECTION: forcing a failure. [ 2177.732235][T21310] name failslab, interval 1, probability 0, space 0, times 0 18:10:23 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x8, 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x1) 18:10:23 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2177.762946][ T26] audit: type=1804 audit(1554833423.644:1672): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5569/bus" dev="sda1" ino=17954 res=1 [ 2177.817357][T21310] CPU: 0 PID: 21310 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2177.826499][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.836564][T21310] Call Trace: [ 2177.839876][T21310] dump_stack+0x172/0x1f0 [ 2177.844227][T21310] should_fail.cold+0xa/0x15 [ 2177.848837][T21310] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2177.854673][T21310] ? ___might_sleep+0x163/0x280 [ 2177.859538][T21310] __should_failslab+0x121/0x190 [ 2177.864488][T21310] should_failslab+0x9/0x14 [ 2177.869002][T21310] kmem_cache_alloc+0x2b2/0x6f0 [ 2177.873856][T21310] ? __d_lookup+0x433/0x760 [ 2177.878365][T21310] ? lookup_dcache+0x23/0x140 [ 2177.883047][T21310] ? d_lookup+0xf9/0x260 [ 2177.887302][T21310] __d_alloc+0x2e/0x8c0 [ 2177.891467][T21310] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2177.897198][T21310] d_alloc+0x4d/0x280 [ 2177.901197][T21310] __lookup_hash+0xcd/0x190 [ 2177.905713][T21310] filename_create+0x1a7/0x4f0 [ 2177.910486][T21310] ? kern_path_mountpoint+0x40/0x40 [ 2177.915697][T21310] ? strncpy_from_user+0x2a8/0x380 [ 2177.920819][T21310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2177.927062][T21310] ? getname_flags+0x277/0x5b0 [ 2177.931842][T21310] do_mkdirat+0xb5/0x2a0 [ 2177.936097][T21310] ? __ia32_sys_mknod+0xb0/0xb0 [ 2177.940970][T21310] __x64_sys_mkdir+0x5c/0x80 [ 2177.945575][T21310] do_syscall_64+0x103/0x610 [ 2177.951383][T21310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2177.957279][T21310] RIP: 0033:0x4576d7 [ 2177.961181][T21310] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2177.980785][T21310] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2177.989203][T21310] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004576d7 [ 2177.997176][T21310] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000280 [ 2178.005148][T21310] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 18:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0xffffffdd, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) [ 2178.013123][T21310] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2178.021097][T21310] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1200000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2178.070911][ T26] audit: type=1804 audit(1554833423.644:1673): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5569/bus" dev="sda1" ino=17954 res=1 18:10:24 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000580)={0x1000, 0x5, 0x7aa, 'queue0\x00'}) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) [ 2178.211697][ T26] audit: type=1804 audit(1554833423.694:1674): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3582/bus" dev="sda1" ino=17960 res=1 [ 2178.308254][ T26] audit: type=1804 audit(1554833423.714:1675): pid=21311 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3582/bus" dev="sda1" ino=17960 res=1 [ 2178.392014][ T26] audit: type=1804 audit(1554833423.724:1676): pid=21307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3582/bus" dev="sda1" ino=17960 res=1 [ 2178.432158][ T26] audit: type=1804 audit(1554833424.104:1677): pid=21322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5570/bus" dev="sda1" ino=17965 res=1 18:10:24 executing program 4 (fault-call:1 fault-nth:25): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:24 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x102000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x50) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00000000c0)={0x9, 0x1a, 0xcc}) 18:10:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1f00000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:24 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='g'], 0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000ec0)='a', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) [ 2178.471006][ T26] audit: type=1804 audit(1554833424.144:1678): pid=21322 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5570/bus" dev="sda1" ino=17965 res=1 [ 2178.498667][ T26] audit: type=1804 audit(1554833424.184:1679): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3583/bus" dev="sda1" ino=17667 res=1 [ 2178.585364][ T26] audit: type=1804 audit(1554833424.584:1680): pid=21343 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3584/bus" dev="sda1" ino=17953 res=1 [ 2178.645827][T21348] FAULT_INJECTION: forcing a failure. [ 2178.645827][T21348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2178.659073][T21348] CPU: 1 PID: 21348 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2178.659084][T21348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.659090][T21348] Call Trace: [ 2178.659111][T21348] dump_stack+0x172/0x1f0 [ 2178.659133][T21348] should_fail.cold+0xa/0x15 [ 2178.659153][T21348] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2178.659168][T21348] ? __lock_acquire+0x548/0x3fb0 [ 2178.659193][T21348] should_fail_alloc_page+0x50/0x60 [ 2178.659209][T21348] __alloc_pages_nodemask+0x1a1/0x7e0 [ 2178.659230][T21348] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2178.659246][T21348] ? find_held_lock+0x35/0x130 [ 2178.678417][T21348] ? __fget+0x35a/0x550 [ 2178.678437][T21348] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2178.678457][T21348] cache_grow_begin+0x9c/0x860 [ 2178.678476][T21348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2178.678492][T21348] kmem_cache_alloc+0x62d/0x6f0 [ 2178.678512][T21348] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2178.701425][T21348] getname_flags+0xd6/0x5b0 [ 2178.701444][T21348] do_mkdirat+0xa0/0x2a0 [ 2178.701461][T21348] ? __ia32_sys_mknod+0xb0/0xb0 [ 2178.701482][T21348] __x64_sys_mkdir+0x5c/0x80 [ 2178.701501][T21348] do_syscall_64+0x103/0x610 [ 2178.712054][T21348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.712066][T21348] RIP: 0033:0x4576d7 [ 2178.712081][T21348] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2178.712089][T21348] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2178.712102][T21348] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004576d7 [ 2178.712115][T21348] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000280 [ 2178.830269][T21348] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2178.838251][T21348] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 18:10:24 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x6}, @timestamp], 0x2) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2178.846233][T21348] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2300000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:25 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2179.062933][T21348] hfsplus: unable to find HFS+ superblock 18:10:25 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000780)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0xc8, &(0x7f0000000580)=[@in6={0xa, 0x4e24, 0x75, @remote, 0x5}, @in6={0xa, 0x4e24, 0x2, @rand_addr="c809f0f0c34d3593b7bb2c2199fe6d61"}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x4, @local, 0x1f}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0x10001, @mcast1, 0x9}, @in6={0xa, 0x4e23, 0x0, @empty, 0xfffffffffffffff9}, @in6={0xa, 0x4e20, 0x1f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffffffffffffffa}]}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000006c0)={r9, 0x6e9, 0x3, [0x8, 0x7, 0x1]}, &(0x7f0000000740)=0xe) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000140)=0x5d01, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:25 executing program 4 (fault-call:1 fault-nth:26): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:25 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1a9) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x59}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r4, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8003, 0x0) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000280)={0x200, 0x10f, "391baf08407f7bb9099de0c97dfb78d42a346b4c517de0c0a1f318f66029b18e", 0x2, 0x8, 0x4, 0x9, 0x80}) [ 2179.354127][T21374] FAULT_INJECTION: forcing a failure. [ 2179.354127][T21374] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.376577][T21374] CPU: 0 PID: 21374 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2179.385717][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2179.395782][T21374] Call Trace: [ 2179.399093][T21374] dump_stack+0x172/0x1f0 [ 2179.403439][T21374] should_fail.cold+0xa/0x15 [ 2179.408065][T21374] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2179.413891][T21374] ? ___might_sleep+0x163/0x280 [ 2179.418754][T21374] __should_failslab+0x121/0x190 [ 2179.423710][T21374] should_failslab+0x9/0x14 [ 2179.428224][T21374] __kmalloc+0x2dc/0x740 [ 2179.432509][T21374] ? retint_kernel+0x2d/0x2d [ 2179.437114][T21374] ? ext4_find_extent+0x76e/0x9d0 [ 2179.442152][T21374] ext4_find_extent+0x76e/0x9d0 [ 2179.447027][T21374] ext4_ext_map_blocks+0x1cc/0x5300 [ 2179.452245][T21374] ? ext4_ext_release+0x10/0x10 [ 2179.457119][T21374] ? lock_acquire+0x16f/0x3f0 [ 2179.461812][T21374] ? ext4_map_blocks+0x3fd/0x18e0 [ 2179.466857][T21374] ext4_map_blocks+0xec7/0x18e0 [ 2179.471722][T21374] ? ext4_issue_zeroout+0x190/0x190 [ 2179.476935][T21374] ? kasan_check_write+0x14/0x20 [ 2179.481885][T21374] ? __brelse+0x95/0xb0 [ 2179.486056][T21374] ext4_getblk+0xc4/0x510 [ 2179.490399][T21374] ? ext4_iomap_begin+0xfe0/0xfe0 [ 2179.495437][T21374] ? ext4_free_inode+0x1450/0x1450 [ 2179.500588][T21374] ext4_bread+0x8f/0x230 [ 2179.504841][T21374] ? ext4_getblk+0x510/0x510 [ 2179.509440][T21374] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2179.514923][T21374] ext4_append+0x155/0x370 [ 2179.519354][T21374] ext4_mkdir+0x61b/0xdf0 [ 2179.523704][T21374] ? ext4_init_dot_dotdot+0x520/0x520 [ 2179.529081][T21374] ? inode_permission+0xaa/0x570 [ 2179.534028][T21374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.540277][T21374] ? security_inode_permission+0xd5/0x110 [ 2179.546008][T21374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2179.552258][T21374] ? security_inode_mkdir+0xee/0x120 [ 2179.557549][T21374] vfs_mkdir+0x433/0x690 [ 2179.561810][T21374] do_mkdirat+0x234/0x2a0 [ 2179.566147][T21374] ? __ia32_sys_mknod+0xb0/0xb0 [ 2179.571001][T21374] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2179.576482][T21374] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2179.582558][T21374] ? do_syscall_64+0x26/0x610 [ 2179.587246][T21374] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2179.592563][T21374] __x64_sys_mkdir+0x5c/0x80 [ 2179.597161][T21374] do_syscall_64+0x103/0x610 [ 2179.601764][T21374] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2179.607668][T21374] RIP: 0033:0x4576d7 [ 2179.611576][T21374] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2179.631184][T21374] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2179.639602][T21374] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004576d7 [ 2179.647579][T21374] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000280 [ 2179.655555][T21374] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2179.663534][T21374] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2179.671524][T21374] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4000000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:25 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2179.706026][T21383] sctp: [Deprecated]: syz-executor.0 (pid 21383) Use of int in maxseg socket option. [ 2179.706026][T21383] Use struct sctp_assoc_value instead [ 2179.733313][T21374] hfsplus: unable to find HFS+ superblock 18:10:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:10:25 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) write$P9_RAUTH(r0, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x50, 0x4}}, 0x14) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2179.787162][T21388] sctp: [Deprecated]: syz-executor.0 (pid 21388) Use of int in maxseg socket option. [ 2179.787162][T21388] Use struct sctp_assoc_value instead 18:10:25 executing program 4 (fault-call:1 fault-nth:27): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000002240)=[{{&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x80, 0x0}}], 0x1, 0x40000) [ 2179.947502][T21404] FAULT_INJECTION: forcing a failure. [ 2179.947502][T21404] name failslab, interval 1, probability 0, space 0, times 0 [ 2179.983976][T21404] CPU: 1 PID: 21404 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2179.996245][T21404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2180.006311][T21404] Call Trace: [ 2180.009616][T21404] dump_stack+0x172/0x1f0 [ 2180.013963][T21404] should_fail.cold+0xa/0x15 [ 2180.018562][T21404] ? retint_kernel+0x2d/0x2d [ 2180.023160][T21404] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2180.028986][T21404] __should_failslab+0x121/0x190 [ 2180.033936][T21404] ? ratelimit_state_init+0xb0/0xb0 [ 2180.039145][T21404] should_failslab+0x9/0x14 [ 2180.043662][T21404] kmem_cache_alloc+0x2b2/0x6f0 [ 2180.048529][T21404] ? ratelimit_state_init+0xb0/0xb0 [ 2180.053732][T21404] ext4_alloc_inode+0x1f/0x640 [ 2180.058504][T21404] ? ratelimit_state_init+0xb0/0xb0 [ 2180.063705][T21404] alloc_inode+0x66/0x190 [ 2180.063721][T21404] new_inode_pseudo+0x19/0xf0 [ 2180.063736][T21404] new_inode+0x1f/0x40 [ 2180.063754][T21404] __ext4_new_inode+0x37e/0x5450 [ 2180.081759][T21404] ? mark_held_locks+0xa4/0xf0 [ 2180.086542][T21404] ? ext4_free_inode+0x1450/0x1450 [ 2180.091668][T21404] ? dqget+0x10d0/0x10d0 18:10:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffdb6, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6300000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2180.091685][T21404] ? retint_kernel+0x2d/0x2d [ 2180.091711][T21404] ext4_mkdir+0x3d5/0xdf0 [ 2180.104852][T21404] ? ext4_init_dot_dotdot+0x520/0x520 [ 2180.110232][T21404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.116966][T21404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.123214][T21404] ? security_inode_permission+0xd5/0x110 [ 2180.128950][T21404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2180.135201][T21404] ? security_inode_mkdir+0xee/0x120 [ 2180.140497][T21404] vfs_mkdir+0x433/0x690 [ 2180.144751][T21404] do_mkdirat+0x234/0x2a0 [ 2180.149095][T21404] ? __ia32_sys_mknod+0xb0/0xb0 [ 2180.153948][T21404] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2180.159423][T21404] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2180.165483][T21404] ? do_syscall_64+0x26/0x610 [ 2180.170150][T21404] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2180.175438][T21404] __x64_sys_mkdir+0x5c/0x80 [ 2180.180019][T21404] do_syscall_64+0x103/0x610 [ 2180.184601][T21404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2180.190479][T21404] RIP: 0033:0x4576d7 [ 2180.194363][T21404] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2180.213956][T21404] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2180.222355][T21404] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004576d7 [ 2180.230316][T21404] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000280 [ 2180.238312][T21404] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 18:10:26 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2180.246270][T21404] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2180.254227][T21404] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 18:10:26 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000000), 0x0) 18:10:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000580)="d4f00c26ab898e77ae2efc44b60c055f7fd706af94263952bf5d8d5197534d2215ac6c510589037462d5022a13bc147816e9fa31a22e04f90de063af91dbfe32c8a2697d65d9921e8abe1602c562a4bc7a5c1c9aa0f3c25295e8d0eae6ff90490b55532701803bafc6e2b91af8ae9b536c40") ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:26 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="1767d1d28aa070e40013d7f740934445592dcd76f1b5169081da6dfa0c7683a340610d415823f38a40b7adbc1206e2267a3bfdc86acc72018c533c9c9d79b58db1ccd9b7531b2572b1d04f645f1cce921e07ea859e57947279c83c390b", 0x5d) 18:10:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8000000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = dup2(r1, r1) accept4$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14, 0x800) sendmsg$can_bcm(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)={0x6, 0xa0, 0xe7a, {0x0, 0x2710}, {0x77359400}, {0x3, 0x8, 0x0, 0x2000000000000}, 0x1, @canfd={{0x0, 0xec08, 0x9}, 0xa, 0x3, 0x0, 0x0, "721ef744afe2942c1b93c43448cc8ae22ce8c407c7a58193f40da56c3c5e2d995a1fed03dce2add982a714ce3132d6a6fdb9b8ed3169567f9e3c59c2682c4fe1"}}, 0x80}, 0x1, 0x0, 0x0, 0x20044010}, 0x40000) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @remote}, 0x10001}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r5, 0x309e02b2}, &(0x7f00000003c0)=0x8) 18:10:26 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x582000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:26 executing program 4 (fault-call:1 fault-nth:28): perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x4040) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @remote}}, 0x2, 0x7}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e23, @local}}, 0xffffffffffff8000, 0x1f}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe4ffffff00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:26 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x600000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2180.722152][T21446] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 0, id = 0 18:10:26 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') accept4$netrom(r0, &(0x7f0000000580)={{0x3, @rose}, [@remote, @default, @remote, @netrom, @netrom, @remote, @null, @netrom]}, &(0x7f0000000140)=0x48, 0x80000) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:26 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:26 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="1767d1d28aa070e40013d7f740934445592dcd76f1b5169081da6dfa0c7683a340610d415823f38a40b7adbc1206e2267a3bfdc86acc72018c533c9c9d79b58db1ccd9b7531b2572b1d04f645f1cce921e07ea859e57947279c83c390b", 0x5d) 18:10:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xeffdffffffffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:27 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x800000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2181.117983][T21455] FAULT_INJECTION: forcing a failure. [ 2181.117983][T21455] name failslab, interval 1, probability 0, space 0, times 0 [ 2181.130962][T21455] CPU: 1 PID: 21455 Comm: syz-executor.4 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2181.140082][T21455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2181.150143][T21455] Call Trace: [ 2181.153448][T21455] dump_stack+0x172/0x1f0 [ 2181.157795][T21455] should_fail.cold+0xa/0x15 [ 2181.162400][T21455] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2181.168212][T21455] ? __es_tree_search.isra.0+0x1bf/0x230 [ 2181.168233][T21455] __should_failslab+0x121/0x190 [ 2181.168251][T21455] should_failslab+0x9/0x14 [ 2181.168266][T21455] kmem_cache_alloc+0x47/0x6f0 [ 2181.168280][T21455] ? ext4_es_scan+0x6f0/0x6f0 [ 2181.168295][T21455] ? do_raw_write_lock+0x124/0x290 [ 2181.168313][T21455] __es_insert_extent+0x2cc/0xf20 [ 2181.168348][T21455] ext4_es_insert_extent+0x2b7/0xa40 [ 2181.168365][T21455] ? ext4_es_scan_clu+0x50/0x50 [ 2181.168386][T21455] ? rcu_read_lock_sched_held+0x110/0x130 [ 2181.168404][T21455] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2181.208253][T21455] ? ext4_es_find_extent_range+0xff/0x600 [ 2181.208344][T21455] ext4_ext_put_gap_in_cache+0xfe/0x150 [ 2181.208363][T21455] ? ext4_rereserve_cluster+0x240/0x240 [ 2181.241915][T21455] ? ext4_find_extent+0x76e/0x9d0 [ 2181.246956][T21455] ? ext4_find_extent+0x6a6/0x9d0 [ 2181.251991][T21455] ext4_ext_map_blocks+0x2146/0x5300 [ 2181.257292][T21455] ? ext4_ext_release+0x10/0x10 [ 2181.262193][T21455] ? lock_acquire+0x16f/0x3f0 18:10:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf4ffffff00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2181.266883][T21455] ? ext4_map_blocks+0x3fd/0x18e0 [ 2181.271931][T21455] ext4_map_blocks+0xec7/0x18e0 [ 2181.276803][T21455] ? ext4_issue_zeroout+0x190/0x190 [ 2181.282017][T21455] ? kasan_check_write+0x14/0x20 [ 2181.286963][T21455] ? __brelse+0x95/0xb0 [ 2181.291132][T21455] ext4_getblk+0xc4/0x510 [ 2181.295482][T21455] ? ext4_iomap_begin+0xfe0/0xfe0 [ 2181.300526][T21455] ? ext4_free_inode+0x1450/0x1450 [ 2181.305651][T21455] ext4_bread+0x8f/0x230 [ 2181.309898][T21455] ? ext4_getblk+0x510/0x510 [ 2181.309923][T21455] ext4_append+0x155/0x370 [ 2181.309944][T21455] ext4_mkdir+0x61b/0xdf0 [ 2181.309969][T21455] ? ext4_init_dot_dotdot+0x520/0x520 [ 2181.309983][T21455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2181.310000][T21455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2181.334914][T21455] ? security_inode_permission+0xd5/0x110 [ 2181.334934][T21455] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2181.334950][T21455] ? security_inode_mkdir+0xee/0x120 [ 2181.334969][T21455] vfs_mkdir+0x433/0x690 [ 2181.334988][T21455] do_mkdirat+0x234/0x2a0 [ 2181.335004][T21455] ? __ia32_sys_mknod+0xb0/0xb0 [ 2181.335026][T21455] __x64_sys_mkdir+0x5c/0x80 [ 2181.335045][T21455] do_syscall_64+0x103/0x610 [ 2181.335065][T21455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2181.335077][T21455] RIP: 0033:0x4576d7 [ 2181.335092][T21455] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d c4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2181.335099][T21455] RSP: 002b:00007f4e4ecdba88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2181.335111][T21455] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004576d7 [ 2181.335119][T21455] RDX: 0000000000000005 RSI: 00000000000001ff RDI: 0000000020000280 [ 2181.335127][T21455] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 2181.335134][T21455] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 2181.335146][T21455] R13: 00000000004c6b80 R14: 00000000004dc548 R15: 0000000000000004 [ 2181.335209][ C0] net_ratelimit: 17 callbacks suppressed [ 2181.335217][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.335265][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2181.335361][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.335401][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2181.340592][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.495512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2181.502345][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.508592][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x81, 0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000100)={0x6, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2181.569201][T21455] hfsplus: unable to find HFS+ superblock 18:10:27 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:27 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="1767d1d28aa070e40013d7f740934445592dcd76f1b5169081da6dfa0c7683a340610d415823f38a40b7adbc1206e2267a3bfdc86acc72018c533c9c9d79b58db1ccd9b7531b2572b1d04f645f1cce921e07ea859e57947279c83c390b", 0x5d) 18:10:27 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x8, {0x6, 0x9, 0x5, 0xe9ca, 0xfffffffffffffffc, 0x5}}) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:27 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x900000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f00000000c0)={0x3ff, 0xffffffff80000001, 0x6, 0x8001, 0x16, 0x787, 0x1, 0x3, 0x7e6, 0x8000}) [ 2181.831715][T21503] hfsplus: unable to find HFS+ superblock 18:10:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:27 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x910000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='\nfsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:28 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f00000004c0)=0x201) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a0000007d02000000630000000700000000000000000020000800000004515300080029236367726f75700000230047104c6d72d317eef4b192bc643573756d73656375726974796d696d655f74797065730000000000000000003e330a4fedb3c904d27baae4484010f4ed56bae199174bebed43c348274470af9b772a93ab1a87bf5bf01e65e47a7f2335c12651a34a8ed0134f2e1b200378282bf9b7ad000000000000000058eaeaba855a4f4a0d2017603c2e10623a592fee3765fe0b3da53957d27485df35692d55a905be5a4e125228ca7b1d07b2fa0da0ec023b8386c498b4e2b4cde184350b0d20f7a915632eb4db36366931339579f69649ddc34bbb549f61eac28da7d44f30dd98cf0bc9cf61eb1196a34e6e7b7758790d75a200"/318], 0x6a) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socket$nl_generic(0x10, 0x3, 0x10) 18:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x204000) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x3ff, @rand_addr="81287e7796c32fa386d8c241bd56a0e4", 0x1f}}}, 0x84) 18:10:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) r9 = socket$nl_route(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="1767d1d28aa070e40013d7f740934445592dcd76f1b5169081da6dfa0c7683a340610d415823f38a40b7adbc1206e2267a3bfdc86acc72018c533c9c9d79b58db1ccd9b7531b2572b1d04f645f1cce921e07ea859e57947279c83c390b", 0x5d) 18:10:28 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xc00000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x301100, 0x0) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x9}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r3, r3, 0x3, 0x2}, 0x10) 18:10:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='%fsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff01000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:28 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xd00000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) socket$nl_route(0x10, 0x3, 0x0) 18:10:28 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000005c0)='dns_resolver\x00', 0x0) lstat(0x0, &(0x7f00000007c0)) r4 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(r4) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000140)) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r8) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r9) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab0ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c74818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098332961c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad22df8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c1dddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0x980000, 0x2, 0x7, [], &(0x7f0000000100)={0xbb0907, 0x5, [], @p_u8=&(0x7f00000000c0)=0x6}}) 18:10:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff0f000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2182.535594][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2182.541400][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='h\nsplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2182.667766][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 2182.667781][ T26] audit: type=1804 audit(1554833428.664:1739): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3597/bus" dev="sda1" ino=17962 res=1 18:10:28 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2182.729615][ T26] audit: type=1804 audit(1554833428.664:1740): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3597/bus" dev="sda1" ino=17962 res=1 [ 2182.756043][ T26] audit: type=1804 audit(1554833428.664:1741): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3597/bus" dev="sda1" ino=17962 res=1 18:10:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff11200000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:28 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(r0, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2182.893133][ T26] audit: type=1804 audit(1554833428.884:1742): pid=21592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5584/bus" dev="sda1" ino=17983 res=1 18:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004f97194af80fa0d10bc5"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='h\x14splus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2182.968484][ T26] audit: type=1804 audit(1554833428.914:1743): pid=21592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5584/bus" dev="sda1" ino=17983 res=1 18:10:29 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1200000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2183.137537][ T26] audit: type=1804 audit(1554833428.914:1744): pid=21592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5584/bus" dev="sda1" ino=17983 res=1 18:10:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='h%splus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:29 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1f00000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) r3 = getgid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000780)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x9, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000180)="e7a6b0ecbf400a932c51d3a729790d5348c0d2241092b9e7ee23df15da984a4a44f2b5881e5a838fe155b0ed52226e189a7cf582b80c78cf9fcc28cf4bd1bfb787624908446161d8c4f15e67c634568363e726f745e8ecd4b99a143cf15871371d87080099ffc06147aad65f6738de8d4ef4a2407eb43b71804c02926d4808591afb86e80a38eac7cbbe10bdb42005bf7a986e1296a580c64d7835b1afb12f9f49e9ec22ca4e00b171c66fac3bb4c3f8028175ffb54bc533b1fbae0ca0c1d463ae0235710c01cbe0625484e6a76bb7d72690d431c322", 0xd6, 0x1}, {&(0x7f0000000280)="3f618318b890ec3d68fd64e6f5e63df6304915905777f18e0185897a18bc17b5291cb32eb597673d", 0x28, 0x6}, {&(0x7f00000002c0)="f4c8c7efb12569bdb8d80516bad3e6fcbb8a6d496208ebfc1b4254b41ed26f6f222916150a8c33d7d2ad", 0x2a}, {&(0x7f0000000300)="fb265c8a577b5f5bceabeb4fefa276134e4348dc3bfed3ab1c257bb0f11504260d97cdd869489fcac324f6fa6822e97469868b20dcb5d6ab450420d1aef6e2c29699268fa8051267ce99ce24eb40bb34126e2b89a30e", 0x56, 0x615}, {&(0x7f0000000380)="62286a8030d378d65103281467cac182b2f72d", 0x13, 0xee26c01}, {&(0x7f0000000440)="985c9f036890bcc5daf805e2de7da90b4fdeac87222e5bd03e5bf8f9f69cfd76a6f87a82537a1bfc1be4c45a", 0x2c, 0x8000}, {&(0x7f0000000480)="75b1fb9df228506bc6d1e0ac9494a07c8511e36436582bbcaaba65ff9b396975a9b7e083552d1fabb305a3c1ec447dfdc56042566fd73ac54dc092d63a2bf8f1069cc3f043bc5bd57cea52dd60edf6eb647da39e992c84b59a8999e20669452c2eacbeae9b308f3276609fdb0dca252bef8d28bd14b6b052cc83993f7e3360df8eaa8e583284ab1319da7efc82bfb3ca7dd564d3302ed4e575829c490431af33a3842abe1ee09d399a4dba8b8d", 0xad, 0x2}, {&(0x7f0000000540)="4ca68b3342588efe446ae58b51a7281860c326bdc229a4bc19f4ea15b591a8158393319d23186193d03b2c525c32fc448f3477632a803c7897e606a11eb443db7745bfc5b5acba2ac7fd39fcece92d92c1648a", 0x53, 0x6}], 0x800, &(0x7f00000007c0)={[{@fat=@gid={'gid', 0x3d, r3}}, {@fat=@flush='flush'}], [{@fowner_lt={'fowner<', r4}}, {@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f00000000c0)={[0x10f005, 0x6000, 0x0, 0xf000], 0x4, 0x1, 0x108f0c53}) 18:10:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2183.276735][ T26] audit: type=1804 audit(1554833429.044:1745): pid=21600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3598/bus" dev="sda1" ino=17959 res=1 [ 2183.354836][ T26] audit: type=1804 audit(1554833429.054:1746): pid=21606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3598/bus" dev="sda1" ino=17959 res=1 18:10:29 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x215, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2183.430049][ T26] audit: type=1804 audit(1554833429.054:1747): pid=21600 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3598/bus" dev="sda1" ino=17959 res=1 18:10:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) fallocate(r0, 0xb, 0x769, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000000)={0x10001, 0x400, 0x4462, 0x1, 0x7a4dcb20}) r3 = socket$caif_stream(0x25, 0x1, 0x0) connect$caif(r3, &(0x7f00000000c0)=@rfm={0x25, 0x5, "3dc4ced9d03da6318ca5587071213b25"}, 0x18) 18:10:29 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2000000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='h.splus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2183.609000][ T26] audit: type=1804 audit(1554833429.114:1748): pid=21610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5585/bus" dev="sda1" ino=18000 res=1 18:10:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:29 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x2300000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x1) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f00000000c0)={@remote={[], 0x1}, 0x2, 'erspan0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:29 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='h/splus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:29 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffffff600000, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:29 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x0, 0x0, 0x200, 0x0, 0x80000002, 0x6, @perf_bp={0x0, 0x8}, 0x20000, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x80000000, 0x3, 0x7fff, 0x5, 0x8, 0x45, 0xffffffff}, 0x1c) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1) 18:10:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf\nplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:30 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffffffffdef, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x4000000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf#plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:30 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000009c0)={{0x80, 0x6, 0x8001, 0x3, 'syz0\x00', 0x6}, 0x3, 0x100, 0x8, r3, 0x8, 0x2, 'syz1\x00', &(0x7f0000000580)=['pkcs7_test\x00', 'vboxnet1em1vboxnet1\'\'\x00', '(trusted\x00', '\x14\x00', '\x00', 'syz', 'vboxnet1em1vboxnet1\'\'\x00', 'syz'], 0x49, [], [0x3, 0x8, 0x4, 0xde6]}) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f00000004c0)='B\xdd\x0f\xcb1\xc8\xf4\xb1st\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x3, 0x4) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c896c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e7dcf1be8a0200000000000000d104acd13eec41b8ee262f8234223e6ca38e440f58a91cd42fbe943d21de9affffef4e10ca980effffdf34e0fcbf1d6401d139f176540fe6de4c0000183fc7d538c521e74fae81e35b04511ec44d6c43fcd44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a95c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818dd4ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212535cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21af17e9ddc9a3a96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900000000000000000000000000000000000000000000561651bccf65189a531811610416657d25394df7fc57e1ae7009fd0ab4a967d9074840bf9d4a3fa459810a1918d8738f7782d80efc77457e50dc6855f742e315f6db496faad5916f5db6dd1cfaa9f113b51295e44f05d2611f5b863a93"], 0x1) 18:10:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x6100000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x40083) getsockopt$rose(r3, 0x104, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000480)={0x0, 0x1004000000080000, r1}) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x8000000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf%plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:30 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r7 = openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000}) r8 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r8, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:30 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe0ffffffffffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) sched_setparam(r3, &(0x7f0000000100)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000140)) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:10:30 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) prctl$PR_SET_FP_MODE(0x2d, 0x3) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000140)={0x1, 0x81}) 18:10:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf*plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:31 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xe4ffffff00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x5, 0x1, 0x6}}) 18:10:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r6}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000380)={0x1, 'team_slave_1\x00'}, 0x18) r7 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r7, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf+plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:31 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) process_vm_writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/11, 0xb}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/103, 0x67}, {&(0x7f00000009c0)=""/201, 0xc9}], 0x4, &(0x7f0000000740)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:31 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xeffdffffffffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r2, r0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:31 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r5}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x101003, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r6, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf-plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:31 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf0ffffffffffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x46880, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:31 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x401, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:31 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf4ffffff00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:31 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf.plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r5}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) r6 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r6, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400800) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x8}}, 0x30) ioctl$TIOCSTI(r3, 0x5412, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hf0plus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r5}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) r6 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r6, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfbffffff00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xb) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10200, 0xfffffffffffffffc, 0x107001, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x4, 0x0, [{0x26, 0x7, 0x0, 0x0, @sint={0x2}}, {0x5, 0x3, 0x0, 0x0, @sint={0x2, 0x4}}, {0x2, 0x1, 0x0, 0x0, @irqchip={0x5, 0x3}}, {0xffffffffffff0fad, 0x6, 0x0, 0x0, @irqchip={0x0, 0x100000001}}]}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0xa30000, 0x1, 0x1, [], &(0x7f00000001c0)={0x9909dc, 0x9, [], @value64=0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000240)=0xd47) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfXplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000003c0)={@empty, @remote, @mcast1, 0x21, 0x800005, 0x80, 0x500, 0x1, 0x10000, r5}) r6 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r6, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfeffffff00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="6736660f38801b0f06b9800000c00f3235001000000f300fc72caa8fc878c1dda0c4c2f9dba70048000066baf80cb8e8b34d80ef66bafc0cb800980000ef0f229d660f3a42b535aa00000c66b84b008ec8", 0x51}], 0x1, 0x1, &(0x7f0000000140)=[@cr0={0x0, 0x20}, @flags], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2186.694454][ C0] net_ratelimit: 22 callbacks suppressed [ 2186.694461][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2186.706119][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:32 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0x8, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2186.774391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2186.780291][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:32 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfcplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:32 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff01000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r5, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:33 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000680)={'filter\x00', 0x0, 0x4, 0x64, [], 0x7, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000600)=""/100}, &(0x7f0000000140)=0x78) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) r6 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {0x0}, {0x0}, {0x0}, {0x0}]}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000b80)={0xf, 0x1, 0x5e0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r10, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r11 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r12 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r11) r13 = request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r12) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r12) io_setup(0xa7e7, &(0x7f0000000480)=0x0) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0fe1882a464d3c07d62e8f795364b67b9966be4887cbdd0f81dd252a38019dcc6333bbc64532047f88f417795dc269bb8719aca25fd778577bd83776b8cc3af14d65c0659bf2", @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRESHEX=r13, @ANYRES16=r1, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRES16=r15, @ANYPTR64, @ANYRESHEX=r2], @ANYPTR64=&(0x7f00000009c0)=ANY=[@ANYBLOB="cba98ac8e6d96db3d7e22f9175d061b0ffeff0795056ef090543974c131f0e33bc1537af3ac9606051910ed04bdd7c9be4484385345c89fd620e06a540ce0867299ab6afb1a5e5f63cbad4b195008889120a5e9226e41aef3d9c23cc180740edc11e66a80945eb2b187370e5a849fcf455f25c87fe8f9783c620e2f625652b1fac456b1fda57b4df41bc3b3ac8f97dccc9922ed6045533142aca94bf646255", @ANYPTR64, @ANYRESHEX=r1, @ANYRES64=r6, @ANYRES64=r2, @ANYRESHEX=r3], @ANYRESDEC=r14, @ANYPTR64=&(0x7f0000000ac0)=ANY=[@ANYPTR64, @ANYBLOB="e82899b598dab08475da60ab0144950f6dd58136fa8f539db22b32ee3e11bc8d56737682298a6dded0d59d6b92c7ba4e398c8e16007a1ffe732d842c22134a61a550a9dd45178fc269ad4718", @ANYRESHEX=r13, @ANYRESDEC=r8, @ANYPTR, @ANYRESDEC=r7, @ANYRES32=r9, @ANYPTR, @ANYRES16], @ANYRES32=r4, @ANYRES32=r6, @ANYPTR=&(0x7f0000000c00)=ANY=[@ANYBLOB="dad74d94610bdb0f0e22b34c3cef6bc0aa3cf2d200631a1eb29995be082474986d1cc04188e384edee8c85313d5cef26e1845dae643ac34d9c97f2b6e7fb18f49e7a668a9bd8786cf491a5a6600d72745e95e4ce9512980448254573f48f2ed0c1734eedb55af336eb5dc625610a6102d092f7f25f7c21b9b7ece3aeb6e3ed49c2e37e2b82b10a0c1ceff49f007077fe53eb6ce0713f207f3a5ca1e84b75cc82db3353eaf75f8ae93e03fe94dd70974c6b70e5"]]], 0x2) 18:10:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfdplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) keyctl$join(0x1, 0x0) r5 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r5, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:33 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff0f000000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0x80040) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00') ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000002c0)) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xfffffffffffffe39, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x21, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x7d}, 0x8010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x42000000000020, 0x0, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x0, &(0x7f0000000000)=0xfffffffffffff86f, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfiplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x12, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xff11200000000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(r1, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x1) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) 18:10:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) ioctl$NBD_DO_IT(r0, 0xab03) r5 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r5, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2187.574400][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2187.580329][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2187.586196][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2187.586241][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:33 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffefffffff7f0000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x23, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hflplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2187.734479][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2187.740333][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2187.788730][ T26] kauditd_printk_skb: 94 callbacks suppressed [ 2187.788749][ T26] audit: type=1804 audit(1554833433.784:1843): pid=21952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3617/bus" dev="sda1" ino=18035 res=1 18:10:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='/dev/rtc0\x00'}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r5, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x7, 0xe62e, 0x7fffffff, 0x409, 0x9}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:33 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:33 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x63, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2187.929300][ T26] audit: type=1804 audit(1554833433.794:1844): pid=21954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5604/bus" dev="sda1" ino=18037 res=1 18:10:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000580)=""/234) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2188.019359][ T26] audit: type=1804 audit(1554833433.794:1845): pid=21954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5604/bus" dev="sda1" ino=18037 res=1 18:10:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfoplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x102, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2188.172171][ T26] audit: type=1804 audit(1554833433.814:1846): pid=21955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3617/bus" dev="sda1" ino=18035 res=1 18:10:34 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2188.287105][ T26] audit: type=1804 audit(1554833433.814:1847): pid=21952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3617/bus" dev="sda1" ino=18035 res=1 [ 2188.359146][ T26] audit: type=1804 audit(1554833434.064:1848): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3618/bus" dev="sda1" ino=17071 res=1 18:10:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfpplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:34 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKIOMIN(r5, 0x1278, &(0x7f00000004c0)) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) [ 2188.416351][ T26] audit: type=1804 audit(1554833434.064:1849): pid=21975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3618/bus" dev="sda1" ino=17071 res=1 18:10:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r4 = shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r4) r5 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r5, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x201, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:34 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffffff600000, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2188.564478][ T26] audit: type=1804 audit(1554833434.064:1850): pid=21974 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3618/bus" dev="sda1" ino=17071 res=1 18:10:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000000c0)={0xa0003, 0x0, [0x0, 0x0, 0xffffffffffffffbc, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000440)=""/4096) 18:10:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfuplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2188.643549][ T26] audit: type=1804 audit(1554833434.084:1851): pid=21972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5605/bus" dev="sda1" ino=18047 res=1 18:10:34 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r4 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r4, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2188.723621][ T26] audit: type=1804 audit(1554833434.094:1852): pid=21972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5605/bus" dev="sda1" ino=18047 res=1 18:10:34 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffffffffdef, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:34 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfxplus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000000c0)={0xfff, 0xfff, 0x0, 0xfffffffffffffff9, 0x7, 0xffffffffffff1457}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000440)=""/234) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) r6 = getuid() setresuid(r4, r5, r6) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$TIOCSBRK(r0, 0x5427) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) shmget$private(0x0, 0x3000, 0x400000055000000, &(0x7f0000ffa000/0x3000)=nil) r3 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r3, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:35 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x500, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs\nlus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:35 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r3, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x600, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs#lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r5 = getpgid(r4) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x8001, r3, 0x0, 0x0, 0x0, 0x50}, 0xb8fb, 0xffc, 0x0, 0x7ffd, 0x0, r5, 0x81}) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r7, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r8 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r8) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r9) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r9) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:35 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0xb39, 0x3}) r3 = open(&(0x7f0000000100)='./file0\x00', 0xa00, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa1003, 0x0, [0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$TIOCNOTTY(r3, 0x5422) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x1, 0x20000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:10:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000980)={r2, @in6={{0xa, 0x4e22, 0x1ff, @empty}}, 0x86, 0x0, 0x1007ff}, 0x98) r3 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r3, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x682, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs%lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:35 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x2000000000000281, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000011c0)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f00000012c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001300)={'ip_vti0\x00', r9}) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:35 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x700, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x2080, 0x0) write$uinput_user_dev(r0, &(0x7f0000000440)={'syz0\x00', {0x100000000, 0x20, 0x7, 0xe05d}, 0x28, [0x401, 0x9, 0x9, 0x5, 0x1500, 0x1f, 0x3, 0x0, 0x800, 0xa1f, 0xb87, 0x7, 0x7, 0xe8, 0x1, 0x6, 0x2, 0x2, 0xc58, 0x7, 0x7f, 0x6, 0x1, 0x81, 0x100000001, 0x0, 0x7, 0x6, 0x5, 0x5, 0x3f, 0xeefa, 0x7, 0x0, 0x6, 0x20, 0x8, 0x500a, 0x3, 0x0, 0x1a6d, 0x52, 0x0, 0x72a, 0x401, 0x7, 0x800, 0x100000001, 0x81, 0x3ff, 0xb, 0xfffffffffffff1ce, 0xe1e, 0x7fff, 0x5, 0x4, 0xe0, 0x1000, 0x2, 0x6, 0x1, 0x8e, 0x7, 0x10000000080006], [0x3, 0x81, 0x3, 0x0, 0x80, 0x7f, 0x1000, 0x8, 0x6, 0x1, 0x80000001, 0x0, 0x4, 0x6, 0x232, 0x8, 0x5, 0x100000001, 0x8000, 0x80, 0x5, 0xd4, 0x9, 0x140000000000, 0x1, 0x3, 0x80000000, 0x100000001, 0x0, 0x7fff, 0x9, 0x8, 0x2, 0x100, 0x3, 0x1, 0x7f, 0x0, 0xf17, 0x5, 0xfffffffffffffffe, 0x200, 0x6, 0x7ff, 0x5, 0x7fe0000, 0x0, 0xfff, 0x2, 0xfff, 0x4, 0x7, 0xff, 0x1, 0xfffffffffffffffe, 0xffffffffffff6006, 0x10000, 0x80, 0x500000000000, 0x40, 0x4, 0xffffffff00000000, 0x5, 0xfffffffffffffe6b], [0x20, 0x9, 0xac30, 0x3, 0x4, 0x9, 0x8, 0x94df, 0x2, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffff7, 0x7e, 0x6, 0x3, 0x101, 0x497a, 0xffff, 0x400, 0xbc75, 0x3, 0x8, 0x800, 0x9, 0x2, 0x4, 0x1, 0x3, 0x4, 0xffffffffffffff91, 0xa9, 0x7, 0x1ff, 0xd3ee, 0xa2, 0x9, 0x80000000, 0x3, 0x3f, 0x0, 0x1f, 0x9, 0x2, 0x3f, 0x4, 0x1, 0x1, 0xb, 0xffffffff00000001, 0x4, 0x2, 0x87, 0x7, 0x3, 0xffff, 0x50, 0x7, 0x5028, 0x100000001, 0x2f, 0x9, 0x4], [0x9, 0x6, 0x1, 0x0, 0x2, 0x6, 0x40, 0x1000, 0x5, 0x4b, 0x7, 0x100, 0x6, 0x81, 0x7, 0x81, 0x8, 0x3, 0x3, 0x4, 0x800, 0x0, 0x6, 0x2, 0x8001, 0x7f, 0x1000, 0x9, 0x4, 0x1, 0x8, 0x1, 0xffffffffffffffc1, 0xb53, 0x400, 0x4, 0x10000, 0x1, 0x4, 0x5, 0x1ff, 0x1ff, 0x6, 0x9, 0x1, 0x5, 0x2, 0x80000, 0x0, 0x7bd, 0xa42e, 0x80, 0x4, 0x6, 0x1, 0x40, 0x1000, 0x2161, 0x7, 0x60, 0xe23b, 0x56, 0x1, 0x3]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x40) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000001c0)=0x1) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="66bad104b800000000eff30f01c80f0866b86e008ee00f07c4c3b16db30060000002f36fb9ff0300000f320f015da7660f3823fb", 0x34}], 0x1, 0x21, &(0x7f0000000280)=[@cr0={0x0, 0x1}], 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @local}, 0x4, 0x0, 0x0, 0x0, 0x96, &(0x7f0000000300)='bridge_slave_1\x00', 0x100, 0x1000, 0x4}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x7) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) write$P9_RREMOVE(r4, &(0x7f0000000180)={0x7, 0x7b, 0x2}, 0x7) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000100)={0x2, 0x8}, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:35 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000900)={0x0, 0xfa1}, &(0x7f0000000940)=0x8) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs*lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:35 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f00000000c0)={0x8001007, 0x7, 0x1}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xffffffffffffff4d) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:10:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x900, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:36 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x910, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r2 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r3 = getpgid(r2) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r3, 0x81}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r5, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r6 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r6) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r7) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs+lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x113000, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x6, 0xd43, 0x2, 0x2, 0x0, 0x10001, 0x100000000, 0x0, 0x7, 0xf7d9, 0xf6e0, 0x5d0, 0x291cac26}, {0xd638, 0x6, 0xa3, 0x1, 0x3, 0x7f, 0x1000, 0x6c98, 0x34, 0x74, 0x3c13bec3, 0x7, 0x1c00000000000}, {0xe5e3, 0x0, 0x5, 0x1, 0x9, 0x3, 0x62ba2cfd, 0x800, 0xbd0, 0x80, 0x0, 0x80000001, 0x3}], 0x2}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:36 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc00, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs-lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:36 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x83) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000580)={0x9, 0x108, 0xfa00, {r1, 0x5e, "e77d6f", "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"}}, 0x110) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x7f}, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={r2, 0x81, "19726d2745e36f9efeff979d73795b7b895c2acbcc0d47313b4ae6bb08110105c94905d8f846ff79bd05566ebc41125d5f67c0601113022937039a6722a1add9eb5ccaeb4a052f3fb54fd96bfc7136be085e1eed0e99471324874ab3f70c629cd27fe1f30df438dfdc15ca79101e32c78656913a892a10d2804f8b24f715acf44b"}, &(0x7f0000000280)=0x89) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x1) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000440)={{0x3002, 0x12002, 0xb, 0x400, 0x7, 0x34e2f437, 0xed, 0x7fffffff, 0x8000, 0x100000001, 0xb2}, {0x2, 0xd004, 0x3, 0x200, 0xfe8, 0x4, 0x7, 0x43b, 0xff, 0x3ff, 0x8, 0x7}, {0x7000, 0x1000, 0xf, 0x3, 0x5, 0x1, 0xffffffffffffffff, 0x8, 0x3, 0x7, 0x6fc3, 0x1}, {0x17000, 0x17000, 0x9, 0xb66, 0x7fffffff, 0xb, 0x4, 0xae7, 0x5, 0x1c, 0x100000000, 0x3ac}, {0xd002, 0x100000, 0x10, 0x4000000000000000, 0xffffffffffffffc1, 0xfffffffffffffffa, 0x4b3a, 0xfffffffffffffff7, 0x4, 0xdf5d, 0x400, 0xffffffff}, {0xd000, 0xf000, 0xf, 0xedd, 0x6db, 0x8, 0x72b9, 0xd4a, 0x7fff, 0x4, 0x10001, 0xffffffffffffff84}, {0x0, 0x1, 0xc, 0x3f, 0x4, 0x20, 0x80, 0x0, 0x1, 0x40, 0x2}, {0x4000, 0x6000, 0x0, 0x4, 0x101, 0x1, 0x0, 0x0, 0x74, 0x2, 0x9, 0x87}, {0x0, 0x7000}, {0x3000}, 0x20, 0x0, 0x100000, 0x100020, 0x3, 0x400, 0x12000, [0x9000000000000000, 0x36ee, 0xfffffffffffffffe, 0xea]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r5, 0xae80, 0x0) 18:10:36 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x103005, 0x0, 0x2e0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000580)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e22, @loopback}, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffc, &(0x7f0000000140)='veth1_to_bridge\x00', 0x0, 0x3, 0x61bdd9a9}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd00, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x40000) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) mount(&(0x7f0000000140)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x1, &(0x7f0000000200)='/dev/kvm\x00') 18:10:36 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs.lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1009, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:36 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x8}, &(0x7f0000000140)=0x8) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0xb}, 0x100000000000}}, 0x1, 0x3f}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000000)={0x2, [0x0, 0x0]}) 18:10:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfs0lus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:37 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(r1, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) ioctl$FIBMAP(r1, 0x1, &(0x7f00000004c0)=0x6) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000140)={0x1, 0x0, {0x3, 0x3, 0x2, 0x5369eb4a}}) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0c0000163abcb433f31e23c56117ec9bfbfe2f8dd5637274a6bbc6903f30a2e9a681956c2908168d0570b2e22155f780d0f0f1fa04003c894c1a639af2ba6c00000000000091b5864ca0391cd64a110c7b3041e6dcf1be8a0200000000000000d104acd13eec0ab8ee262f82343d21de9affffffffdf34e0fcbf1d6401d139f176540fe6de4c0000183fd1d538c521e74fae81e35b04511ec44d6c43f5d44caf2b2b8923cdb34d8786bf55eefc18a939238ab6224f09ee7366c5cfc6fc990aa329c2f819f967a9ebe6fbe953190cad55b461926f042a3bb4631b4faa410c50a9cf2dc94e7cbdff4d645c77b51341d234d6de30000000003d00000000000000ae367b4cfbebb124a9ef0356d18b60d0ffb4e691fdc2ba346f5d4ed41e20a38c32818df0ca59a382af35e11ad0369ba1dfaf7363dc06cc2b035bc9ff58923133a155957db8a7f013844362343d56be16bf04987ef4104ab6f6b3e5f036deed212534cde819b108daf392a098334761c3812129a97be041206269ad233e6f5135bd6e57a03d90c3bd91f6a58277bf22741bdad225f8e932c1d70f720a19c01538b4c9193bd515c46a60eb39d21a145f9ddc9a3a52597184cd96bb95737d8a56ea0edc02c4dcbfdab2e20c15ddcc8df0eae2a0b0c92bfcf55901ffdbc18e4c00000078b04170097d26e8f07404d91ce27991a900"/510], 0x1) 18:10:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1200, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x499) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) fsetxattr$security_capability(r1, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0xbe, 0x9}, {0x2, 0x3}], r3}, 0x18, 0x3) 18:10:37 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsXlus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f00, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000240)={0x76ae, 0x3, 0x9, 0xffffffffffffffff, 0x8, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x8}, 0xf) r4 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xe, 0x800501) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x4, 0x6f, 0x447, 0x8, 0x20, 0x3, 0xd7, {0x0, @in={{0x2, 0x4e21, @local}}, 0xd3a, 0x4, 0x0, 0x2, 0xe7b}}, &(0x7f0000000180)=0xb0) readlinkat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000440)=""/225, 0xe1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000001c0)={r5, 0xeb46}, 0x8) alarm(0x3378095b) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:10:37 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 5: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xa42478c4, 0x102005, 0x0, 0xffffff45) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0x2, 0x3000, 0xa07, &(0x7f0000ffc000/0x3000)=nil) fstat(0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000007c0)) r3 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000540)) r4 = getpgid(r3) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{}, 0xb8fb, 0xffc, 0x0, 0x8000, 0x0, r4, 0x81}) r5 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) flistxattr(r1, &(0x7f0000000140)=""/27, 0x1b) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="71b3a342361e4732fa1c1dc39fddd4509e48823e63e1747907af8bc4c3e9cb97d2826926507d2556495eac25", 0x2c, 0x4000001, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[0x6c], 0x2, 0x400, 0x2}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfff, 0x4, 0x0, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000440)={r6, 0x8, &(0x7f0000000200)=[0x6, 0x1e, 0x4, 0x81, 0x6, 0x2, 0xffffffff, 0xfffffffffffffc01], &(0x7f0000000240)=[0x1], 0x4, 0x4, 0x7fffffff, &(0x7f0000000280)=[0x1ff, 0x4, 0x4, 0x6], &(0x7f00000002c0)=[0x40, 0x0, 0x400, 0x9]}) r7 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r8 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, r7) request_key(&(0x7f0000000980)='keyring\x00', 0x0, &(0x7f0000000bc0)='vboxnet1em1vboxnet1\'\'\x00', 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000d00)='keyring\x00', &(0x7f0000000940)={'syz', 0x0}, 0x0, 0x0, r8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000004c0)=0x7, 0x4) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, r8) io_setup(0xa7e7, &(0x7f0000000480)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') write$UHID_INPUT2(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"/510], 0x1) 18:10:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsclus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:37 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2191.734399][ C0] net_ratelimit: 18 callbacks suppressed [ 2191.734405][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.745925][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.751715][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.757492][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:37 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0xa0003, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) 18:10:37 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2300, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2191.894961][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.901119][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2191.907566][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2191.913535][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:37 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsdlus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:38 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3f00, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsilus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:38 executing program 3: r0 = syz_open_dev$video(0x0, 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:38 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x12, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 3: r0 = syz_open_dev$video(0x0, 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 0: r0 = perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 18:10:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsllus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:38 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x23, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 3: r0 = syz_open_dev$video(0x0, 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0004060b0bb20550829b380000001607a90f3d2ed90920515e827507000000162d0000518cdf6d1e4c33bb98394c9f72b500004f3636219433040089cb003b2c040000710e13"], 0x46) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) read(r0, &(0x7f00000005c0)=""/231, 0x1da) r1 = syz_open_pts(r0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 18:10:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x60ff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsolus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:38 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x61, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:38 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001240)="2e00000010008103e45ae087185082cf0324b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:38 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6300, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2192.834006][ T26] kauditd_printk_skb: 113 callbacks suppressed [ 2192.834018][ T26] audit: type=1804 audit(1554833438.824:1966): pid=22363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3638/bus" dev="sda1" ino=16982 res=1 [ 2192.928185][ T26] audit: type=1804 audit(1554833438.864:1967): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3638/bus" dev="sda1" ino=16982 res=1 [ 2192.934424][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.958290][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2192.983439][ T26] audit: type=1804 audit(1554833438.864:1968): pid=22363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3638/bus" dev="sda1" ino=16982 res=1 18:10:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pause() r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x80000008, 0x0) tkill(r1, 0x800000000000002f) 18:10:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsslus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:39 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7400, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 2193.151365][ T26] audit: type=1804 audit(1554833439.144:1969): pid=22375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5626/bus" dev="sda1" ino=17122 res=1 18:10:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2193.190433][ T26] audit: type=1804 audit(1554833439.144:1970): pid=22375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5626/bus" dev="sda1" ino=17122 res=1 18:10:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 2193.252750][ T26] audit: type=1804 audit(1554833439.144:1971): pid=22375 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5626/bus" dev="sda1" ino=17122 res=1 18:10:39 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsulus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8206, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2193.377016][ T26] audit: type=1804 audit(1554833439.174:1972): pid=22379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3639/bus" dev="sda1" ino=17175 res=1 [ 2193.434673][ T26] audit: type=1804 audit(1554833439.214:1973): pid=22388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3639/bus" dev="sda1" ino=17175 res=1 [ 2193.480352][ T26] audit: type=1804 audit(1554833439.214:1974): pid=22388 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3639/bus" dev="sda1" ino=17175 res=1 [ 2193.519788][ T26] audit: type=1804 audit(1554833439.394:1975): pid=22404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5627/bus" dev="sda1" ino=17119 res=1 18:10:39 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:39 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:39 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x102, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:39 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9400, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsxlus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffd, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp\nus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:40 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x201, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdef, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp#us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:40 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff01, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp%us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:40 executing program 5: read(0xffffffffffffffff, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 18:10:40 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x500, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:40 executing program 5: read(0xffffffffffffffff, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 18:10:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0f, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x582, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 5: read(0xffffffffffffffff, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 18:10:40 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp*us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:40 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:40 executing program 5: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x100000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x600, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:40 executing program 5: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp+us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x200000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x700, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp-us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x900, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2011ff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp.us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x307100, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x910, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp/us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x400000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc00, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsp0us\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 18:10:41 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x50b000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd00, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:41 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 18:10:41 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspLus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1009, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 18:10:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x70a000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspuus\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 18:10:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:42 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1200, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x713000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl\ns\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:42 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f00, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x740000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, r0, 0x0) 18:10:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl#s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, r0, 0x0) 18:10:42 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x800000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, r0, 0x0) 18:10:42 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl%s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:42 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=0x0}}) 18:10:42 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2300, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x940000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, r0, 0x0) 18:10:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 18:10:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xa07000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) [ 2197.094392][ C0] net_ratelimit: 22 callbacks suppressed [ 2197.094399][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2197.106019][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:43 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3f00, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl*s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2197.174396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2197.180216][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:43 executing program 0: r0 = syz_open_dev$video(0x0, 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 5: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read(r0, &(0x7f0000000200)=""/197, 0xc5) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 18:10:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xb05000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl+s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:43 executing program 0: r0 = syz_open_dev$video(0x0, 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 0: r0 = syz_open_dev$video(0x0, 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl-s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x60ff, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1020000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl.s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:43 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6100, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:43 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2197.899032][ T26] kauditd_printk_skb: 122 callbacks suppressed [ 2197.899044][ T26] audit: type=1804 audit(1554833443.894:2098): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5647/bus" dev="sda1" ino=17585 res=1 18:10:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspl0s\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2197.974389][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2197.980255][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2197.986091][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2197.991830][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:44 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7400, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2198.035009][ T26] audit: type=1804 audit(1554833443.914:2099): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5647/bus" dev="sda1" ino=17585 res=1 18:10:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 3: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2198.134434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2198.140401][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplXs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:44 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8205, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2198.209972][ T26] audit: type=1804 audit(1554833443.914:2100): pid=22819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5647/bus" dev="sda1" ino=17585 res=1 18:10:44 executing program 3: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) [ 2198.299535][ T26] audit: type=1804 audit(1554833443.994:2101): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3661/bus" dev="sda1" ino=17076 res=1 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 3: ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2198.385961][ T26] audit: type=1804 audit(1554833444.004:2102): pid=22829 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3661/bus" dev="sda1" ino=17076 res=1 18:10:44 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9400, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplcs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) 18:10:44 executing program 3: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2198.517806][ T26] audit: type=1804 audit(1554833444.004:2103): pid=22827 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3661/bus" dev="sda1" ino=17076 res=1 18:10:44 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe0ff, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 3: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x5000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) [ 2198.620545][ T26] audit: type=1804 audit(1554833444.104:2104): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5648/bus" dev="sda1" ino=17118 res=1 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 3: r0 = syz_open_dev$video(0x0, 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2198.722525][ T26] audit: type=1804 audit(1554833444.124:2105): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5648/bus" dev="sda1" ino=17118 res=1 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplds\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 2198.804412][ T26] audit: type=1804 audit(1554833444.124:2106): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5648/bus" dev="sda1" ino=17118 res=1 18:10:44 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffd, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:44 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/82, 0x52) 18:10:44 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:44 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) [ 2198.931322][ T26] audit: type=1804 audit(1554833444.274:2107): pid=22847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3662/bus" dev="sda1" ino=16964 res=1 18:10:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplis\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x6820000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0ff, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x7000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplls\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:45 executing program 3: syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdef, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff01, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 3: syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:45 executing program 3: syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0f, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplps\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:45 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:45 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:45 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xffe0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x9100000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplss\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfff0, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xc000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, 0x0) 18:10:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplvs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x100000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xd000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplxs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x200000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x12000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu\n\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x2011ff, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu#\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x307100, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:46 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x23000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu%\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:46 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:46 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x400000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3f000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu*\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:47 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x50b000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x40000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu+\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], 0x0}) 18:10:47 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x70a000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=0x0}}) 18:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x63000000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu-\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:47 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x713000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=0x0}}) 18:10:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xe4ffffff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=0x0}}) 18:10:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x740000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffdffff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:47 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x800000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:47 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf4ffffff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplu0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x940000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2202.134388][ C0] net_ratelimit: 18 callbacks suppressed [ 2202.134395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2202.146480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2202.152305][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2202.158117][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:10:48 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspluX\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf5ffffff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 5: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) [ 2202.294466][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2202.300364][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2202.306208][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2202.311940][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:10:48 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xa07000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfbffffff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfspluc\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 5: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xb05000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplud\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 5: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xfeffffff, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplui\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 18:10:48 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff010000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) 18:10:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:48 executing program 3: ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) 18:10:49 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r0, &(0x7f0000000540)=""/82, 0x52) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x0, 0x0, [], &(0x7f0000000000)={0xf0f046, 0x0, [], @p_u8=0x0}}) 18:10:49 executing program 1: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x1020000, 0x0, 0x0, r0, &(0x7f0000000000), 0x201200}]) [ 2202.942017][ T26] kauditd_printk_skb: 139 callbacks suppressed [ 2202.942031][ T26] audit: type=1804 audit(1554833448.934:2247): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3685/bus" dev="sda1" ino=17826 res=1 [ 2203.024386][ T26] audit: type=1804 audit(1554833448.984:2248): pid=23291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3685/bus" dev="sda1" ino=17826 res=1 [ 2203.124432][ T26] audit: type=1804 audit(1554833448.984:2249): pid=23287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3685/bus" dev="sda1" ino=17826 res=1 18:10:49 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x2200, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x8200, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x0) read(r1, &(0x7f0000000540)=""/82, 0x52) 18:10:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='{'], 0x1) dup3(r2, r1, 0x0) fcntl$setstatus(r2, 0x4, 0x43fd) io_setup(0x9, &(0x7f0000000100)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xff0f0000, 0x0, 0x0, r1, &(0x7f0000000000), 0x201200}]) [ 2203.174450][ T26] audit: type=1804 audit(1554833449.074:2250): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5673/bus" dev="sda1" ino=17953 res=1 [ 2203.202594][T23296] ================================================================== [ 2203.211429][T23296] BUG: KASAN: use-after-free in __vb2_perform_fileio+0x1065/0x1140 [ 2203.219318][T23296] Read of size 4 at addr ffff8880a7ac309c by task syz-executor.3/23296 [ 2203.224351][ T26] audit: type=1804 audit(1554833449.074:2251): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5673/bus" dev="sda1" ino=17953 res=1 [ 2203.227534][T23296] [ 2203.253980][T23296] CPU: 1 PID: 23296 Comm: syz-executor.3 Not tainted 5.1.0-rc4-next-20190409 #21 [ 2203.263071][T23296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2203.273115][T23296] Call Trace: [ 2203.276406][T23296] dump_stack+0x172/0x1f0 [ 2203.280733][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.284347][ T26] audit: type=1804 audit(1554833449.074:2252): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir680931971/syzkaller.cqdnbY/5673/bus" dev="sda1" ino=17953 res=1 [ 2203.286271][T23296] print_address_description.cold+0x7c/0x20d [ 2203.316868][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.322411][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.327948][T23296] kasan_report.cold+0x1b/0x40 [ 2203.332712][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.338259][T23296] __asan_report_load4_noabort+0x14/0x20 [ 2203.343892][T23296] __vb2_perform_fileio+0x1065/0x1140 [ 2203.349262][T23296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2203.354727][T23296] ? vb2_thread_start+0x370/0x370 [ 2203.359743][T23296] ? retint_kernel+0x2d/0x2d [ 2203.364357][T23296] vb2_read+0x3b/0x50 [ 2203.368343][T23296] vb2_fop_read+0x212/0x410 [ 2203.372850][T23296] ? vb2_fop_write+0x410/0x410 [ 2203.377656][T23296] v4l2_read+0x1ce/0x230 [ 2203.381901][T23296] __vfs_read+0x8d/0x110 [ 2203.386227][T23296] ? v4l2_write+0x230/0x230 [ 2203.390729][T23296] vfs_read+0x194/0x3e0 [ 2203.394883][T23296] ksys_read+0x14f/0x2d0 [ 2203.399116][T23296] ? kernel_write+0x120/0x120 [ 2203.403783][T23296] ? do_syscall_64+0x26/0x610 [ 2203.408456][T23296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2203.414513][T23296] ? do_syscall_64+0x26/0x610 [ 2203.419192][T23296] __x64_sys_read+0x73/0xb0 [ 2203.423689][T23296] do_syscall_64+0x103/0x610 [ 2203.428275][T23296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2203.434155][T23296] RIP: 0033:0x4582b9 [ 2203.438048][T23296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2203.457641][T23296] RSP: 002b:00007fac4db16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2203.466043][T23296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582b9 [ 2203.474002][T23296] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000007 [ 2203.481967][T23296] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2203.489931][T23296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac4db176d4 [ 2203.497893][T23296] R13: 00000000004c3db0 R14: 00000000004d8ca8 R15: 00000000ffffffff [ 2203.505870][T23296] [ 2203.508195][T23296] Allocated by task 23296: [ 2203.512602][T23296] save_stack+0x45/0xd0 [ 2203.516749][T23296] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2203.522378][T23296] kasan_kmalloc+0x9/0x10 [ 2203.526715][T23296] kmem_cache_alloc_trace+0x151/0x760 [ 2203.532075][T23296] __vb2_init_fileio+0x1cb/0xbe0 [ 2203.537003][T23296] __vb2_perform_fileio+0xc01/0x1140 [ 2203.542273][T23296] vb2_read+0x3b/0x50 [ 2203.546244][T23296] vb2_fop_read+0x212/0x410 [ 2203.550740][T23296] v4l2_read+0x1ce/0x230 [ 2203.554973][T23296] __vfs_read+0x8d/0x110 [ 2203.559209][T23296] vfs_read+0x194/0x3e0 [ 2203.563362][T23296] ksys_read+0x14f/0x2d0 [ 2203.567682][T23296] __x64_sys_read+0x73/0xb0 [ 2203.572182][T23296] do_syscall_64+0x103/0x610 [ 2203.576793][T23296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2203.582663][T23296] [ 2203.584981][T23296] Freed by task 23298: [ 2203.589041][T23296] save_stack+0x45/0xd0 [ 2203.593190][T23296] __kasan_slab_free+0x102/0x150 [ 2203.598114][T23296] kasan_slab_free+0xe/0x10 [ 2203.602693][T23296] kfree+0xcf/0x230 [ 2203.606494][T23296] __vb2_cleanup_fileio+0x100/0x170 [ 2203.611793][T23296] vb2_core_queue_release+0x20/0x80 [ 2203.616983][T23296] _vb2_fop_release+0x1cf/0x2a0 [ 2203.621845][T23296] vb2_fop_release+0x75/0xc0 [ 2203.626462][T23296] vivid_fop_release+0x18e/0x430 [ 2203.631390][T23296] v4l2_release+0x224/0x3a0 [ 2203.635880][T23296] __fput+0x2e5/0x8d0 [ 2203.639850][T23296] ____fput+0x16/0x20 [ 2203.643822][T23296] task_work_run+0x14a/0x1c0 [ 2203.648405][T23296] exit_to_usermode_loop+0x273/0x2c0 [ 2203.653677][T23296] do_syscall_64+0x52d/0x610 [ 2203.658278][T23296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2203.664152][T23296] [ 2203.666480][T23296] The buggy address belongs to the object at ffff8880a7ac2d80 [ 2203.666480][T23296] which belongs to the cache kmalloc-1k of size 1024 [ 2203.680521][T23296] The buggy address is located 796 bytes inside of [ 2203.680521][T23296] 1024-byte region [ffff8880a7ac2d80, ffff8880a7ac3180) [ 2203.693860][T23296] The buggy address belongs to the page: [ 2203.699486][T23296] page:ffffea00029eb080 count:1 mapcount:0 mapping:ffff88812c3f0ac0 index:0x0 compound_mapcount: 0 [ 2203.710148][T23296] flags: 0x1fffc0000010200(slab|head) [ 2203.715524][T23296] raw: 01fffc0000010200 ffffea0002332808 ffffea000241b288 ffff88812c3f0ac0 [ 2203.724100][T23296] raw: 0000000000000000 ffff8880a7ac2000 0000000100000007 0000000000000000 [ 2203.732665][T23296] page dumped because: kasan: bad access detected [ 2203.739057][T23296] [ 2203.741372][T23296] Memory state around the buggy address: [ 2203.746991][T23296] ffff8880a7ac2f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2203.755046][T23296] ffff8880a7ac3000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2203.763182][T23296] >ffff8880a7ac3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2203.771225][T23296] ^ [ 2203.776067][T23296] ffff8880a7ac3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2203.784118][T23296] ffff8880a7ac3180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2203.792169][T23296] ================================================================== [ 2203.800217][T23296] Disabling lock debugging due to kernel taint [ 2203.807180][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2203.813351][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2203.847543][ T26] audit: type=1804 audit(1554833449.844:2253): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3686/bus" dev="sda1" ino=17826 res=1 [ 2203.856792][T23296] Kernel panic - not syncing: panic_on_warn set ... [ 2203.876500][ T3878] kobject: 'loop4' (00000000cea22efd): kobject_uevent_env [ 2203.878788][T23296] CPU: 1 PID: 23296 Comm: syz-executor.3 Tainted: G B 5.1.0-rc4-next-20190409 #21 [ 2203.878795][T23296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2203.878807][T23296] Call Trace: [ 2203.894855][ T3878] kobject: 'loop4' (00000000cea22efd): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2203.896456][T23296] dump_stack+0x172/0x1f0 [ 2203.896478][T23296] panic+0x2cb/0x72b [ 2203.911296][ T26] audit: type=1804 audit(1554833449.844:2254): pid=23316 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir051935016/syzkaller.setNwg/3686/bus" dev="sda1" ino=17826 res=1 [ 2203.919910][T23296] ? __warn_printk+0xf3/0xf3 [ 2203.919926][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.919947][T23296] ? preempt_schedule+0x4b/0x60 [ 2203.925833][ T3878] kobject: 'loop1' (00000000aae9be7f): kobject_uevent_env [ 2203.928127][T23296] ? ___preempt_schedule+0x16/0x18 [ 2203.928152][T23296] ? trace_hardirqs_on+0x5e/0x230 [ 2203.984760][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.990300][T23296] end_report+0x47/0x4f [ 2203.994452][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2203.999973][T23296] kasan_report.cold+0xe/0x40 [ 2204.004627][T23296] ? __vb2_perform_fileio+0x1065/0x1140 [ 2204.010154][T23296] __asan_report_load4_noabort+0x14/0x20 [ 2204.015763][T23296] __vb2_perform_fileio+0x1065/0x1140 [ 2204.021112][T23296] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2204.026552][T23296] ? vb2_thread_start+0x370/0x370 [ 2204.031556][T23296] ? retint_kernel+0x2d/0x2d [ 2204.036124][T23296] vb2_read+0x3b/0x50 [ 2204.040087][T23296] vb2_fop_read+0x212/0x410 [ 2204.044572][T23296] ? vb2_fop_write+0x410/0x410 [ 2204.049317][T23296] v4l2_read+0x1ce/0x230 [ 2204.053539][T23296] __vfs_read+0x8d/0x110 [ 2204.057844][T23296] ? v4l2_write+0x230/0x230 [ 2204.062327][T23296] vfs_read+0x194/0x3e0 [ 2204.066462][T23296] ksys_read+0x14f/0x2d0 [ 2204.070684][T23296] ? kernel_write+0x120/0x120 [ 2204.075335][T23296] ? do_syscall_64+0x26/0x610 [ 2204.079990][T23296] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2204.086029][T23296] ? do_syscall_64+0x26/0x610 [ 2204.090681][T23296] __x64_sys_read+0x73/0xb0 [ 2204.095164][T23296] do_syscall_64+0x103/0x610 [ 2204.099732][T23296] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2204.105599][T23296] RIP: 0033:0x4582b9 [ 2204.109471][T23296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2204.129561][T23296] RSP: 002b:00007fac4db16c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2204.137953][T23296] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004582b9 [ 2204.145914][T23296] RDX: 0000000000000052 RSI: 0000000020000540 RDI: 0000000000000007 [ 2204.153860][T23296] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2204.161809][T23296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fac4db176d4 [ 2204.169767][T23296] R13: 00000000004c3db0 R14: 00000000004d8ca8 R15: 00000000ffffffff [ 2204.178677][T23296] Kernel Offset: disabled [ 2204.182993][T23296] Rebooting in 86400 seconds..