d60e9f0afbbdab88b1f9ac2e52bd570654752b3465913c350fbcb3c3ccc3dace2b75513d84618b737f675c1bd47518bcb49fce8f5c1e9070ddbf121090df2df9265e5d50c0680fdd2cdbb16006a6699011b8e05782d876a6949ab52c8471e6bed28ce1cae5c2f22a0c765b9b8a24fe2a824dc03cb17bdc6e7326470bb91d899e26782ef9f633e988daf2e4c4d264a1e51f4959ff23bde5b8ece2af02fa3cd073a1677a378dc5f913099a3ee99e9700dd07e850734c9ef462bfde15b8ac53db0295a353317644b7d36fb47713e7a37e5e304e0ba2e3d480fc5e65d21cc72837523a0f2bd7a566858964703d5831fb0a7a5a441355cd2f42358740a0a20365e8d11b8b163137a4ef2beae135a1ab2bf5136157d178613a8d26e449f53194004c31d4ce17a3d1e98b22ad2ef1632ef41fa6bdffbcdf329d14ffee584732456a54bc9fa379d9794e2f8f2d2bb54e987801863b1423737155cca8397ccbd02ae8be92c97766ef45c0ba0df24d7596cd734e078ccf11f4add5fcbf62ac3a02d022a3052c16aa5c97f439e85f4309f8497469e5ff86dd826e218e9821809db817b63c9212654d4659d93e309e77543d0ade447bd69164f7dbd9926acb7b8d75af2695f8aefea382e50611129c3364cc44e6fec8a2bf57055847a71bdf46a0d652cf1ac6d981ef31824ca4b436962a5f9b2fcbc532dcc8c7100e3e042ae99087e46e6676c3c749bdbe6b06fffa8f49c927db49c77287b2576f78c611d9964a8c2c753d29b8693a303fea19a83e12fb15d042bcdc258039bfccca02c8c053c42ba069e2b5ad7852faf5afce32e6bdf7be596ea30372984a1d28ae27122c60dc94cc95b9d795da1f1f301cdd7da2e6ab1d8e82ef1307f5abcc8181f5c9c9a5104159a742797cdd0d955538487c26bec80e78e8df57a5faa5067a286517a8725499d8766e8f435cd69eeb7dfeba73d2e0a35f81474d4af2bcd01fd07fd2cb53a3d9aef09d1708b75c49b9ce039ee02617189aae5117466f3b55fec2758538e33f1deace852440d0b94e3841cf810dc30a733af3b53910338012ef68059197e598259c6ba36d2dad13558d0a22479f68d32e1ee44b6e5f143a965cb3cec5de0f47f51c03dede6ac6b8299b274c36c550a9312fabd36d77c30c1d04c0e6780d102ec33e0894f7eb5157de2652546639feabf527abe43cf9c0ce202a38e556738760fa244240bf8e89ca81c117d911f4620187c0c2a91a2e67538059bd43c1c69818401ddab3c3e11f987cb60da4a3f8bb093e36794eff7939bc40326a3837d46df00e79cca57efb1ed41e55a9b792425dc0ed12d9fda9a467d048f3b72637373ea30b8c1d1410c4b1e20190dadd711f40ea714cfcf729e719ab0a1fb58d654b1b29e83b3db37d2df1cbd34a38abd5c941dc889254b484ab1d53276fc6d9f001aa7c22297686c79e5e7adaec2d99a308ec22a203e1e779ff92a4ee2e1f74edc32cde8255b3ddfa6c0297209d6ec56af942dc8cdc1acb819ec2cb107143422b7c6526fc014971adee66f58e6aa9751c0e376fcaf209cec7d3b41868ed64567e50c9858f638d21a804437e8d8b3038dfe5bc5088d66d09b24641e03afa8728b3a83eee2efdfdeb61846898936b736681d3c2ade882d9b7d9431adf6547b8d664f6bce7aaa8182efb78cb34b2ef019c1ff4cc2c497d1cd01717463bfccd7dbce4f21ef28d82ccb09283c4860165d135c91de25b318d7b301b06707d648385a4a717308244198e767406f5ae00436831b424132aa1d01a955977d2f845fbaf4f53471ddbb4fe00e3f7e182bb3fa56e814cc3e24edba371c4d1ba5b2e99aa6b0064f7acc5d193a0f9ef305bdc5dbd32be5414da457831a6ca246aa85795e312f3fe4e3860c65a613f0b525710035240c450ef87d861f0b68381e06f79e4f7703a0c02a75d0c359577fb74e709a5720facf6e623f8a474affb80bc3ed9da405af616ef2db16c8bb54c7479ff6b7c6147bded03526f1ed9d06a622590869c5352ec73920286ecf117d0a22a9bf905b79b1f0f62a1b20e558c5528bc46eb5eead5570fa654c7518bbddb5ea0e1c7fc14a78eb046f4a6b24f2ce7dffad745e0bfa992fc613522780c413e123b9fed337127289c62216eb8bd678defaec335e06b7b9f06221522a36e769991774bf14defb24291b1080bee8dfca9885fb1cbaff7cba5b88b67eedaf9b78289829c5dbf7388dd20a5e11e11cd8ac9e008dc66fb124a9809703dc280b6e424f815357ba1ce8ee7bc402ac1f21a0ee6ea29a57f80ca2c31c6fb6ba902d7767e21df5a496512901342f8254a60ed1c0f768e18d638c5e7fd6f22c5a64e5751aa6783535f764806c4ef59cbb98e875636ea364410dcbfa3733a532a4f71684a7d59c91b1ff146c86efaab02cc79f5bfdea4564204e76a0e196fd9e831169b7734596b3ad3778f22b53dccf7dc9ebe957022a0801bc2843d5a37ee3522a3b03a8e6b47926ab054252b66bf0f1ea552c31a822d1a0435ec478c1f594acb17d1ec6305bae27525e1079b94d34e5e9fbf3e8db0d7b348bfcaab9635b0a3958eba3e8f2d4de6b330802c95c39ae6987c552ad388fa0001e045172ff5502726379f44ffcfd6b7dca96344febc1d9adf939a4c3e9ccb0d7b77511de22eda1bdfc0f2fe06c76de4e424ee4b79f5a949474d739b48387c0df4f4d112f40befbdf6dd00e60c3fd26a75936a833c114a683dd7f422751410dae942893c041328b99114f0c76188414748631d83f462c12b8b3f28ebcb5ec943ff166180d471a2080e020f6dbb538b60e877f617040092d28ca5c597f7f198451514d18539a46b7d6368530b09e9220bfc7c09422b5e895e53fb731b9db4fcce2fbd024099bd6945fb0fbc2365441e2620bcd10b57eec00b5820a426141f4ca64160fa391741e99aa0ea5c9b9d2d919fb05d66595cdd2a5656e5baa21d890492c672da1329f7f9bd5fa4bd943c0e27e73472086db49216bfe0e49e2d33ad920b984724034b21d13f3d4e0933ddb5e8bc5b6a2993af9336e50a6dbc9c8765793894dbf09403045c97244104f525cad5d9cc677cae329aed0dcec467cac7141b386688de028cac4f0ce8f3bc191b8b4a8b7cb7d170f8443ee9acab23d6b18a2ec0c8128f4e49f0ce6a2d63b6a60caab913a811a675c3cc96ec69fb1f1ee3496b6298ad5ef48627c53820e4f770ff7a45f7bc5d1a9675926f240cebbe8af53f2e32e8bc207d7c7e89d8d0bb46f17566cf1bbf7585713a45c036bff1ce9bc7bc87230e8acbeb7b30d6f221f498d8807f5a1f1ed183af77e339c6395e80cdbe3daead62349ac1904b124dfa061f480e651b6e431a970579e8071862b168d81769282c1d20ba948d0ddce1d6b1d00232ee9008307a4fbf971e7030defd8c97e4b569317c2516c0c95f37cc74c5ac4bc9d44b2c69140885589eeaf5137a6bd87d1fcad6ba117faca382c213456e08679a9dccf8e1cacddcbfa9462ea0823ffab6e699c503ced5b39ed3601da99faa299e1f6f13e5b75e0944f33915b7a1fffede89b8ad0779239b80b28a8dc96ae22b5eb6b3e1f503309b05d18f031015066c840f552f3a459a1faa9d4c0139fcb2201337877696053f14df3daa1518f8a611503ea9ce3220f55ae2dd4ece38ce5f89ee531c709a05a1d0eb0d026297e78b8fca18c56f34f056bc54e2619c2e8c6989b7e049ab296c76c5201aaa66496e22bcfc0a334b2b465a30c3e32e02271fd4ce1c359048e8ee2c11824d1935027ad7e5227f94d2682bb3670180b9101b3b982ac47554198ee37f739df3b68db12e67c9d4cd67129e4328317c515c499ad10ea8e7a506ff48c37f333eba41a2f7e39b3c142da8644006cd18fe91e9837caab61db09ea3f4302c618446d5b86b8b653b318f175704eed54b610da18a5e56bc9624c9b3638515842856356dc058513034a9407aee196ad306bd4755de78f7cc2e22f7ce9bd2e70bb59264e886f9ac5cd364ab42f84f8925548904ada8d879cf9eb3bc095152e0d895b82779c9b7ca58ed42d35ab5b51df9f928f8b14623468e578b0a0f1081cd4f86cb4fc3076e88ed175fc9e513316749e9f344aaf37a218f5f9723cc26f2c0b1b895758419edf4f6ba9c8aa4589fd3b4d9a74259403b2a9a5358647c9eb2a3ecdb2b4b3a46f26e9b0857687322b64d28a410beb040b094d177752ff03bab2d3549a2198369befb02a9251210d1231f03570d411b9b1854c8e6ce2aa535d9de90c665376ec1c78009419ad219cf1f1a47ed2ae47ea22c3037b00505db43c018f75ba400f8969ed8c295144393891e979430ccd9f78005c75a97ce460c72cfe437b0c5678d837efa36c6e40890939ea0bcbe5466c4062f98578571831a55dd06e72f987d3ec3607978cd7d3d74b659cc0473156bb1069221ad834bf8873cabb84e94fffa88b456384dfbdc9a603f4ac767", "9cc4406a3a0d2b96505ca937a75ec831eebf0c72c8a0afd5cd9a5813b60c9a72c35252bc5380a8efa714f3a47584c4b545bcd723b62a1e702aecd3a2faa82f0dadd7757fd825bf38b11e4c23c4eec52a6816891eb78d7480623b67f188660d85488691ddd0d0c65ba359ba124b14da5a5a519d932cad084dbf779e0592f8c7e6f17edd021933051027325d0299ba8b1e9a0c535b980185d26deee2044028d7f55c423170e66b7cb94a92d2e117c76f861a9a78e96396acfbef70b3d6b150ae5750110028b1547683ac85c4cb0240052a1e2f9195d4881588db1e44b252493c3a079c191d109c9630a0facbdef55aa9822c0a58c35656c3c5e7a1a67ebe0bdb54d800ab226770f3aa353326557dfad219ef95719c3d9eb86d8ea0e6cf8b316375dac739db117c5db927207b31a96f33143c7b1daaa9965403a45d32ed9d9e7c76fb6803667b41342e80acb92229c6f8f3151b5f629738eea54be386950cb8326f1ee238187e4eb140a755fc19a91edc919f367b88986c5b6bb4422c6eebf356349a967c37e6841285ec711b8ae0bd43022de4ed780b719b7933de8086a7a9793b5e4aa024d30e30760e181b184ee2425b5f1b3d33190c7d8c8b6eb2d53924098b2233ee41d031c15131c94e449c16871c1818920a694c268f52cb9f0bb82d2584cc4b60c946d98ef0cc9c373b0df64a34d0a675dcb225e02ababe91600ec133a00332d1b35a259dcf38b785de2f847269d857fbe2e94b78833ed3d4e214d160971f1f2dc822af22d3c36ca7cdfe24aea1393a40b1a88eb9d26f81ec7fa5bedbe51bce9dca2ef58fdb3f4f1580819c98042b52a0516257db956dcb7321905a2f94b756869a6fc2ce3f01f51a2df4d4ea212f2a5501b92e247fdbff68b3254491a0e4f1f2cf08415b037fa7e6a2f2b0a89bf072b9326104f43c71bf1415330fcbf0daa264c69dcba94d977f0145746cd4e252e86958b2478e93b27609a37f5c688ae2f0f90e04e06721e54580feea137f63dcc0c61aeed97f80c9d0cee03c63fd799bf61bac3e6f5c4ec2b0ce38c6444bbf9020a7f8cbccabfbdfafa07864e5eca67702165b482edf2abd8da0a9287e484e3b7c1c354907218d40ec8d362fdddbc37bd97fac3760cf2508039fd6231afc7fc7b1b402503837fdf2071ffa173b5eb63e5257514e3fbf5acc3b5fe1da4e4108ef7391f321f1ba767ce6ced48b5df07105d77407c1550211c89320f01c63741f2a29f2c43828305de0e7c5a55f574ac4e86805667d17e74b9f563111235858cd1b029c9c655c440060b19583416f26a403f3d93474963375e82be23edc2b03e00c3a04fbfe8c70f5301d150dfea6dcf2c48a01e7a6648735e9ae8fb3c25bed07c05d78917a604b1c6312b36bf141471af958f7ad9e015e6bf2e45bae9e80662a5d886e261dd9e88f2c433775e23f7faa0a31457a06fc42ba13fac7ef5ba6414bc2b4363068c6bb6a997063d9cd31096a8129bded660a5952568f30294db7faf4db0de3e9f85def22f0a80e5804489ec9cb277bfbdbde2904992a432df061702f5cb32f0a762e6a79195e9b6ea30def453bc126ec18bfc1f32d01c5fd58fec7c9c800b95e533ad940e59d7635c27dfb943e58f215735afbf3c987b5c4c90ef983fe281aaef437e956cc8bd5d6d0fe3d739bb9cdca91f537845076321720da7452f6a4443b8b502ca0405c4c73990bc0ba3692d474becccc72eb4a4b09e1e8c70b1c1a8bbb15cae363355162b4f753fcd2f9b32c81d2d664cbc34ab5a61c9adc388db38b59b1933ecf2b06fa8ebe697141ccc14e0cf2c626800f2d88abe2b621d1927389f7c1958ff4301d9e474bc330233cbbc33b10d0e7a1b0196e4ded4c94e52b4843abc6e68b2223246f6d8d4a3095eaf7b9215955acb2d3bfe0d59c50082ee9722046c786da08b33aa2a712dd08e731720f773855592807b907c4eceb5c2ac158f670f3394c01dfbb38f4db34c142a248acf1be225fe2438474994fbefcc246f35a434eab58eefbe881cd0028c437d6567a68eeb391b5922c6db02512072de72caceebc4b6bb46b1f4abd74114b7a296bab05908d61f533604c69d60e2aeae429570d9dee2aad5ab0f0ab612cacaf74218108d2fc1682b96763850c502018d4954f92de16d7c47d59cef616433ee02b66e7fff0e40827fb0d45d6bac14a7d7bd1bd4c9962bb579e253a8652bea8e65c935b2f5b49cb78a3bfd060a239cbf181b54c3d9b5cec4bb46385608f34668e3e22f5e2ad24517d077ed30eeef4758e1d591ed7fb42e5d8f50a34c3141cfa125f2eed26430941ed027b29fe4d5429ca9c67a3773df4c0f2986b92d4f5f556de537e455d7b4c8ca39110e486abd5289d508532a54fae44508a52dc78e2ed88c8eac1ee352277b0f1183e15722e705720eb0660f097582daa142e9a10bd145742ee0d18c5ae7e3e99b6301da3bc3cda147ae3c9fe3f69ce4792a9960fe6d2a26943d63fca6899e2f3340f75b9b95ab0abd88ed07540bb53e30d8f3d34844ac4bcd1a160e087159a283aaf70eed08b95348570a2734f1c8548834780dfe27a7c801050467b1966d4a7a1ea2f1c6f1acac501e74f70f93fac00ca0574c7b49f0bc4a4ae361e140027af95690aa1fb6c6df341ca7ca776ebf47d84010c92775f35414f6c65109d22c2f4057eb6177936ed8d85e826aebbd3fe710aa1c274c27e7766865fa2b3472595700c07b87f2189db8126972a0b43066fafc8007d72d1dc6b13940aa78bfbfb60170f6b2779c9ea1c713b0b08b6bcfc7f642bbbe5285037588893fa7e9946f18135641bf287fc1a3f189ae57e0cfefb7f1e55ee25f8d77e7f7c5c27d488219f4c12cc0643e5cde294e85c9d198d76c087dddcb6dc75e17d92860252f7be29d171e60f7a3f62468b77abe87e901c2cf3ca0647856de5001c05bfa030763301b112b9a9d0b057ed0d6561aa675ee36a44132f57929590491bca3ee782f0216d10c166682e8b8018d5b7e059f4401435ebc4a409645f21e5394c995a29c96d8b7e12ef8bc9d8c653c1ddb1130cb9ff725979611a400508d5221d4a21e01882f8864ca131da0265ae8d70f91bd29d3e10337049d4916848b488181aa41b7ad72f9583762d9b0e6c66466a896cb2e1a2cee0d35621442e3c95c3fc7ba028314bc0fde982df55b9327c7902f5f03772bc8e07e41aa0f6efe77d53f89296df42f9588a9e102e3975d1ce001bcf028ecc233665efd664a97e25d356ab7faa4bd33b0426b2a01bf2290be6399e7d8c63438f17577c8514aa8bfd779dce66b901433f9a6b8d803764282921da307fa2692fb59dd0f9a4623fdf97298f76a837ea32c67c4c37483fcd4b4eebf9c6a3cdb7f830ddc0f3cff6a5620fcbdc918982b9d4c82ad014ff54795330ac7a6ed109fc9c198a11c796370ca8ba41d042ee015988d26547011b4b495c7423a0e71e31705112c1a58716a7a5a2b604ba5114a752f1b13e38e306b3de3364b4217c5ae421c2f0c324130777392d86cb9b87baf5d2c27fc491d5d9d5d85ba77383518264c6d7ed1fbe6ff423a2ca7bb1f4df885493ebb9e12477f0225976117159d51e2ac0eb86ffc83a6611acab46ae3913b0daa91ac71e977dfe418c22470fefc7e68ab3018f37848add5b001a79423fc132780bfc8a80998ce0a007318817b6b5684c370d413a1a89e26f5c5d00a7a0578ca777f15055e9e2c5aaa625ad7abe78d3465177a887032914fe1c432dcc7d7fc9f6c47622024ea6024a3508a89b42887a0713d601bcf5d65b84c15e534db2390e027f309ecb9cca7066e86495c8a731ed565f3df216797659ade0d9a590eedfcea12292be22820bef453226bb8bbc9aab09e867269d03dcec6b1300189e00bad683ae8f4e6fd6139ed050008148a94c9bc6aed135d93ef2ef19dbe131c990cd73637d48cf746b60a1cf2508780921eefb5af2d1fbed526d4b828ba12a998a737a39a5981b1b833e67022018128c18c27f63bb4ce8a8f2ee9f4370c8b70b0c6b670fbcffc28d21066a33153397f24534b269ebc78b9164b32dd790eeafdb0f494b488f3166ccd82bb81ce42e2b00c3705a1b739a28b644bf466e29cbf903253e231f198c7cce39a3440627272a666bfb0c2c39538d797ed4bbacd533804669a9417b4a52706c49750dc0adea7f2e7d32dc783235cd6ec4402db0457f8e253f5069d78826b93e4ec1b626f92fc59e5791ac8599526f7f15520195a742f1971c451d65ddb191f6b1023166be43ac930dd2c4d320c8195f366c4bab790b42528b974ef54e81377dda593d38764f04d1b1afffe4b58f0a74fb81074672db0d325b36954d4ca41033d159202ab5ef554c15e4589cfb965b3f2e8ab5a130a7e4ad14d2b851263b107a7dcbc3779f173b3b5d8fd02de6a91e81fc16290cfd91e48cd2cd894554a5a8af0855d5864da26008b12e740c3315312e063f3d64c82bdc6513744a03353bb9bf344301d29171dbe9ca0cc9d721a9c4005917ff4521a06a69289d741729c4d426065f75c2de5d4b36fbd1f579898c8c8af62be56a1ead9220860ad9536a828ab6518aead3d6f2f94c9d1396ba4f31adbd6863c0d26a26fb431e208771fcbb55be26189c379e50dd341f964c303bdf6d87cd0d87f2c412915fcd1bd54303be93b529a7d2340f0fd3ea8378edae324198b0f433061e121be0f3b17f50217674b28c80ebc73a6d2d67cacd063f7eb472421410bec4342bce8d5607ec67062b4a053153cd5b06a2b1ef8dfaaf9967235c154e6c6de49e58d0e1cc08d0f24d76b51d89e19ee54e15759a057ace287c175092fa1d54d76027773bea7b2b6719a44e31b46d6e425d7ddab7f42893d8064f1ee4abadd387719b497ce854321b85d7e336e606c34a1478b993af9eda075fdeb45539da343606b18e395b80471a84aaf05865b6af47ca9849ad5691e0254cee9239cf7597f8149fcff51f8bc132b047cbffe761ac69e7f9948d663e2b4cc1c48a35d393e2c5726b1f9646de61129783ac4cb6fcdace34dd44410e91a9940779d02d58f6565817b39d34123aec5076d4eb7fe771aa5a004dd7ba37845d05ea74e5f3c7df82816f7d5fc4830fea6c1d2f4669f31741248377d8629a29cbbf87ce44a93b9d9e78d411e5047a2549a5e8e85ad9efa8aaa65aee5da2927c07b4a7dd802a190be9e5572a22a8f53b101b7420288364543d7f8d507dc350ced4c763b0008d603e231072056188ccc7e0e4fe4160986276714b2688d784da772560012ff56433fc30d047a65c45667d28205c0487635e8eb0ba83a81196ea89f4534d99db1f5fa5f31410f574afc1cadbe45b88a7526d12766a8a857bb9c02b549853590bcc58fe60f28b8864feb604b343758599b03c3308a4a3d0b6569218d3db9c23103742e2e244ece27065c7196afdff8a03877ee2e12a2e09adead225d1a79fa782a8e74a317cc427481ad9570cce01a6c9a41adf7bba1fbf5a93e41a5c1ba7fc9ccd36019e33e89508372fb6fe0fc34662fad3e370d288e4e4cf87f312f7d729810acd23afc8b876ce505312cd292b1b8f0dab05d224528491ec75fc7a8ed0e7623c93221871aa5bddd3cb3c35daf2adb531e12d9a29b224f4ef827b6047085a56af05cf5b0fa3f76aa48cab6a73d6b74d7f46d1e17fe5bd4061c034a5a438ac978280b36610e2fbe3fb1216f10ef89ccb908ccee75191eaad69d754a2e2347a6d53ff419ae805d302630ef246da6f378ff1d31c48756a441c149c910b132129dad28b70690f56320912d6d93358"}) mq_notify(r4, &(0x7f0000000200)={0x0, 0x17, 0x7, @thr={&(0x7f0000000040)="447091c0a5befa057ed4ff04a65c33539f4f1cc05056fb87045af343d5e633a6252d1ebf4a5a07728e59bafd60a7619e987b9cf43a67a3cf27733837aa0b6568d139015512930e5cbaa07a501dcb1b50cad723a2c86cebf7d620e1a911e470d48a47b7f4a3010c814df3caf840378a3dd6b1af663686737cdd71bb290b3a324bcca12e728729e9c4633f669e5397e9be53d797d3d1bdecba1efe428177990ad00022cffaf418555283613618a260648c6e89957eaff77cfbd6c0e7c132af11baddc1bb64e35f719bc4b17b19f78d2b92a49cfef2dffc05ef57bba102904400beb9a3b5bba8bb3d022474e12a0f10cb138dd9c6", &(0x7f0000000180)}}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000002400)={0x8, 0x9, 0xfffffffffffffff7, 0xfffffffffffffff9, 0xffffffffffffff24, 0xffffffff00000000, 0xfffffffffffffff7, 0xffffffffffffff7f, 0x400}) 03:26:03 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f00000000c0)={0x10000, 0x4004, 0xff, 0x81, 0x4}) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:03 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:03 executing program 3 (fault-call:2 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1372.493492] FAULT_INJECTION: forcing a failure. [ 1372.493492] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.554577] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1372.563612] CPU: 0 PID: 7810 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1372.572146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.581521] Call Trace: [ 1372.584150] dump_stack+0x244/0x39d [ 1372.587814] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1372.593039] ? lock_downgrade+0x900/0x900 [ 1372.597303] should_fail.cold.4+0xa/0x17 [ 1372.601481] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1372.606612] ? lock_downgrade+0x900/0x900 [ 1372.610781] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1372.616330] ? proc_fail_nth_write+0x9e/0x210 [ 1372.620833] ? proc_cwd_link+0x1d0/0x1d0 [ 1372.624902] ? __switch_to_asm+0x40/0x70 [ 1372.628979] ? find_held_lock+0x36/0x1c0 [ 1372.633247] ? perf_trace_sched_process_exec+0x860/0x860 [ 1372.638719] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1372.644272] __should_failslab+0x124/0x180 [ 1372.648520] should_failslab+0x9/0x14 [ 1372.652328] __kmalloc+0x2e0/0x760 [ 1372.655876] ? strncpy_from_user+0x5a0/0x5a0 [ 1372.660296] ? fput+0x130/0x1a0 [ 1372.663583] ? do_syscall_64+0x9a/0x820 [ 1372.667600] ? __x64_sys_memfd_create+0x142/0x4f0 [ 1372.672455] ? do_syscall_64+0x9a/0x820 [ 1372.676438] __x64_sys_memfd_create+0x142/0x4f0 [ 1372.681117] ? trace_hardirqs_on+0x310/0x310 [ 1372.685531] ? memfd_fcntl+0x1910/0x1910 [ 1372.689611] do_syscall_64+0x1b9/0x820 [ 1372.693523] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1372.698988] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1372.703932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1372.708792] ? trace_hardirqs_on_caller+0x310/0x310 [ 1372.713821] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1372.718853] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1372.723732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1372.728926] RIP: 0033:0x457569 [ 1372.732130] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:26:03 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1372.751155] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1372.758878] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457569 [ 1372.766152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1372.773532] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1372.780811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00d882f6d4 [ 1372.788088] R13: 00000000004c510b R14: 00000000004d8d20 R15: 0000000000000005 03:26:03 executing program 3 (fault-call:2 fault-nth:1): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1372.861678] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:26:04 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000780)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1372.905487] XFS (loop2): Invalid superblock magic number [ 1372.931478] FAULT_INJECTION: forcing a failure. [ 1372.931478] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.003703] CPU: 0 PID: 7837 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1373.012271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.021660] Call Trace: [ 1373.024298] dump_stack+0x244/0x39d [ 1373.027951] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1373.033180] should_fail.cold.4+0xa/0x17 [ 1373.037256] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1373.042386] ? find_held_lock+0x36/0x1c0 [ 1373.046467] ? graph_lock+0x270/0x270 [ 1373.050281] ? __lock_acquire+0x62f/0x4c20 [ 1373.054554] ? lock_downgrade+0x900/0x900 [ 1373.058713] ? check_preemption_disabled+0x48/0x280 [ 1373.063746] ? find_held_lock+0x36/0x1c0 [ 1373.067837] ? expand_files.part.8+0x571/0x9a0 [ 1373.072426] ? perf_trace_sched_process_exec+0x860/0x860 [ 1373.077888] ? find_held_lock+0x36/0x1c0 [ 1373.081975] __should_failslab+0x124/0x180 [ 1373.086240] should_failslab+0x9/0x14 [ 1373.090054] kmem_cache_alloc+0x2be/0x730 [ 1373.094218] ? shmem_destroy_callback+0xc0/0xc0 [ 1373.098895] shmem_alloc_inode+0x1b/0x40 [ 1373.102982] alloc_inode+0x63/0x190 [ 1373.106615] new_inode_pseudo+0x71/0x1a0 [ 1373.110693] ? prune_icache_sb+0x1c0/0x1c0 [ 1373.114945] ? _raw_spin_unlock+0x2c/0x50 [ 1373.119108] new_inode+0x1c/0x40 [ 1373.122484] shmem_get_inode+0xf1/0x920 [ 1373.126479] ? shmem_encode_fh+0x340/0x340 [ 1373.130724] ? lock_downgrade+0x900/0x900 [ 1373.134888] ? lock_release+0xa10/0xa10 [ 1373.138866] ? perf_trace_sched_process_exec+0x860/0x860 [ 1373.144496] ? usercopy_warn+0x110/0x110 [ 1373.148576] __shmem_file_setup.part.50+0x83/0x2a0 [ 1373.153521] shmem_file_setup+0x65/0x90 [ 1373.157507] __x64_sys_memfd_create+0x2af/0x4f0 [ 1373.162187] ? memfd_fcntl+0x1910/0x1910 [ 1373.166270] do_syscall_64+0x1b9/0x820 [ 1373.170166] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1373.175542] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1373.180481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1373.185334] ? trace_hardirqs_on_caller+0x310/0x310 [ 1373.190358] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1373.195466] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1373.200493] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1373.205356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.210545] RIP: 0033:0x457569 [ 1373.213749] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1373.232668] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1373.240545] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457569 03:26:04 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0250316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) read(r0, &(0x7f00000002c0)=""/131, 0x83) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x8008, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) [ 1373.247818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1373.255088] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1373.262361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00d882f6d4 [ 1373.269638] R13: 00000000004c510b R14: 00000000004d8d20 R15: 0000000000000005 03:26:04 executing program 3 (fault-call:2 fault-nth:2): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:04 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1373.456104] FAULT_INJECTION: forcing a failure. [ 1373.456104] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.483996] CPU: 0 PID: 7854 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1373.492564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.501955] Call Trace: [ 1373.504574] dump_stack+0x244/0x39d [ 1373.508230] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1373.513457] should_fail.cold.4+0xa/0x17 [ 1373.517546] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1373.522665] ? __kernel_text_address+0xd/0x40 [ 1373.527175] ? unwind_get_return_address+0x61/0xa0 [ 1373.532150] ? find_held_lock+0x36/0x1c0 [ 1373.536244] ? perf_trace_sched_process_exec+0x860/0x860 [ 1373.541717] __should_failslab+0x124/0x180 [ 1373.545961] should_failslab+0x9/0x14 [ 1373.549768] kmem_cache_alloc+0x2be/0x730 [ 1373.553926] ? mpol_shared_policy_init+0x235/0x650 [ 1373.558860] ? current_time+0x72/0x1b0 [ 1373.562759] __d_alloc+0xc8/0xb90 [ 1373.566223] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 1373.571252] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1373.576280] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 1373.581486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.587036] ? timespec64_trunc+0xea/0x180 [ 1373.591291] ? inode_init_owner+0x340/0x340 [ 1373.595635] ? _raw_spin_unlock+0x2c/0x50 [ 1373.599801] ? current_time+0x10b/0x1b0 [ 1373.603788] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1373.609337] ? __lockdep_init_map+0x105/0x590 [ 1373.613852] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1373.619397] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 1373.624955] d_alloc_pseudo+0x1d/0x30 [ 1373.628771] alloc_file_pseudo+0x158/0x3f0 [ 1373.633018] ? alloc_file+0x4d0/0x4d0 [ 1373.636829] ? usercopy_warn+0x110/0x110 [ 1373.640917] __shmem_file_setup.part.50+0x110/0x2a0 [ 1373.645977] shmem_file_setup+0x65/0x90 [ 1373.649961] __x64_sys_memfd_create+0x2af/0x4f0 [ 1373.654640] ? memfd_fcntl+0x1910/0x1910 [ 1373.658827] do_syscall_64+0x1b9/0x820 [ 1373.662729] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1373.668108] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1373.673051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1373.677912] ? trace_hardirqs_on_caller+0x310/0x310 [ 1373.682947] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1373.687975] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1373.693005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1373.697876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1373.703095] RIP: 0033:0x457569 [ 1373.706300] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1373.725220] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1373.732943] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457569 [ 1373.740218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1373.747506] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1373.754787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00d882f6d4 [ 1373.762060] R13: 00000000004c510b R14: 00000000004d8d20 R15: 0000000000000005 [ 1373.852273] XFS (loop2): Invalid superblock magic number 03:26:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:05 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r1) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) 03:26:05 executing program 3 (fault-call:2 fault-nth:3): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:05 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl(r0, 0x1, &(0x7f0000000000)="ea7a4058fd942562c7ee67e25cece57b9beea53b") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) [ 1374.767215] FAULT_INJECTION: forcing a failure. [ 1374.767215] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.810823] CPU: 1 PID: 7881 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1374.819395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.828771] Call Trace: [ 1374.831392] dump_stack+0x244/0x39d [ 1374.835057] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1374.840272] ? __save_stack_trace+0x8d/0xf0 [ 1374.844632] should_fail.cold.4+0xa/0x17 [ 1374.848717] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1374.848739] ? save_stack+0x43/0xd0 [ 1374.848759] ? kasan_kmalloc+0xc7/0xe0 [ 1374.857498] ? percpu_ref_put_many+0x11c/0x260 [ 1374.865944] ? graph_lock+0x270/0x270 [ 1374.869777] ? find_held_lock+0x36/0x1c0 [ 1374.873954] ? slram_erase+0x48/0xde [ 1374.877707] ? perf_trace_sched_process_exec+0x860/0x860 [ 1374.883181] ? lock_downgrade+0x900/0x900 [ 1374.887357] __should_failslab+0x124/0x180 [ 1374.891609] should_failslab+0x9/0x14 [ 1374.895421] kmem_cache_alloc+0x2be/0x730 [ 1374.899581] ? d_set_d_op+0x31d/0x410 [ 1374.903418] __alloc_file+0xa8/0x470 [ 1374.907156] ? file_free_rcu+0xd0/0xd0 [ 1374.911070] ? d_instantiate+0x79/0xa0 [ 1374.914982] ? lock_downgrade+0x900/0x900 [ 1374.919156] ? kasan_check_read+0x11/0x20 [ 1374.923405] ? do_raw_spin_unlock+0xa7/0x330 [ 1374.927828] ? do_raw_spin_trylock+0x270/0x270 [ 1374.932436] alloc_empty_file+0x72/0x170 [ 1374.936529] alloc_file+0x5e/0x4d0 [ 1374.940188] ? _raw_spin_unlock+0x2c/0x50 [ 1374.944361] alloc_file_pseudo+0x261/0x3f0 [ 1374.948614] ? alloc_file+0x4d0/0x4d0 [ 1374.952520] ? usercopy_warn+0x110/0x110 [ 1374.956606] __shmem_file_setup.part.50+0x110/0x2a0 03:26:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) timerfd_create(0x4, 0x80000) 03:26:06 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400001, 0x0) getsockopt$packet_buf(r1, 0x107, 0x17, &(0x7f0000000080)=""/131, &(0x7f0000000180)=0x83) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) r3 = dup3(r0, r2, 0x80000) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x4, 0x31, 0x12, 0x4, 0x3, 0x1, 0x1, 0x112, 0x1}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) [ 1374.961649] shmem_file_setup+0x65/0x90 [ 1374.965640] __x64_sys_memfd_create+0x2af/0x4f0 [ 1374.970324] ? memfd_fcntl+0x1910/0x1910 [ 1374.974412] do_syscall_64+0x1b9/0x820 [ 1374.978322] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1374.983705] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1374.988648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1374.993517] ? trace_hardirqs_on_caller+0x310/0x310 [ 1374.998549] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1374.998570] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1374.998594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1374.998624] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1374.998636] RIP: 0033:0x457569 [ 1374.998653] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1374.998665] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1375.008680] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457569 03:26:06 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1375.008688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1375.008695] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1375.008704] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00d882f6d4 [ 1375.008713] R13: 00000000004c510b R14: 00000000004d8d20 R15: 0000000000000005 [ 1375.101415] XFS (loop2): Invalid superblock magic number 03:26:06 executing program 3 (fault-call:2 fault-nth:4): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:06 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667301", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1375.244239] FAULT_INJECTION: forcing a failure. [ 1375.244239] name failslab, interval 1, probability 0, space 0, times 0 [ 1375.281391] CPU: 1 PID: 7919 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1375.289957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.299338] Call Trace: [ 1375.301969] dump_stack+0x244/0x39d [ 1375.305630] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1375.310932] ? __save_stack_trace+0x8d/0xf0 [ 1375.315292] should_fail.cold.4+0xa/0x17 [ 1375.319386] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1375.324507] ? save_stack+0x43/0xd0 [ 1375.328155] ? kasan_kmalloc+0xc7/0xe0 [ 1375.332073] ? percpu_ref_put_many+0x11c/0x260 [ 1375.336675] ? graph_lock+0x270/0x270 [ 1375.340494] ? find_held_lock+0x36/0x1c0 [ 1375.344596] ? perf_trace_sched_process_exec+0x860/0x860 [ 1375.350066] ? lock_downgrade+0x900/0x900 [ 1375.354236] __should_failslab+0x124/0x180 [ 1375.358494] should_failslab+0x9/0x14 [ 1375.362309] kmem_cache_alloc+0x2be/0x730 [ 1375.366472] ? d_set_d_op+0x31d/0x410 [ 1375.370297] __alloc_file+0xa8/0x470 [ 1375.374029] ? file_free_rcu+0xd0/0xd0 [ 1375.377926] ? d_instantiate+0x79/0xa0 [ 1375.381826] ? lock_downgrade+0x900/0x900 [ 1375.385989] ? kasan_check_read+0x11/0x20 [ 1375.390138] ? do_raw_spin_unlock+0xa7/0x330 [ 1375.394552] ? do_raw_spin_trylock+0x270/0x270 [ 1375.399146] alloc_empty_file+0x72/0x170 [ 1375.403218] alloc_file+0x5e/0x4d0 [ 1375.406771] ? _raw_spin_unlock+0x2c/0x50 [ 1375.410936] alloc_file_pseudo+0x261/0x3f0 [ 1375.415360] ? alloc_file+0x4d0/0x4d0 [ 1375.419175] ? usercopy_warn+0x110/0x110 [ 1375.423260] __shmem_file_setup.part.50+0x110/0x2a0 [ 1375.428363] shmem_file_setup+0x65/0x90 [ 1375.432461] __x64_sys_memfd_create+0x2af/0x4f0 [ 1375.437139] ? memfd_fcntl+0x1910/0x1910 [ 1375.441217] do_syscall_64+0x1b9/0x820 [ 1375.445117] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1375.450578] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1375.455515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1375.460367] ? trace_hardirqs_on_caller+0x310/0x310 [ 1375.465399] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1375.470444] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1375.475649] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1375.480770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1375.485962] RIP: 0033:0x457569 [ 1375.489164] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1375.508072] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1375.515791] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000457569 [ 1375.523064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 1375.530337] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 1375.537610] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f00d882f6d4 03:26:06 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1375.544881] R13: 00000000004c510b R14: 00000000004d8d20 R15: 0000000000000005 03:26:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TCSBRK(r1, 0x5409, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) 03:26:08 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:08 executing program 3 (fault-call:2 fault-nth:5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x5, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfsH', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x5460, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) [ 1377.001431] FAULT_INJECTION: forcing a failure. [ 1377.001431] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.024503] CPU: 1 PID: 7947 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1377.033022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.042374] Call Trace: [ 1377.042402] dump_stack+0x244/0x39d [ 1377.042425] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1377.053822] ? find_held_lock+0x36/0x1c0 [ 1377.057909] should_fail.cold.4+0xa/0x17 [ 1377.061985] ? find_held_lock+0x36/0x1c0 [ 1377.066061] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1377.071204] ? lock_downgrade+0x900/0x900 [ 1377.075360] ? current_time+0x72/0x1b0 [ 1377.079288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1377.084834] ? timespec64_trunc+0xea/0x180 [ 1377.089076] ? inode_init_owner+0x340/0x340 [ 1377.093422] ? find_held_lock+0x36/0x1c0 [ 1377.097514] ? btrfs_find_root+0x418/0x9f0 03:26:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000040)={0x1, {0x0, 0x1c9c380}, 0x3ff}) 03:26:08 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1377.101779] ? perf_trace_sched_process_exec+0x860/0x860 [ 1377.107274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1377.112837] __should_failslab+0x124/0x180 [ 1377.117096] should_failslab+0x9/0x14 [ 1377.120912] kmem_cache_alloc+0x2be/0x730 [ 1377.125069] ? do_sys_ftruncate+0x428/0x550 [ 1377.129407] ? lock_downgrade+0x900/0x900 [ 1377.133557] getname_flags+0xd0/0x590 [ 1377.137350] ? __lock_is_held+0xb5/0x140 [ 1377.141452] getname+0x19/0x20 [ 1377.144720] do_sys_open+0x383/0x700 [ 1377.148435] ? filp_open+0x80/0x80 [ 1377.151976] ? trace_hardirqs_off_caller+0x300/0x300 [ 1377.157078] ? do_sys_ftruncate+0x449/0x550 [ 1377.161401] __x64_sys_open+0x7e/0xc0 [ 1377.165203] do_syscall_64+0x1b9/0x820 [ 1377.169085] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1377.174445] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1377.179374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1377.184203] ? trace_hardirqs_on_caller+0x310/0x310 [ 1377.189207] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1377.194208] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1377.199215] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1377.204051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1377.209229] RIP: 0033:0x4111a1 [ 1377.212414] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1377.231300] RSP: 002b:00007f00d882ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1377.239312] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004111a1 03:26:08 executing program 3 (fault-call:2 fault-nth:6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1377.246566] RDX: 00007f00d882eafa RSI: 0000000000000002 RDI: 00007f00d882eaf0 [ 1377.253864] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1377.261119] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1377.268545] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1377.395639] FAULT_INJECTION: forcing a failure. [ 1377.395639] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.427061] CPU: 0 PID: 7960 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1377.435749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.445111] Call Trace: [ 1377.447730] dump_stack+0x244/0x39d [ 1377.451384] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1377.456596] ? find_held_lock+0x36/0x1c0 [ 1377.460681] should_fail.cold.4+0xa/0x17 [ 1377.464752] ? find_held_lock+0x36/0x1c0 [ 1377.468835] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1377.473959] ? lock_downgrade+0x900/0x900 [ 1377.478123] ? current_time+0x72/0x1b0 [ 1377.482028] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1377.487585] ? timespec64_trunc+0xea/0x180 [ 1377.491828] ? inode_init_owner+0x340/0x340 [ 1377.496165] ? find_held_lock+0x36/0x1c0 [ 1377.500263] ? perf_trace_sched_process_exec+0x860/0x860 [ 1377.505896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1377.511556] __should_failslab+0x124/0x180 [ 1377.515801] should_failslab+0x9/0x14 [ 1377.519609] kmem_cache_alloc+0x2be/0x730 [ 1377.523765] ? do_sys_ftruncate+0x428/0x550 [ 1377.528099] ? lock_downgrade+0x900/0x900 [ 1377.532277] getname_flags+0xd0/0x590 [ 1377.536088] ? __lock_is_held+0xb5/0x140 [ 1377.540160] getname+0x19/0x20 [ 1377.543359] do_sys_open+0x383/0x700 [ 1377.547082] ? filp_open+0x80/0x80 [ 1377.550723] ? trace_hardirqs_off_caller+0x300/0x300 [ 1377.555828] ? do_sys_ftruncate+0x449/0x550 [ 1377.560162] __x64_sys_open+0x7e/0xc0 [ 1377.563977] do_syscall_64+0x1b9/0x820 [ 1377.567875] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1377.573254] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1377.578191] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1377.583163] ? trace_hardirqs_on_caller+0x310/0x310 [ 1377.588188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1377.593231] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1377.598265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1377.603128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1377.608317] RIP: 0033:0x4111a1 [ 1377.611518] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1377.630433] RSP: 002b:00007f00d882ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1377.638152] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004111a1 03:26:08 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:08 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1377.645429] RDX: 00007f00d882eafa RSI: 0000000000000002 RDI: 00007f00d882eaf0 [ 1377.652699] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1377.659974] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1377.667249] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x65d6, 0x5, 0x1, 0xff, 0x4, 0x2, 0x401}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x5, 0x80000000000002}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) 03:26:08 executing program 3 (fault-call:2 fault-nth:7): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:08 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1377.842162] FAULT_INJECTION: forcing a failure. [ 1377.842162] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.862572] XFS (loop2): Invalid superblock magic number [ 1377.863929] CPU: 0 PID: 7994 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1377.876567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.885927] Call Trace: [ 1377.888543] dump_stack+0x244/0x39d [ 1377.892189] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1377.897393] ? lock_downgrade+0x900/0x900 [ 1377.901545] ? check_preemption_disabled+0x48/0x280 [ 1377.901569] should_fail.cold.4+0xa/0x17 [ 1377.901587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1377.901611] ? is_bpf_text_address+0xd3/0x170 [ 1377.901631] ? kernel_text_address+0x79/0xf0 [ 1377.924856] ? __kernel_text_address+0xd/0x40 [ 1377.929372] ? unwind_get_return_address+0x61/0xa0 [ 1377.934331] ? __save_stack_trace+0x8d/0xf0 [ 1377.938671] ? find_held_lock+0x36/0x1c0 [ 1377.942761] ? do_syscall_64+0x1b9/0x820 [ 1377.946836] ? perf_trace_sched_process_exec+0x860/0x860 [ 1377.952417] __should_failslab+0x124/0x180 [ 1377.956669] should_failslab+0x9/0x14 [ 1377.960486] kmem_cache_alloc_trace+0x2d7/0x750 [ 1377.965175] ? __might_sleep+0x95/0x190 [ 1377.969173] apparmor_file_alloc_security+0x17b/0xac0 [ 1377.974383] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1377.979943] ? apparmor_path_rename+0xcd0/0xcd0 [ 1377.984636] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1377.989668] ? kmem_cache_alloc+0x33a/0x730 [ 1377.994005] ? graph_lock+0x270/0x270 [ 1377.997821] security_file_alloc+0x4c/0xa0 [ 1378.002110] __alloc_file+0x12a/0x470 [ 1378.005924] ? file_free_rcu+0xd0/0xd0 [ 1378.009825] ? find_held_lock+0x36/0x1c0 [ 1378.013904] ? is_bpf_text_address+0xac/0x170 [ 1378.018412] ? lock_downgrade+0x900/0x900 [ 1378.022574] ? check_preemption_disabled+0x48/0x280 [ 1378.027609] alloc_empty_file+0x72/0x170 [ 1378.031860] path_openat+0x170/0x5150 [ 1378.035694] ? rcu_softirq_qs+0x20/0x20 [ 1378.039672] ? unwind_dump+0x190/0x190 [ 1378.043582] ? graph_lock+0x270/0x270 [ 1378.047394] ? path_lookupat.isra.43+0xc00/0xc00 [ 1378.052163] ? unwind_get_return_address+0x61/0xa0 [ 1378.057109] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1378.062152] ? expand_files.part.8+0x571/0x9a0 [ 1378.066762] ? find_held_lock+0x36/0x1c0 [ 1378.070843] ? __alloc_fd+0x347/0x6e0 [ 1378.074658] ? lock_downgrade+0x900/0x900 [ 1378.078813] ? getname+0x19/0x20 [ 1378.082207] ? kasan_check_read+0x11/0x20 [ 1378.086362] ? do_raw_spin_unlock+0xa7/0x330 [ 1378.090778] ? do_raw_spin_trylock+0x270/0x270 [ 1378.095364] ? __lock_is_held+0xb5/0x140 [ 1378.095381] ? __check_object_size+0xb1/0x782 [ 1378.095406] ? _raw_spin_unlock+0x2c/0x50 [ 1378.108168] ? __alloc_fd+0x347/0x6e0 [ 1378.111989] do_filp_open+0x255/0x380 [ 1378.115812] ? may_open_dev+0x100/0x100 [ 1378.119828] ? get_unused_fd_flags+0x122/0x1a0 [ 1378.124422] ? __alloc_fd+0x6e0/0x6e0 [ 1378.128241] ? __lock_is_held+0xb5/0x140 [ 1378.132320] do_sys_open+0x568/0x700 [ 1378.136052] ? filp_open+0x80/0x80 [ 1378.139609] ? trace_hardirqs_off_caller+0x300/0x300 [ 1378.144728] ? do_sys_ftruncate+0x449/0x550 [ 1378.149063] __x64_sys_open+0x7e/0xc0 [ 1378.152879] do_syscall_64+0x1b9/0x820 [ 1378.156779] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1378.162151] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1378.167119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1378.171972] ? trace_hardirqs_on_caller+0x310/0x310 [ 1378.176999] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1378.182033] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1378.187057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1378.192358] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1378.197552] RIP: 0033:0x4111a1 [ 1378.200756] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1378.219666] RSP: 002b:00007f00d882ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1378.227387] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004111a1 [ 1378.234662] RDX: 00007f00d882eafa RSI: 0000000000000002 RDI: 00007f00d882eaf0 03:26:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x800000000e, 0x0, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x83, 0x80) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000080)={0x0}) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0xa0010, r0, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, 0xffffffffffffffff, 0x0) r7 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40050, 0xffffffffffffffff, 0x0) r8 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x42011, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xbc, 0x0, &(0x7f00000002c0)=[@clear_death={0x400c630f, 0x4}, @increfs_done={0x40106308, r3}, @clear_death={0x400c630f, 0x4, 0x2}, @increfs_done={0x40106308, r4}, @free_buffer={0x40086303, r5}, @transaction={0x40406300, {0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x30, 0x38, &(0x7f00000000c0)=[@flat={0x0, 0xa, r6, 0x4}, @flat={0x77682a85, 0x100, r7, 0x4}], &(0x7f0000000100)=[0x38, 0x58, 0x20, 0x58, 0x38, 0x0, 0x20]}}, @increfs_done={0x40106308, r8, 0x1}, @register_looper, @exit_looper, @release={0x40046306, 0x2}], 0x13, 0x0, &(0x7f0000000180)="7f7ba6ba42bf34247a1387ff19dbae65fbc2aa"}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:09 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1378.241936] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1378.249294] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1378.256566] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:10 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0xc020660b, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:10 executing program 3 (fault-call:2 fault-nth:8): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:10 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:10 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) ioctl$int_out(r1, 0x2, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000000_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f00000000c0)={r3, 0xffffffff, 0x4, "1fe2014785846d99d5220fc7835613e2f3fbb301d9ec7624254c4ab46105cb50788efa5bf8e48d48da961682a12c37497e59760834cdb1d2c9c2a24e2eb801691eddc6ed4348c841ef"}) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1379.629994] FAULT_INJECTION: forcing a failure. [ 1379.629994] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.684601] CPU: 1 PID: 8028 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1379.693166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.702543] Call Trace: [ 1379.705166] dump_stack+0x244/0x39d [ 1379.708828] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1379.714059] ? lock_downgrade+0x900/0x900 [ 1379.718230] ? check_preemption_disabled+0x48/0x280 [ 1379.723279] should_fail.cold.4+0xa/0x17 [ 1379.727366] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1379.732496] ? is_bpf_text_address+0xd3/0x170 [ 1379.737004] ? kernel_text_address+0x79/0xf0 [ 1379.741428] ? __kernel_text_address+0xd/0x40 [ 1379.745932] ? unwind_get_return_address+0x61/0xa0 [ 1379.750877] ? __save_stack_trace+0x8d/0xf0 [ 1379.755215] ? find_held_lock+0x36/0x1c0 [ 1379.759307] ? do_syscall_64+0x1b9/0x820 [ 1379.763371] ? perf_trace_sched_process_exec+0x860/0x860 [ 1379.768845] __should_failslab+0x124/0x180 [ 1379.773094] should_failslab+0x9/0x14 [ 1379.776906] kmem_cache_alloc_trace+0x2d7/0x750 [ 1379.781585] ? __might_sleep+0x95/0x190 [ 1379.785572] apparmor_file_alloc_security+0x17b/0xac0 [ 1379.790769] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1379.796321] ? apparmor_path_rename+0xcd0/0xcd0 [ 1379.801009] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1379.806048] ? kmem_cache_alloc+0x33a/0x730 [ 1379.810381] ? graph_lock+0x270/0x270 [ 1379.814202] security_file_alloc+0x4c/0xa0 [ 1379.818446] __alloc_file+0x12a/0x470 [ 1379.822259] ? file_free_rcu+0xd0/0xd0 [ 1379.826162] ? find_held_lock+0x36/0x1c0 [ 1379.830271] ? is_bpf_text_address+0xac/0x170 [ 1379.834787] ? lock_downgrade+0x900/0x900 [ 1379.838948] ? check_preemption_disabled+0x48/0x280 [ 1379.844074] alloc_empty_file+0x72/0x170 [ 1379.848147] path_openat+0x170/0x5150 [ 1379.851953] ? rcu_softirq_qs+0x20/0x20 [ 1379.855935] ? unwind_dump+0x190/0x190 [ 1379.859843] ? graph_lock+0x270/0x270 [ 1379.863656] ? path_lookupat.isra.43+0xc00/0xc00 [ 1379.868418] ? unwind_get_return_address+0x61/0xa0 [ 1379.873352] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1379.878479] ? expand_files.part.8+0x571/0x9a0 [ 1379.883072] ? find_held_lock+0x36/0x1c0 [ 1379.887149] ? __alloc_fd+0x347/0x6e0 [ 1379.890958] ? lock_downgrade+0x900/0x900 [ 1379.895108] ? getname+0x19/0x20 [ 1379.898484] ? kasan_check_read+0x11/0x20 [ 1379.902642] ? do_raw_spin_unlock+0xa7/0x330 [ 1379.907064] ? do_raw_spin_trylock+0x270/0x270 [ 1379.911760] ? __lock_is_held+0xb5/0x140 [ 1379.915834] ? __check_object_size+0xb1/0x782 [ 1379.920349] ? _raw_spin_unlock+0x2c/0x50 [ 1379.924618] ? __alloc_fd+0x347/0x6e0 [ 1379.928452] do_filp_open+0x255/0x380 [ 1379.932259] ? may_open_dev+0x100/0x100 [ 1379.936255] ? get_unused_fd_flags+0x122/0x1a0 [ 1379.940854] ? __alloc_fd+0x6e0/0x6e0 [ 1379.944663] ? __lock_is_held+0xb5/0x140 [ 1379.948743] do_sys_open+0x568/0x700 [ 1379.952472] ? filp_open+0x80/0x80 [ 1379.956032] ? trace_hardirqs_off_caller+0x300/0x300 [ 1379.961143] ? do_sys_ftruncate+0x449/0x550 [ 1379.965477] __x64_sys_open+0x7e/0xc0 [ 1379.969635] do_syscall_64+0x1b9/0x820 [ 1379.973528] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1379.978908] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1379.984027] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1379.988881] ? trace_hardirqs_on_caller+0x310/0x310 [ 1379.993921] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1379.998953] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1380.003982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1380.008858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1380.014140] RIP: 0033:0x4111a1 03:26:11 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x11, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0x8}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) 03:26:11 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, 0x5, "c75575467fb2538d1d17ff0b884c85edb46193d647942ee099fccfa38e980c39bbdbeb131466a3e0067c4b56c0f91cfa45cda973f394b28bfd2f429579a810b2", "b0a8f7dff460d62dad3ffd23de2c23ebf2bd8750c605d882e6af6d235327dbf4838053444006c725fa9ca88b0478cb4f04d23a91cfb4bd645f16353775309ee0", "fb9bbd735949c498f682282cda3d91ca78abe806559fdaea2ba878f090c01622", [0x0, 0x6]}) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1380.018122] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1380.037042] RSP: 002b:00007f00d882ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1380.044770] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004111a1 [ 1380.052047] RDX: 00007f00d882eafa RSI: 0000000000000002 RDI: 00007f00d882eaf0 [ 1380.059325] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1380.066600] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1380.073885] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1380.093530] XFS (loop2): Invalid superblock magic number 03:26:11 executing program 3 (fault-call:2 fault-nth:9): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:11 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1380.216597] FAULT_INJECTION: forcing a failure. [ 1380.216597] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.256374] CPU: 1 PID: 8054 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1380.264934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.274314] Call Trace: [ 1380.276929] dump_stack+0x244/0x39d [ 1380.280576] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1380.285781] ? lock_downgrade+0x900/0x900 [ 1380.289947] ? check_preemption_disabled+0x48/0x280 [ 1380.294997] should_fail.cold.4+0xa/0x17 [ 1380.299074] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1380.304197] ? is_bpf_text_address+0xd3/0x170 [ 1380.308699] ? kernel_text_address+0x79/0xf0 [ 1380.313112] ? __kernel_text_address+0xd/0x40 [ 1380.317613] ? unwind_get_return_address+0x61/0xa0 [ 1380.322666] ? __save_stack_trace+0x8d/0xf0 [ 1380.327015] ? find_held_lock+0x36/0x1c0 [ 1380.331093] ? add_qgroup_item+0x498/0x590 [ 1380.335351] ? do_syscall_64+0x1b9/0x820 [ 1380.339419] ? perf_trace_sched_process_exec+0x860/0x860 [ 1380.344889] __should_failslab+0x124/0x180 [ 1380.349138] should_failslab+0x9/0x14 [ 1380.352978] kmem_cache_alloc_trace+0x2d7/0x750 [ 1380.357670] ? __might_sleep+0x95/0x190 [ 1380.361664] apparmor_file_alloc_security+0x17b/0xac0 [ 1380.366992] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1380.372572] ? apparmor_path_rename+0xcd0/0xcd0 [ 1380.377280] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1380.382317] ? kmem_cache_alloc+0x33a/0x730 [ 1380.386656] ? graph_lock+0x270/0x270 [ 1380.390487] security_file_alloc+0x4c/0xa0 [ 1380.394737] __alloc_file+0x12a/0x470 [ 1380.398549] ? file_free_rcu+0xd0/0xd0 [ 1380.402447] ? find_held_lock+0x36/0x1c0 [ 1380.406525] ? is_bpf_text_address+0xac/0x170 [ 1380.411037] ? lock_downgrade+0x900/0x900 [ 1380.415191] ? check_preemption_disabled+0x48/0x280 [ 1380.420219] alloc_empty_file+0x72/0x170 [ 1380.424288] path_openat+0x170/0x5150 [ 1380.428095] ? rcu_softirq_qs+0x20/0x20 [ 1380.432078] ? unwind_dump+0x190/0x190 [ 1380.435996] ? graph_lock+0x270/0x270 [ 1380.439826] ? path_lookupat.isra.43+0xc00/0xc00 [ 1380.444586] ? unwind_get_return_address+0x61/0xa0 [ 1380.444607] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1380.444627] ? expand_files.part.8+0x571/0x9a0 [ 1380.454587] ? find_held_lock+0x36/0x1c0 [ 1380.463814] ? __alloc_fd+0x347/0x6e0 [ 1380.467630] ? lock_downgrade+0x900/0x900 [ 1380.471788] ? getname+0x19/0x20 [ 1380.475178] ? kasan_check_read+0x11/0x20 [ 1380.479344] ? do_raw_spin_unlock+0xa7/0x330 [ 1380.483757] ? do_raw_spin_trylock+0x270/0x270 [ 1380.488350] ? __lock_is_held+0xb5/0x140 [ 1380.492413] ? __check_object_size+0xb1/0x782 [ 1380.496930] ? _raw_spin_unlock+0x2c/0x50 [ 1380.501103] ? __alloc_fd+0x347/0x6e0 [ 1380.504936] do_filp_open+0x255/0x380 [ 1380.508764] ? may_open_dev+0x100/0x100 [ 1380.512962] ? get_unused_fd_flags+0x122/0x1a0 03:26:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f0000003ac0)='./file0\x00', 0x0, 0x0) r2 = getegid() readlinkat(r1, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000780)=""/130, 0x82) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r3 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r5 = getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r10, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r12 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) truncate(&(0x7f00000044c0)='./file1\x00', 0xa) close(0xffffffffffffffff) r13 = getpgid(r6) setsockopt$inet_buf(r10, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r12, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000dc0)=0x0) sendmmsg$unix(r1, &(0x7f0000004340)=[{&(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000008c0)="d7881461d6f2cee08bb15430545bfd73e501c6b870f302862807dfba6c45a53ed9c563111ee46f694c840f89a29d8a8a3ec836def3aaa566ec20a2004291f82b26e89e3f6c6510c8094823fef6a0dbc29a29d8fc3e416440350acdc79aac259cb1464f2496c12e9520e5d3a5bf707b360743ca296040d610555049383d71e95592555010e10a6607e16fb68b9902f470774f467f71a4dd58b54a9511a7206949d01ddc41260379803e718da919d996b2eb523524f855e7120927634ca64600b5c2be513d2f203138c023ab50325f403a9d7ecf", 0xd3}, {&(0x7f00000009c0)="c7dc5dabade4aac2294b7a2074d2f3a987b676e95911a65e9402d05a963c981c4543cd581ea6d180b8eeb4890eb5617f2c4730abf174b3c758a9ef66e990f29976365a64d55f2720117276b555c45e2035f7b86fc14ea16bcd429190c58d42f49fcf09116eb4bdcc31447615e39f73378f1fc2f0bbf511d7919dd85535b7cdcb90298c0b350f34721acf43e579e34cc6ea651d5f22e30c3e", 0x98}, {&(0x7f0000000a80)="f2b7390a5365f5eb962c535812fd984e074f5375e62e8b71e82791cc6b52825262f9dfa8ed4422e2cd82caf13ce3fbedc3a506788d9f22255fbe88a559ac667912b355ea36b6c57ec12136a0f9cdf68919ff74221c341436f41921d3f70c068d45a500aa52745814b5a62ca4769f4601c2796bac169d3fa8acaf7f1e3b92de09de808b072a", 0x85}, {&(0x7f0000000b40)="56f2e426a1fa52752aa45ad58f9f6e6fa796af714a2ba1f50a28e99f8c28a538c06c079746b5c7959654b86e8b771ebb66efd1fee6b267b2ef5eb4d170d37b73a51e8ed1cb38299d9685ef3708934a60a9e8bf4c", 0x54}, {&(0x7f0000000bc0)="8e50444e33235eedea8a0d3e00d0aa6825edb70ca99bab1bdae03b8a6b32e5ffd10a9dead64e4c126cfd198f28b17c93cee803d51d7abdb17afa20cef0e29d3c6085e542fe1b4c1aab14e96a22c596786bf0a16544b8b54d6a05cb796bcdff7e24c5c0e448dcced42df3265834cbf55dacc8374a1718cbd7ab5267e0a61b2fd539544260b4f92c89647f2d5692bc4d9f5c", 0x91}, {&(0x7f0000000c80)="0a115955c7cb40402e99e717964741ea108a6f538a3ebe57a0878562fbe520a68e80ab5c28e2000cbdbc54e5a4aa4e9db0bda2a995d3f33df572ffee604647570ad0c4e9c8e3119e66d8805345659adf513668d4c9684a9a9427322c8726c2515d59264964ccb6c4ed66cd098333d31e0b7c4b60a37e50ba3f0498191a9d05a5cd606a8f99dc", 0x86}, {&(0x7f0000000100)="587a9acf0f7d", 0x6}, {&(0x7f0000000240)="d10680b04063aa7ca45bb426cffb0a0c4505822e4bbbfbf6f40d24947646ca", 0x1f}], 0x8, &(0x7f0000000e00)=[@cred={0x20, 0x1, 0x2, r6, r11, r2}, @cred={0x20, 0x1, 0x2, r14, r11, r5}, @rights={0x20, 0x1, 0x1, [r3, r0, r1]}, @rights={0x18, 0x1, 0x1, [r3, r0]}, @rights={0x30, 0x1, 0x1, [r3, r12, r0, r3, r0, r10, r10]}, @rights={0x28, 0x1, 0x1, [r10, r10, r3, r1, r10]}, @rights={0x30, 0x1, 0x1, [r12, r9, r3, r9, r10, r12, r1, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r10, r12, r12, r12, r12]}, @cred={0x20, 0x1, 0x2, r6, r4, r8}], 0x168, 0x1}, {&(0x7f0000000f80)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001000)="e84edfffe41382a263543920bc5c2e88b28da696a190e01503c2cba6d392fd30b35cf632bf595dab90a2bb01b72a9c9e42eec301ff7d90b99a9b2096964684da89d8a0fb2fa6aa9bc8acfa5224a81cf17c852bbebc3560eb324104d36ae76f3658cb05878381a1d46a898c510303d3efa4dfb03e4ffc1db6c958a9e1d16641004f40d089f15b8901202cae404a27d93a5da0636e99bacd5ced82c63f665054808dfc772333045906d46a9a9175f6", 0xae}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="e1e813024f0fa1b820e70fe37cfcb24b9493f1543416e2b8b7f19d279fa06c358c08e7c2493c8d1a4abe9bedc44569dcb7e8409f9be54340c4fe0ba14d3940f83f83e66bbc50d135f25a82c03761e8a19ad0b7b0bb7675dd35dc5847364d465fa48fb5b208f37bf5bce978c5dafe0a86310378de8873c436862bf06363e308231dbaf438f4f71a", 0x87}], 0x3, &(0x7f00000021c0)=ANY=[@ANYBLOB="200000eb7c00846c487b8b0001000000", @ANYRES32=r10, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r9, @ANYBLOB="38000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r12, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r7, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}, {&(0x7f0000002280)=@file={0x0, './bus\x00'}, 0x6e, &(0x7f0000003640)=[{&(0x7f0000002300)="fd944df21efcd11886ad678de93817d1db2c601ecff43a", 0x17}, {&(0x7f0000002340)="5c1030eb5bac75d847", 0x9}, {&(0x7f0000002380)="f1edb60e2c48847817b9e86b3e8bdaba87c06932457f1b6579c5666398e80c4189d34bc208824a010699a86e13e1a18f1e5683f317a86aefec511f480e6f5dbab2834ae890259afa735f3356cf7fd7c31e7fc528425cf0022a5eadbaf40e595a7a1149b2c0141000a368c3f68ffbf6fc6707237d9bca9d550b12da7c394b5a08039fbbb7e97096909502abdd21edd44b6b6e1bdb80ae94f23ea5c8c7fda0c759260d0d89c0df0f02247ac8c68c0cb2274c3f8c740fb6b6486a9f84a9ef4a74bf5e806e1b494f0966fe70fa4238a8a4e29434f2a20ad15b07df5bb6cf57", 0xdd}, {&(0x7f0000002480)="9dc940ccc4223da67a26c322907dc7623d0e6e3ff1638f69a74d2d71f001817425d899d2a8499712d46fafc4e8", 0x2d}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000004a40)="ec15f9d78d9c864e08c72702eec4a4304caa410d4b42c6725270bd604d50c39d369c480e6d2225ca8959bf8cd4fc700d3121189ec3f3effe688fc6817794fc6d8682ad3ffdedf3116721da262e0f42be8b7162603718d0fb0ee91e06f82b056b23b6909eccdf8d7b084c11e33c85ea5a44e82efcaa872cd55885eacc8259e71553efd88ca96128c490fdab239e45607d96431d340a23b28e5870b3ab2a0614012adce8fb13cfaf88a73daceaade6746c7fa95e3a4a8ffa372cd232e0b09566dd2e986042d8e15fb42e03afd2ddaaf7e6c00cd4041e2d4025052ca29415ede0e2f94f70e4bd538631b0f2ba0a2cd6cbd2c3334800a91c75bb672a957f673b88ea304779a5564aaa788e52ddca77e09cb93e62385a8ffc490ec27011112ac219150a1dddacaf4d7bbe7b2d53e4249d92ea75168f7f7a139d13bfd12e3224672d897f9a6e809f9a1d438d6f9e412f876e0b81693fc87b379b43bfb24330883fbe4224d9606044526953703040d574218447fbbccab2eee3a04a245d06d8c2939993c690fd35b9c0a515613f0f09b14b376c72bd2fd2418050872eb3cb1185f491699e3c8f98ceea7f61e6973bc47f66aadadcc8fb00745a9e018894a602cdb796042b8bbed0c9d3cc7a9edac1e7c03e5116d62ea5293387b1423e5b655bb97a953812170327d0336b47b11e75bc47173464d36120f306e60ab16b9e318bbdf049f7ebf582dd33f3757bd11f4dd96e3e3528cdb855cb62abb30f1f5529d67fed904bad04e422c960cee8b93bc37f6294c95ac56f7634feffc5c1c83bcbaf1a8286cb9dcd0cd5bbe1720b5aba200cd842dfc1681ea2265fbbed99cf42c5b08c5c275a217b41cd650286a40be6b532f42d700aed65e7aba30ac5bcc42e918e2538bfbae444ca38d513ae2aa3e3eadad533a1cab4de2ec129a9be0da528c0869eadb9beef1ffc2dbf3591b8a808dafa20c8b31dda009dc7b19ee58e4b059e33ef84d1cd916c66c8df01d5a64d9977e288b812daed59876958f5a824ff88a64441a753a406aebb4e8a5b4c423fe97f04a01af72b7b2f4b0d4b82c2c4b865ca9fc25b195e40bb5d33c2b56fb2ee1888de71315dc8a14930cd6c2e2aa24d0400fd6fd41b63c12dfa2dadc15fe112ce28068076d35058820903500986d4155ccfd86d4377c2aa36543387853176b38345f886e6554afee6cdb5f1319cd936f03a8848612c1008e1c4f97009347bebad0c3d91291666bc59d5d0c9ae1148141df8e0f40e437a28cb1296f81fc940e91712b62cb72334d074c3454b72276dfcd1150f4202bd2064225fce5b47ec4c7d446af00d0db93b272ee778655b79506bec396339df0bd7f63a61e11a1af256bf8bda135574cccc8a5c1f55ac804cfa0453723a76214bd86bea8f412afd0b0a630e9257907813c6623580fdcfdae37bf60bfa05f8328395680bc81af7cbe4a85cf32949066c36f5263cbcd18d61b6f746941a5696083588545f1af9a038a8c97c0eebc03cc0ebf29267562eb55e049d3d7829e28116aee6675ba9d936bc5138f38a1816efa1a74a24ca295a1a92369d15e40e03e9cfde413f81c301a967ac6ef983c9a8c67d89fac85ead26a4241953d114838c2b2174c46aa17c9e319896ca83d89c5a75bd6809ea9fff1096bee0917cb5c72d39b283c101dc4a7f26be7e82281cdeee5222c3253e0649bf8948e0bc8f43f4f64d3567dab669fc4d7aebff8437201e2d91aaeaf83ddee504ecdfd6b684511aff4c142eb0115594f4695aabf0deef2e476e17eb00b799abb9eae80bb03224953005493702e55e62403261938c84d1051bcdab4f5d9605d279b8dd592fadfb2619ced73ac8628d059cd363080490be77a20ea8e322e2dcc972ef495da75223532d689065f1a04eb6e18a02a14487bc7ccafc78422916b369f55cf881099dbd2ada720800e80681feec0f894424b59dc3803446987f8a6f4f2f2fd409f972fa81387de2e14b28c38c5ae804062b22f91b0402ff72cc4674a4cda8b86dac2752b00a9eec80133f3fd38795c8359314c2ad4d138efd81a7cf923cb0c398b57262a4264f7f32cc070300bac8bec3cc6a9c81861f649b24338c39c6fb8b3414a22f01123cd42513c44f75de24b51fc0ce970746b76f49ff24d59ae06790c8a7c2f4ff71492b374f2317680700d73588f59d14a33ebe845e31cdd6c79babb2fe78bd343ffad8824698f8e6ec94ab3318bb880e7c8d9ba4c52481e2b21d205e0c5802f9edc45a814e0d721df370fb53c1b6e47ae3a67c56c727214b85bb6e7d975081c274fd7f0daa34dfcd61c040a1ddfcc6073047a8fe2624c2538c4dc6818bb9d0f459886acfecdfa569ef68d79d86085ebabdf968d474b27ff242b9eca144a44bdb9d1bb1e5da28f04dda89faf060373f699fab4537a5de6999ed1acc654a7823c5961cf1cf3c036ad03ca35c3291393c0a6ba4d97afb2bb429a4dee11294e1ed28aca8942805c5b02b6b5f9256b8ec3e8a76d0a5de10b2c4600b9d04479b7595c441f93a314bdc6f54c19ee612f1c4a0e251930d5176566cd6f24fe193c5cce99361d8a5983bc72e1a51b39b30e91e97ebc5eae5d1c0247efdd2cb6a61b869d5875b90bb4bb51ab9764b0dc8103cfc874a6704af5b39e8b92b07dc7bac86e54b15802cdd7e3b2689617de64ffa0168569d8f204cdda4b00759863e19704fd923dfd608817160b42a5f27f055cb1149307303026c8db2c8a8185938c67fefa95b8c234d5f5975c268607c445a3129012016d8155ddbfc8d91e5a9d20a038d1e611adca8ab2d3d26dc55a9775ff11ae83ba3f9ddb5715aac529aff10ad55a58bba75874e8525a2beb70e12a9e50d348efdf22bab1a616e7a6a7dd324cc3e7d0a9c49286351b81d4f854bf5d3d2985b5d23e2d8d0f6bcd81a6fab0484369b845369c732d1c5d9587a56269fb013aefe614d70b3c573caccc701f416dce7afd2191faa279a0ff89510995d2188ea2a304f711b3ecadabb708ab599dddcd570d330fbf893933cff7e5050c02cdf1204a123f9ef533fb13cb009fd51fc29984d73be9d959767a292769c97f3ee3171322bd7e89f6c71ad4795e197dc7c474e622314431d375d83ba9a24e69c88558c8735d4243f329fa42680960eee1ceac1f281aac3951358230710dc5bf2a5ea74e8005426926185a7d252007a69a370f8eaaaebdc942c63ada251ff164203d7ae335e0346786ef022f9d721b1f9c7ff4b29b2806a9a0ddc91f5895ec74406ce142d75bc743cf56e9af69787e97366c2391d107f23baffca9f33bf43eaab4e61b7c8d4c15ed46c0c4bc0050ca4fb0581c2a890ec89f91847ed79907cf26d53a8329f9c11a4967acc7820aa5970a5fa25cf86a0c514b31579fb2597dfde7638c3eec63474134d8ba1e4b256eb2742100e73d7d08bb75ac7f9d8ec04df234e059859826c0baa63807c3863b7f49969be5893299b015e433028bd62614e57e2e944588a5eaa5eaa21e7b8bca2534fee780401136c81e9a46c101ee04c0af78cd46be5c35bd74752b55f36c7b81736e130bf5bc3c12433fc9be3f607877d5fa159f93b0a34da5edf9698f05f6bfa18707bc9579eddb99069c5cd4a97bc40812d3e2130742ad29642b06ab78d821a44711711d1a24cd7d750e5a19bd81d74dd93eac5b354064b231c98b53bfae012ddeabcfcb65c548e36e622f131ee7fbc1ab6a4ea8ff6378edeb4a433a85cf3faf9c69120e7b0aa395accf9cc8596702fa56679cdbe2be4c4a8ec830b35d440068ae3fb6f5e731a9d3b461f517b3c2dac11c6f323bc71381efb6a203ac3a4b306d3392aec472c9c8cb5d1fd8f74ce735051baf2a983c3790d1d9d0e0be32eed17e835bebfb42bbb5aa3f23d5ee7370df3137ccd8a08a33665703ce41d4ccee9495cf4b56db85981f86ddfba58f2ac644f0a2413a2f1879aa9c4a06d482a8be91e59dbe8a85b5f1f77f8953d1a538b835196a0c507508c7201f9c20869f4cb2eca2e9d18ff14b21eee67aa9ad372c76add0cea5c8bf9d2f6726a39d58c73eed897dd8003e3b05d3fe3e04f8045578dfaf654e1c26b3015609b06a5d745eb090f30b6e2b5ef144176a129ec91362931bbbb3e0094a64e5c6d1f764f3a93c21d1d5aa20b28b2ebcfaa077ea7b6233ef5172bb2d944b23833347972a7526a118048d1a81747b6cc4d5dc21714b10eb45321a67327e25d8ce43d4022309e76b01f27e3f64ce0c13024888dc0321609317b0ecc8d20f8ad86e89fcea82e9421113d223436238a4061d92fedc03836bc0a50ad0d98618c0ff025642b5bed5cf3bbaaa1fdb9c97ca6cc8d88f9edf5c82bab8cda410143204133ba0a7e22197df6d7f6ded33f0ea4c71abd0e5ca665d3264a41d525570309fec3708a66401c0ad09b2adea0bf3da9b74fbbf72a6f051dcb94fb6b3839367a3feee4389dc277e871a5c2871267cfaa19090dcef004cc7221dda84a915ef403e6643e130de3d95748c4ab4cff2c561166499a34446f5cf0d66cdf91fbed8dd1db06f11bcd24165cf21d1e07f5166ed5fb0f8cc26a5f95998459913d63874d01d6ad03db3b77bc485a6aa84e1b6c0548c90d361e980d1bfc240d204ecd496f199fec15e83079433e4cde718199af89905721a186db15c7800f5e3eea33fa294746b19af72a57e173f961be568147c34ed43b8cb11afd597dd1c12efaf3b8ab730069459aa697fb00ac5998a3c276c002d46cee15ad715f78642de4e9f24f0d99ad6b51237f998b831ff5338b321a0c70c2574468f846fa74fc7cff79e9c4d2e09b3ee965bbcadd4e48577e19c51422dfd69e0e5c303300913bfc29141eb32cd7fba67c0fc8b30d3667ec0b73792f77f41899832c7bb77dacc90f2e8959ea88e20a39400d9e7d45e964c444776e7bf071813946d4fb1da45cb47f18155bd7d8d906106f27c90f37db858e69c2f3453d3d151824a4042808f3718c26638d1b01ac96267a5594e847afbf412b7af1d97221046e961d66d830677c41f59d3472f43cc88a551af8836732918fa70f924b42e014930e5c0f3f09ef274d8364caa92921dab879cdd44a9ccf2ef0e912f13f996ca424f2d25bd8ae043127676431e36f6d89bd0bbdbddc058189a24f182016d94dfa869a3fe4b7cf478d70a3412394a61c61e7bc70c4e5a3ee30a61efd32b24178ac29c7e352b09208f9d431bf1a0834631290a98c7e4ab1f66831dbfc542d58f4f2b9b4d8b62d863480a8c231ca7c3875b78823e96d98c14e47f4eecf4997944031c6306a7da49a107d60307db0a5f52f5f6671e4977305150176072a7c2b82f1e313df602c958258b82dd8fa21e84923a1542c3187dd7f50b71dd8268fe32c67f5315abfc5f0d91e1b9ed326687eaa4d28f68964417d3522849b48ebb3a248ef4b554dc07a8e1cec8b23cc0a97e04d198d176f4ad3cc88635acf9c9ed1cff1f32e11d612daef47c0dd4e3fb65b60593858b90c234c9f16fae3a3a90013ba73c78e2a44e7d2855c14e0c78c8313495e20ff947dc597c52ac8a94cc72588e6e27b58ed98d66e1e6374af5ea111b5dd2642e2f1c46d7a4db13f629178f336da0b09cf00a656fddec215234c1bcd4c61c6055f43dc347141b1a52ab433f44bd6edfacdfcf11c30680dbecb476ed7941b77307e1b2beb355af3e267fb79f592d284cbce6dc3a117970441122a8b25dea9027d975f23a7133accea44c4a1512a98dd61bd2481a7e9058a4960e5a7321018c637a0353ff93d0ad93de3601641a158ef2c876fca8581e6dae9a29cb0a4", 0x1000}, {&(0x7f00000034c0)="4e00bb7c16d0b169a27af4e5c050d41d6331b1bc7373dbbffaf0803229bad27b8819a9676bfa219f060208c93090ce825ea6efd673fb7c06933cd840dd7308f73c52e4443d6a39b7eea487d71fce552a72b40ef18c04a0b552162cb091ceb208bd34d1ba6d200aee9165997192514e4aca66d4c41f462952e366c9f6", 0x7c}, {&(0x7f0000003540)="4894c7dbbd643302604bb772653be426aec18bf982c0eb40883e16cdf55788f2f34ee28a6db601d3563d65e944a18ad694235946fe7d9cc863edb799bb94fec635965c77fa41ebc88d6d73ed27df52369df4374c38d9d5996f4d9306f66bce630e95eae10eef40aa53d23e4eb5f0c9a458f7fed1a0bc9ed81b579d13dec6e797884f93f85361f887fbdb60a9c72dcf447d5f62e01ba9ac530922d053ef06a999f8bfb75de344", 0xa6}, {&(0x7f0000003600)="7617c9a7c20de73971b974692c5cd33fbaa5d52e31af3b1bab542f5417f1319f8b2f85c4f380bbf743919fa5", 0x2c}], 0x9, &(0x7f0000003700)=[@rights={0x20, 0x1, 0x1, [r12, r10, r3]}, @cred={0x20, 0x1, 0x2, r6, r4, r2}, @rights={0x28, 0x1, 0x1, [r0, r12, r10, r0, r0, r12]}, @rights={0x38, 0x1, 0x1, [r1, r10, r1, r10, r10, r1, r9, r10, r9]}, @rights={0x18, 0x1, 0x1, [r0, r12]}, @cred={0x20, 0x1, 0x2, r13, r11, r2}], 0xd8, 0x884}, {&(0x7f0000003800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a80)=[{&(0x7f0000005a40)="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", 0x1000}, {&(0x7f0000003880)="8bfe247addf7f9fccdc4fa300eb5eab40cf22b8627586d03cafa38d7913ceb9eaaec29c74be5b1fe71e9d022b146d172075c968b2427d27ecc51b49da40ce2e0bdeb87e614c986bb5af6eb63036095b9b627db3a62b47485b8cbfb32e31dab228b3445137566888ab7967a93cb20dda78b74149cc6", 0x75}, {&(0x7f0000003900)="4eb242dfa5ec8eaa605a9fc8f7cc6f7499568cf61711f1a3465bccc973bc3d10ba3c848947b0da7d8bdaf7594c40d3c43a5489db3079054f26fbea9def7ca724116f8bc174e6e507d8c9a9d5038befde257c2c38af9db1d40e6dbc7a132f5f5810dec24783293b3e2576063232b2d7cc077d3d3f85b3a3585c039abc", 0x7c}, {&(0x7f0000003980)="50621ce43e45fffd368e862e7aff8f297fc8f8e3fa7a71e3ca3ed7f4c2ba559f82e0826f8bfa757b91a5f9f97338f8e2b6848e0679bc96969000c6f8187e815789588f0ffb1731733475c27c5964b7320aaf8788285dfa6bbd3d91aa92c0d5ffa07bd9b4eee372bb91b9f9d7ad6becd4275df4ea755e62ab63d240292714eb4c63be662f5024aac6a3d2efa94c72a80301b45a339f4386534a28b669806d8b9cafb9358c89dcde91831670db453e96d750d68aa18e99b674a10a3fe9c301c3077910643e8e77b9aa100c83934eae9bfd553f5aceff7ed6d47065987b605b4aadca98112ae446517facebf858142c", 0xee}], 0x4, &(0x7f0000003ac0), 0x0, 0x10}, {&(0x7f0000003b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004200)=[{&(0x7f0000003b80)="5b9383f696fdac9e809ea41dee3c35097f2e59b9276b0a2bfa5489c10c900b0a97c7bf235f58412fbddf83a021c9f74366200d5cf5582db54ea3d9e9a811b73408e78ede7351f80cb336ee1adf2bf153d66b9ef8c03997d1c7d3", 0x5a}, {&(0x7f0000003c00)="960652af24b396c0716ff6bb610b888abad2cc647609c3a4cd26c883e580fe05d9ef9e2195cb7cb14900564ffc07750cc5e9bd4c8e89e096f51dcd00697bce734427cf5369f7d8ac25671136b09d7e49f446f6a6a49990e9719847abf1", 0x5d}, {&(0x7f0000003c80)="b31b8f1bd1bd84ac45d8ffd64f535f298a4ebf0f8af80aaf55603585211f5acd7d174b08823973ec0d8135ca0560732ccabf4720250742f537f5c608b8c2cbd169bee89443ed993da0611954d20ee541ff8b6aaee56fb36f9b4cd3996a3b9499956046780aefcda00c73e2f4a4298c4dfb6e3087c4006fc1102d4f9c795a96d081220822296790853097522b54d50c9c80ddbfb24626149216aa55104ef3984ace7b5370bbaae4f8bd702658f64e57ee8615ce4b921e2d08a43badceaf24c6dd293cb24fd30204381f5eccc27c59b9f7e88f742d280f871248da001c481585f7634f414d5b8aa012092a92907cc2e085a54fd657dc9155d217", 0xf9}, {&(0x7f0000003d80)="e1435d534994c2cf5b937d03a5025141829f172aceda798306471be657a8ab40ff76674b76ed0c263edb1db475f833252f6e9103d17fcca53b227dfa4058aaec3386cdffc87a797dadafe32087bb0c36e4fe0161a8ba947236d2874fb1426b593e950fa848799bcfed73e66d1aac59562db9ea2f97eba0a046096ea4757cd97a700485d7fbc60741b2a846c041bd1948f58e8744fed9e16c74b62d7513ab7207c455", 0xa2}, {&(0x7f0000003e40)="db3953353dbd113fb52af3b46be1d47fd7fa82c975d14f03e86a7ae1b75ae7f991ad960bb67d864ad3f98d51504590d56da3d35c2ff85d66d4ac6f9b6501caaf1d985bbc0682d90a548e370b62f4b1e8b626adeb544bdaaadbf266e8db20778bf8fefa0a7351c6420d9e06ae69cd182616f839d91e374a2a6e8536c181a5f11a6dfb0e4f82f965e6aef8a74775822d3433399baf1f7112d243f99da1fde1d62aa1d2359d14cea261518e5b8ab1cfc245bf211d173e9954b8cf67fee222f7b47d38d66630ba7ecc27b118bbac", 0xcc}, {&(0x7f0000004080)="f7088826c8f7233ccd4f327a7687866747e2f323dabaf67c26aa46dedae330509742e62d49f59e7eb507c5d20ac05ff002e66e255a0df4ced62dff4415aa96015e378a1ec2e9ac595e124e952f49057635c55004729715ddc2e5dd0ea46e055656291971977a788eb49a7072e8e820c6b2dd8fcd3bedb528f4b8000145a70282a86ecfde82d19998836064dc2aa4adc22c3c27e157cf4c094ad0", 0x9a}, {&(0x7f0000004140)="40c9a68d5a449119387bf502efdb4e2a7546f754d965cc3bdd5756a9f630028f7a788d818e9a231dd795413fe7cb40bccd6ce67d7680952650317b3d64d3765f8182872501f8afc6f2e6e68505f4709ee8051957088e7db194413f570a10ea9dfa4dc58ef6bcddae4ba0d675d3f1183213e93587032ec701e5ac9835017561e8078a58e613882f4557b436d4d0977a64a8e2f9cb11c094dc2c152639c13ea9d00c2208ab9759a4f8e15ca51142863dda2553df7a", 0xb4}], 0x7, &(0x7f0000004280)=[@rights={0x18, 0x1, 0x1, [r10, r1]}, @rights={0x20, 0x1, 0x1, [r12, r12, r1, r1]}, @cred={0x20, 0x1, 0x2, r13, r4, r8}, @rights={0x20, 0x1, 0x1, [r3, r0, r3, r12]}, @cred={0x20, 0x1, 0x2, r13, r7, r5}, @cred={0x20, 0x1, 0x2, r13, r11, r2}], 0xb8, 0x51}], 0x5, 0x10) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 1380.517568] ? __alloc_fd+0x6e0/0x6e0 [ 1380.521403] ? __lock_is_held+0xb5/0x140 [ 1380.525506] do_sys_open+0x568/0x700 [ 1380.529243] ? filp_open+0x80/0x80 [ 1380.532813] ? trace_hardirqs_off_caller+0x300/0x300 [ 1380.538033] ? do_sys_ftruncate+0x449/0x550 [ 1380.542378] __x64_sys_open+0x7e/0xc0 [ 1380.546205] do_syscall_64+0x1b9/0x820 [ 1380.550118] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1380.550142] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1380.550155] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1380.550173] ? trace_hardirqs_on_caller+0x310/0x310 [ 1380.550188] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1380.550203] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1380.550223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1380.550244] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1380.550263] RIP: 0033:0x4111a1 [ 1380.560553] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 03:26:11 executing program 3 (fault-call:2 fault-nth:10): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:11 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1380.560562] RSP: 002b:00007f00d882ea80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1380.560576] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004111a1 [ 1380.560584] RDX: 00007f00d882eafa RSI: 0000000000000002 RDI: 00007f00d882eaf0 [ 1380.560592] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1380.560600] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000006 [ 1380.560608] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1380.743890] FAULT_INJECTION: forcing a failure. [ 1380.743890] name failslab, interval 1, probability 0, space 0, times 0 [ 1380.755913] CPU: 0 PID: 8071 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1380.764451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.773831] Call Trace: [ 1380.776448] dump_stack+0x244/0x39d [ 1380.780102] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1380.785322] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.790889] should_fail.cold.4+0xa/0x17 [ 1380.794981] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1380.800098] ? pick_next_task_fair+0xa35/0x1c90 [ 1380.804798] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1380.809832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.815381] ? graph_lock+0x270/0x270 [ 1380.819191] ? print_usage_bug+0xc0/0xc0 [ 1380.823263] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1380.829337] ? find_held_lock+0x36/0x1c0 [ 1380.833414] ? __lock_is_held+0xb5/0x140 [ 1380.837503] ? _raw_spin_unlock_irq+0x27/0x80 [ 1380.842012] ? perf_trace_sched_process_exec+0x860/0x860 [ 1380.847486] __should_failslab+0x124/0x180 [ 1380.851740] should_failslab+0x9/0x14 [ 1380.855553] kmem_cache_alloc+0x2be/0x730 [ 1380.859746] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1380.864777] __kernfs_new_node+0x127/0x8d0 [ 1380.869047] ? __switch_to_asm+0x34/0x70 [ 1380.873126] ? __switch_to_asm+0x34/0x70 [ 1380.877197] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1380.882403] ? __switch_to_asm+0x34/0x70 [ 1380.886473] ? __switch_to_asm+0x34/0x70 [ 1380.890543] ? __switch_to_asm+0x40/0x70 [ 1380.894614] ? __switch_to_asm+0x34/0x70 [ 1380.898681] ? __switch_to_asm+0x40/0x70 [ 1380.902750] ? __switch_to_asm+0x34/0x70 [ 1380.906824] ? __switch_to_asm+0x40/0x70 [ 1380.910901] ? __schedule+0x8d7/0x21d0 [ 1380.914818] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1380.919945] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1380.925064] ? graph_lock+0x270/0x270 [ 1380.928876] ? graph_lock+0x270/0x270 [ 1380.932692] ? enqueue_task_fair+0x24d/0xa50 [ 1380.937118] ? find_held_lock+0x36/0x1c0 [ 1380.941200] kernfs_new_node+0x95/0x120 [ 1380.945197] kernfs_create_dir_ns+0x4d/0x160 [ 1380.949716] internal_create_group+0x5fc/0xd80 [ 1380.954323] ? remove_files.isra.1+0x190/0x190 [ 1380.958929] ? up_write+0x7b/0x220 [ 1380.962568] ? down_write_nested+0x130/0x130 [ 1380.966990] ? down_read+0x120/0x120 [ 1380.970732] sysfs_create_group+0x1f/0x30 [ 1380.974900] lo_ioctl+0x166a/0x22a0 [ 1380.978559] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1380.982466] ? find_held_lock+0x36/0x1c0 [ 1380.986547] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1380.990447] blkdev_ioctl+0x98e/0x21b0 [ 1380.994350] ? blkpg_ioctl+0xc10/0xc10 [ 1380.998249] ? lock_downgrade+0x900/0x900 [ 1381.002404] ? check_preemption_disabled+0x48/0x280 [ 1381.007438] ? kasan_check_read+0x11/0x20 [ 1381.011599] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1381.016898] ? rcu_read_unlock_special+0x370/0x370 [ 1381.021857] ? __fget+0x4d1/0x740 [ 1381.025328] ? ksys_dup3+0x680/0x680 [ 1381.029065] block_ioctl+0xee/0x130 [ 1381.032699] ? blkdev_fallocate+0x400/0x400 [ 1381.037032] do_vfs_ioctl+0x1de/0x1790 [ 1381.040986] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1381.046548] ? ioctl_preallocate+0x300/0x300 [ 1381.050967] ? __fget_light+0x2e9/0x430 [ 1381.054966] ? fget_raw+0x20/0x20 [ 1381.058434] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1381.063460] ? kmem_cache_free+0x24f/0x290 [ 1381.067703] ? putname+0xf7/0x130 [ 1381.071171] ? do_syscall_64+0x9a/0x820 [ 1381.075151] ? do_syscall_64+0x9a/0x820 [ 1381.079136] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1381.083733] ? security_file_ioctl+0x94/0xc0 [ 1381.088154] ksys_ioctl+0xa9/0xd0 [ 1381.091621] __x64_sys_ioctl+0x73/0xb0 [ 1381.095521] do_syscall_64+0x1b9/0x820 [ 1381.099416] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1381.104794] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1381.109732] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1381.114592] ? trace_hardirqs_on_caller+0x310/0x310 [ 1381.119707] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1381.124731] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1381.129762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1381.134628] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1381.139825] RIP: 0033:0x4573d7 [ 1381.143030] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1381.161965] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.169692] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1381.176977] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1381.184255] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1381.191551] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1381.198853] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1381.216623] FAT-fs (loop3): bogus number of reserved sectors [ 1381.226189] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x5451, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:13 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:13 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfsT', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:13 executing program 3 (fault-call:2 fault-nth:11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d2c212c346b28b8ed2fd7d27681cef5a0bf20ccc8c0a04081fe895e76ad845629fe32dc99bf4ae70220cf6fb5e523163832df03d581bf7f54f84051055d6235a17a3b31437ade43038bb5c0b95cf1c011a0ed2660602f040eb9a411773839f6d3abd56fee48d805e80085eec89841eb9c4283624e81aef2ea2c31886c06e235cfc4ef84a5647eec51ac88cac1267460396e6515bf36b8faf4c5e8afb15c2f762b58ab746a14ee967af86c28c4383400", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1382.208630] FAULT_INJECTION: forcing a failure. [ 1382.208630] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.236093] CPU: 1 PID: 8094 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1382.244834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.254219] Call Trace: [ 1382.256856] dump_stack+0x244/0x39d [ 1382.260525] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1382.265749] ? account_entity_enqueue+0x3a3/0x660 [ 1382.270633] should_fail.cold.4+0xa/0x17 [ 1382.274705] ? __lock_is_held+0xb5/0x140 [ 1382.278795] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1382.283927] ? graph_lock+0x270/0x270 [ 1382.287828] ? print_usage_bug+0xc0/0xc0 [ 1382.291917] ? find_held_lock+0x36/0x1c0 [ 1382.296004] ? __lock_is_held+0xb5/0x140 [ 1382.300175] ? reweight_entity+0x10f0/0x10f0 [ 1382.304689] ? perf_trace_sched_process_exec+0x860/0x860 [ 1382.310169] __should_failslab+0x124/0x180 [ 1382.314433] should_failslab+0x9/0x14 [ 1382.318245] kmem_cache_alloc+0x2be/0x730 [ 1382.322412] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1382.327439] __kernfs_new_node+0x127/0x8d0 [ 1382.331698] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1382.336481] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1382.341596] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1382.346715] ? graph_lock+0x270/0x270 [ 1382.350525] ? print_usage_bug+0xc0/0xc0 [ 1382.354596] ? graph_lock+0x270/0x270 03:26:13 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f00000002c0)="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", 0x0}, 0x18) [ 1382.358415] ? enqueue_task_fair+0x24d/0xa50 [ 1382.362840] ? find_held_lock+0x36/0x1c0 [ 1382.366924] kernfs_new_node+0x95/0x120 [ 1382.370919] kernfs_create_dir_ns+0x4d/0x160 [ 1382.375342] internal_create_group+0x5fc/0xd80 [ 1382.379948] ? remove_files.isra.1+0x190/0x190 [ 1382.384536] ? up_write+0x7b/0x220 [ 1382.388088] ? down_write_nested+0x130/0x130 [ 1382.392504] ? down_read+0x120/0x120 [ 1382.396238] sysfs_create_group+0x1f/0x30 [ 1382.400405] lo_ioctl+0x166a/0x22a0 [ 1382.404057] ? lo_rw_aio+0x1ef0/0x1ef0 03:26:13 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r4 = semget(0x0, 0x1, 0x20) semctl$GETZCNT(r4, 0x0, 0xf, &(0x7f0000000780)=""/207) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1382.407959] ? find_held_lock+0x36/0x1c0 [ 1382.412056] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1382.415958] blkdev_ioctl+0x98e/0x21b0 [ 1382.419862] ? blkpg_ioctl+0xc10/0xc10 [ 1382.423760] ? lock_downgrade+0x900/0x900 [ 1382.427928] ? check_preemption_disabled+0x48/0x280 [ 1382.432963] ? kasan_check_read+0x11/0x20 [ 1382.437121] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1382.442492] ? rcu_read_unlock_special+0x370/0x370 [ 1382.447440] ? __fget+0x4d1/0x740 [ 1382.450906] ? ksys_dup3+0x680/0x680 [ 1382.454658] block_ioctl+0xee/0x130 [ 1382.458298] ? blkdev_fallocate+0x400/0x400 [ 1382.462635] do_vfs_ioctl+0x1de/0x1790 [ 1382.466535] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1382.472172] ? ioctl_preallocate+0x300/0x300 [ 1382.477355] ? __fget_light+0x2e9/0x430 [ 1382.481339] ? fget_raw+0x20/0x20 [ 1382.484813] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1382.489836] ? kmem_cache_free+0x24f/0x290 [ 1382.494078] ? putname+0xf7/0x130 [ 1382.497544] ? do_syscall_64+0x9a/0x820 [ 1382.501522] ? do_syscall_64+0x9a/0x820 [ 1382.505506] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1382.510112] ? security_file_ioctl+0x94/0xc0 [ 1382.514535] ksys_ioctl+0xa9/0xd0 [ 1382.518001] __x64_sys_ioctl+0x73/0xb0 [ 1382.521900] do_syscall_64+0x1b9/0x820 [ 1382.525809] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1382.531186] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1382.536130] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1382.540986] ? trace_hardirqs_on_caller+0x310/0x310 [ 1382.546014] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1382.551041] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1382.556071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1382.560940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1382.566140] RIP: 0033:0x4573d7 [ 1382.569376] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1382.588298] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.596019] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1382.603297] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1382.610572] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1382.617855] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1382.625132] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:13 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1382.700917] FAT-fs (loop3): bogus number of reserved sectors [ 1382.734995] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:13 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:13 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) fallocate(r0, 0x12, 0x8, 0x8) 03:26:14 executing program 3 (fault-call:2 fault-nth:12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1382.974171] XFS (loop2): Invalid superblock magic number [ 1382.987896] FAULT_INJECTION: forcing a failure. [ 1382.987896] name failslab, interval 1, probability 0, space 0, times 0 [ 1383.021879] CPU: 0 PID: 8141 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1383.030451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1383.039823] Call Trace: [ 1383.042435] dump_stack+0x244/0x39d [ 1383.046087] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1383.051310] should_fail.cold.4+0xa/0x17 [ 1383.055391] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1383.060515] ? lock_release+0xa10/0xa10 [ 1383.067536] ? perf_trace_sched_process_exec+0x860/0x860 [ 1383.073178] ? graph_lock+0x270/0x270 [ 1383.076995] ? find_held_lock+0x36/0x1c0 [ 1383.081078] ? __lock_is_held+0xb5/0x140 [ 1383.085160] ? perf_trace_sched_process_exec+0x860/0x860 [ 1383.090614] ? kernfs_activate+0x21a/0x2c0 [ 1383.094869] __should_failslab+0x124/0x180 [ 1383.099116] should_failslab+0x9/0x14 [ 1383.102925] kmem_cache_alloc+0x2be/0x730 [ 1383.107081] ? lock_downgrade+0x900/0x900 [ 1383.111241] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1383.116274] __kernfs_new_node+0x127/0x8d0 [ 1383.120524] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1383.125286] ? graph_lock+0x270/0x270 [ 1383.129106] ? __lock_is_held+0xb5/0x140 [ 1383.133174] ? wait_for_completion+0x8a0/0x8a0 [ 1383.137861] ? mutex_unlock+0xd/0x10 [ 1383.141594] ? kernfs_activate+0x21a/0x2c0 [ 1383.145836] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1383.150690] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1383.156240] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1383.160851] kernfs_new_node+0x95/0x120 [ 1383.164840] __kernfs_create_file+0x5a/0x340 [ 1383.169350] sysfs_add_file_mode_ns+0x222/0x530 [ 1383.174053] internal_create_group+0x3df/0xd80 [ 1383.178654] ? remove_files.isra.1+0x190/0x190 [ 1383.183245] ? up_write+0x7b/0x220 [ 1383.186804] ? down_write_nested+0x130/0x130 [ 1383.191220] ? down_read+0x120/0x120 [ 1383.194956] sysfs_create_group+0x1f/0x30 [ 1383.199116] lo_ioctl+0x166a/0x22a0 [ 1383.202761] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1383.206660] ? find_held_lock+0x36/0x1c0 [ 1383.210740] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1383.214644] blkdev_ioctl+0x98e/0x21b0 [ 1383.218539] ? blkpg_ioctl+0xc10/0xc10 [ 1383.222432] ? lock_downgrade+0x900/0x900 [ 1383.226584] ? check_preemption_disabled+0x48/0x280 [ 1383.231614] ? kasan_check_read+0x11/0x20 [ 1383.236247] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1383.241535] ? rcu_read_unlock_special+0x370/0x370 [ 1383.246571] ? __fget+0x4d1/0x740 [ 1383.250047] ? ksys_dup3+0x680/0x680 [ 1383.253788] block_ioctl+0xee/0x130 [ 1383.257424] ? blkdev_fallocate+0x400/0x400 [ 1383.261759] do_vfs_ioctl+0x1de/0x1790 [ 1383.265661] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1383.271221] ? ioctl_preallocate+0x300/0x300 [ 1383.275641] ? __fget_light+0x2e9/0x430 [ 1383.279641] ? fget_raw+0x20/0x20 [ 1383.283111] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1383.288484] ? kmem_cache_free+0x24f/0x290 [ 1383.292733] ? putname+0xf7/0x130 [ 1383.296199] ? do_syscall_64+0x9a/0x820 [ 1383.300182] ? do_syscall_64+0x9a/0x820 [ 1383.304179] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1383.308773] ? security_file_ioctl+0x94/0xc0 [ 1383.313196] ksys_ioctl+0xa9/0xd0 [ 1383.316663] __x64_sys_ioctl+0x73/0xb0 [ 1383.320608] do_syscall_64+0x1b9/0x820 [ 1383.324626] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1383.330004] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1383.334948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1383.339805] ? trace_hardirqs_on_caller+0x310/0x310 [ 1383.344932] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1383.349959] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1383.355078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1383.359944] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1383.365141] RIP: 0033:0x4573d7 [ 1383.368346] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1383.387257] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.394976] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1383.402532] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1383.409808] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1383.417084] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1383.424364] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1383.496073] FAT-fs (loop3): bogus number of reserved sectors [ 1383.514880] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40049409, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:15 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000200)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept(r0, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}}}, &(0x7f00000003c0)=0xe8) r5 = creat(&(0x7f0000000640)='./file0\x00', 0x20) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_netfilter(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x19c, 0x0, 0x3, 0x800, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0x2}, [@nested={0xd4, 0x9, [@typed={0xc, 0x12, @u64=0x1}, @typed={0x8, 0x1a, @fd=r0}, @typed={0x8, 0x20, @pid=r2}, @typed={0x8, 0x9, @uid=r3}, @typed={0xac, 0x8, @binary="cec0665e190ca574ed211ded645525064351e98a0694bc358bb3930ff61e4152d6c046fbb4564eef2bfc5c2ccdd95965c0c069f5d31e63ebf8d16499a45b7b78c3b83612d30bad3e9f4cea32ac26a4ceddae02834781fd35ce43e6449112497a68495c7bdfef5e46bd6b8922ca2b8511c32b15a6916ef429aa01989b6dad7242dac474db97cab8058dacf3e81d4d5e41000be80570f9bbb1959d665ee3e2d3859793aee811127e"}]}, @typed={0x8, 0x3d, @uid=r4}, @typed={0x8, 0x37, @str='\x00'}, @generic="ae6f60fa0e072809c28e0bf94342f0240a5a8f9fa22d183ea79ba15e32496b47bf690db0cf50168be20d9bb8b5e7d9aeaa8f0dbc3f1e67eb9aa754bd13d4da0895e5afbbdbff6f7659872e6b1b0af53f0b0d194f53df3317f7ce446617e5602cfa16cfd4429c3a3e431cceab4748c28431adcf1f00bd1fe632a429957b8f70e883d5d455634bbfcccc6d05c769bcdd64338f4399a1c7eeeb291908442ef2d8002606b6"]}, 0x19c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), 0x0}, 0x18) 03:26:15 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:15 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd-', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:15 executing program 3 (fault-call:2 fault-nth:13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1384.543862] FAULT_INJECTION: forcing a failure. [ 1384.543862] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.582642] CPU: 0 PID: 8161 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1384.591233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.600616] Call Trace: [ 1384.603237] dump_stack+0x244/0x39d [ 1384.606910] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1384.612137] ? radix_tree_tag_set+0x3d0/0x3d0 [ 1384.616676] should_fail.cold.4+0xa/0x17 [ 1384.620776] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1384.625891] ? kernfs_activate+0x8e/0x2c0 [ 1384.630062] ? graph_lock+0x270/0x270 [ 1384.633881] ? lock_release+0xa10/0xa10 [ 1384.637871] ? perf_trace_sched_process_exec+0x860/0x860 [ 1384.643443] ? find_held_lock+0x36/0x1c0 [ 1384.647645] ? __lock_is_held+0xb5/0x140 [ 1384.651725] ? xxh32_update+0x348/0x6e0 [ 1384.655720] ? perf_trace_sched_process_exec+0x860/0x860 [ 1384.661181] ? find_held_lock+0x36/0x1c0 [ 1384.665262] __should_failslab+0x124/0x180 [ 1384.669516] should_failslab+0x9/0x14 [ 1384.673323] kmem_cache_alloc+0x2be/0x730 [ 1384.677475] ? find_held_lock+0x36/0x1c0 [ 1384.681549] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1384.686591] __kernfs_new_node+0x127/0x8d0 [ 1384.690837] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1384.695643] ? kasan_check_write+0x14/0x20 [ 1384.699910] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1384.704854] ? __kernfs_new_node+0x697/0x8d0 [ 1384.709285] ? wait_for_completion+0x8a0/0x8a0 [ 1384.713891] ? graph_lock+0x270/0x270 [ 1384.717713] ? kasan_check_write+0x14/0x20 [ 1384.721963] ? __lock_is_held+0xb5/0x140 [ 1384.726033] ? wait_for_completion+0x8a0/0x8a0 [ 1384.730724] ? mutex_unlock+0xd/0x10 [ 1384.734459] ? kernfs_activate+0x21a/0x2c0 [ 1384.738709] kernfs_new_node+0x95/0x120 [ 1384.742699] __kernfs_create_file+0x5a/0x340 [ 1384.747126] sysfs_add_file_mode_ns+0x222/0x530 [ 1384.751825] internal_create_group+0x3df/0xd80 [ 1384.756465] ? remove_files.isra.1+0x190/0x190 [ 1384.761060] ? up_write+0x7b/0x220 [ 1384.764606] ? down_write_nested+0x130/0x130 [ 1384.769022] ? down_read+0x120/0x120 [ 1384.772760] sysfs_create_group+0x1f/0x30 [ 1384.776918] lo_ioctl+0x166a/0x22a0 [ 1384.780569] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1384.784470] ? find_held_lock+0x36/0x1c0 [ 1384.788541] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1384.792444] blkdev_ioctl+0x98e/0x21b0 [ 1384.796344] ? blkpg_ioctl+0xc10/0xc10 [ 1384.800237] ? lock_downgrade+0x900/0x900 [ 1384.804393] ? check_preemption_disabled+0x48/0x280 [ 1384.809424] ? kasan_check_read+0x11/0x20 [ 1384.813586] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1384.818867] ? rcu_read_unlock_special+0x370/0x370 [ 1384.823818] ? __fget+0x4d1/0x740 [ 1384.827387] ? ksys_dup3+0x680/0x680 [ 1384.831123] block_ioctl+0xee/0x130 [ 1384.834753] ? blkdev_fallocate+0x400/0x400 [ 1384.839081] do_vfs_ioctl+0x1de/0x1790 [ 1384.842978] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1384.848522] ? ioctl_preallocate+0x300/0x300 [ 1384.852943] ? __fget_light+0x2e9/0x430 [ 1384.856923] ? fget_raw+0x20/0x20 [ 1384.860495] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1384.865517] ? kmem_cache_free+0x24f/0x290 [ 1384.869763] ? putname+0xf7/0x130 [ 1384.873223] ? do_syscall_64+0x9a/0x820 [ 1384.877201] ? do_syscall_64+0x9a/0x820 [ 1384.881319] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1384.885910] ? security_file_ioctl+0x94/0xc0 [ 1384.890325] ksys_ioctl+0xa9/0xd0 [ 1384.893789] __x64_sys_ioctl+0x73/0xb0 [ 1384.897688] do_syscall_64+0x1b9/0x820 [ 1384.901586] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1384.906959] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1384.911897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1384.916752] ? trace_hardirqs_on_caller+0x310/0x310 [ 1384.921774] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1384.926797] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1384.931822] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1384.936695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1384.941895] RIP: 0033:0x4573d7 [ 1384.945095] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1384.964000] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.971713] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1384.978986] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1384.986256] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 03:26:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) 03:26:15 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1384.993528] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1385.000812] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:16 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000780)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001900)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000001a00)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a40)={'veth0_to_bond\x00', r2}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000005}, 0xc, &(0x7f00000026c0)={&(0x7f0000001a80)={0xc30, r4, 0x11, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x170, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x69d2}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x19c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x4}}, {{0x8, 0x1, r2}, {0x1a8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80aa}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x1ec, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x78}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3b}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x21c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x435}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x9, 0x10001, 0x6, 0x8}, {0x5, 0x6, 0x100, 0x2}]}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x8ea, 0x9, 0xae, 0xf3}, {0x5, 0xf1, 0x7, 0x2}, {0x2, 0x4, 0x3, 0x1}, {0x12b, 0x2, 0x0, 0xffffffffffff1dfe}, {0x2, 0x3, 0xff, 0x1}, {0x2, 0x3, 0x6, 0x3}, {0x3, 0x1ff, 0x40e, 0x7}, {0x80000001, 0x8, 0x0, 0x3}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r2}, {0x174, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x450fb256}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0xfffffffffffffffa, 0x6b9c, 0xffff, 0x100000000}, {0x8, 0x7, 0x4, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0xb0, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0xc30}, 0x1, 0x0, 0x0, 0x8890}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000800)='/proc/self/net/pfkey\x00', 0x80000, 0x0) preadv(r7, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3f, 0x2) setsockopt$inet_buf(r7, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r8, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282485966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd20db01c25fdab24b4913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d391ecded4cbe9ebe7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc40000000000000000"], 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r9, 0xc0206434, &(0x7f0000000240)={0x5, 0x0, 0x2, 0x6}) ioctl$DRM_IOCTL_AGP_BIND(r9, 0x40106436, &(0x7f0000000480)={r10, 0x81}) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1385.046457] FAT-fs (loop3): bogus number of reserved sectors [ 1385.091685] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1385.170637] XFS (loop2): Invalid superblock magic number 03:26:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfb, 0xa0000) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'gre0\x00', 0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) 03:26:16 executing program 3 (fault-call:2 fault-nth:14): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blklize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) fadvise64(r0, 0x0, 0x9, 0x3) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r4) write$P9_RSYMLINK(r5, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x1, 0x0, 0x3}}, 0x14) setsockopt$inet_buf(r5, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r6, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) [ 1385.373744] FAULT_INJECTION: forcing a failure. [ 1385.373744] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.401807] CPU: 0 PID: 8209 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1385.410658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.420061] Call Trace: [ 1385.422681] dump_stack+0x244/0x39d [ 1385.426340] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1385.431591] should_fail.cold.4+0xa/0x17 [ 1385.435673] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1385.440793] ? lock_release+0xa10/0xa10 [ 1385.444781] ? perf_trace_sched_process_exec+0x860/0x860 [ 1385.450258] ? graph_lock+0x270/0x270 [ 1385.454094] ? find_held_lock+0x36/0x1c0 [ 1385.458178] ? __lock_is_held+0xb5/0x140 [ 1385.462264] ? perf_trace_sched_process_exec+0x860/0x860 [ 1385.467726] ? kernfs_activate+0x21a/0x2c0 [ 1385.471980] __should_failslab+0x124/0x180 [ 1385.476232] should_failslab+0x9/0x14 [ 1385.480214] kmem_cache_alloc+0x2be/0x730 [ 1385.484375] ? lock_downgrade+0x900/0x900 [ 1385.488541] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1385.493567] __kernfs_new_node+0x127/0x8d0 [ 1385.497821] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1385.502584] ? graph_lock+0x270/0x270 [ 1385.506402] ? __lock_is_held+0xb5/0x140 [ 1385.510563] ? wait_for_completion+0x8a0/0x8a0 [ 1385.515169] ? mutex_unlock+0xd/0x10 [ 1385.518893] ? kernfs_activate+0x21a/0x2c0 [ 1385.523141] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1385.527996] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1385.533541] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1385.538137] kernfs_new_node+0x95/0x120 [ 1385.542124] __kernfs_create_file+0x5a/0x340 [ 1385.546552] sysfs_add_file_mode_ns+0x222/0x530 [ 1385.551242] internal_create_group+0x3df/0xd80 [ 1385.555854] ? remove_files.isra.1+0x190/0x190 [ 1385.560441] ? up_write+0x7b/0x220 [ 1385.563994] ? down_write_nested+0x130/0x130 [ 1385.568408] ? down_read+0x120/0x120 [ 1385.572231] sysfs_create_group+0x1f/0x30 [ 1385.576394] lo_ioctl+0x166a/0x22a0 [ 1385.580039] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1385.583934] ? find_held_lock+0x36/0x1c0 [ 1385.588004] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1385.591902] blkdev_ioctl+0x98e/0x21b0 [ 1385.595805] ? blkpg_ioctl+0xc10/0xc10 [ 1385.599701] ? lock_downgrade+0x900/0x900 [ 1385.603861] ? check_preemption_disabled+0x48/0x280 [ 1385.608896] ? kasan_check_read+0x11/0x20 [ 1385.613055] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1385.618339] ? rcu_read_unlock_special+0x370/0x370 [ 1385.623286] ? __fget+0x4d1/0x740 [ 1385.626755] ? ksys_dup3+0x680/0x680 [ 1385.630492] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1385.635948] ? retint_kernel+0x1b/0x2d [ 1385.639849] ? trace_hardirqs_on+0x310/0x310 [ 1385.644278] block_ioctl+0xee/0x130 [ 1385.647918] ? blkdev_fallocate+0x400/0x400 [ 1385.652247] do_vfs_ioctl+0x1de/0x1790 [ 1385.656142] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1385.661691] ? ioctl_preallocate+0x300/0x300 [ 1385.666111] ? __fget_light+0x2e9/0x430 [ 1385.670089] ? fget_raw+0x20/0x20 [ 1385.673551] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1385.678578] ? kmem_cache_free+0x24f/0x290 [ 1385.682823] ? putname+0xf7/0x130 [ 1385.686293] ? do_syscall_64+0x9a/0x820 [ 1385.690287] ? do_syscall_64+0x9a/0x820 [ 1385.694272] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1385.698873] ? security_file_ioctl+0x94/0xc0 [ 1385.703293] ksys_ioctl+0xa9/0xd0 [ 1385.706759] __x64_sys_ioctl+0x73/0xb0 [ 1385.710663] do_syscall_64+0x1b9/0x820 [ 1385.714645] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1385.720024] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1385.724978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1385.729833] ? trace_hardirqs_on_caller+0x310/0x310 [ 1385.734858] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1385.739887] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1385.744918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1385.749788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1385.754988] RIP: 0033:0x4573d7 [ 1385.758191] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1385.777185] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.784903] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1385.792181] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1385.799453] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1385.806740] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1385.814024] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1385.883291] FAT-fs (loop3): bogus number of reserved sectors [ 1385.898251] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0xc0045878, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:17 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:17 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:17 executing program 3 (fault-call:2 fault-nth:15): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:17 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x5, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:17 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) sendmsg$kcm(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="0d823631663a72febe86da7932fba3b50016c67373dc8854b8e8166024a886147bf042ae264c318d7b74acf3e63cfd8b39810f6bdd5757e754c1150b57854da490b4c7486ac0076fc578480d28c4cde35f2ed197a37527df09fc071861dc0627a40291d9e6f57634c8b592b5ef6976eeba1df51627a8b440074fb0d7ed2f2bbec2bebdf363e800578bbc1b2f5896422a30f52b6d04e7801725b45dcb87fc3acb8a5e9ca28a24e35a8c5a524f3aeeaedd5cc7723162bb3d668766b3d86c4019810d63687c377c299b42069c74b7944e7ce2e0ae277431a6ed2163348e916fb2f01f57d0bf7869d49ceb9e87e4f1102b9ed0", 0xf1}, {&(0x7f0000000240)="987e3a0e87da30e2a704773e6b00df5196a960ff2345d12a6f74c4ad845b06d8a54abf2850fed3e3eef17b42e91e54b6c5d7638407a7ae86", 0x38}, {&(0x7f0000000880)="eb42601d4af58e7fd3c658028662f7b2b97446dadfe41fa9d3cbf39165830c42a7eb01dbf504be8574a19b83354cce42028d440b151e540cbdd3e79ff42f", 0x3e}], 0x3, &(0x7f0000000900)=[{0x68, 0x107, 0x4, "db1e0b21ab58fee13f0dd16562a98ebb85f256cfe66f2db7f521f2737ec06bf4b763f7a547a5c052c07fb6228d0030d7657a24203e5c348d4bc2d13035c27ac843ad4b5974ec3ed088326de3a3e8f1762f"}, {0x48, 0x29, 0x6, "65a2014072f17e1ffd345cfd67c1ae88865536af409c638f847db5bd13cc7596aa234af0bdf74c3734d4e99ddf41ba63a8c8b2d00f26"}, {0xd0, 0x118, 0x8, "e9b7c304e44c5e56013b433ba12d456d4b97bb70dab0c190a5d7c1cb829d947c0e9f6ce5df8c688ed088544b8b242333f4d98236957bc267e5ffa386c447f2aca530691496774826493efe4f292133422f76bd43fb7b15b631f084421953b87ef1a7a8c5a5ea48c39db59b21bfecae7ebc0ef39538084d37171b965b2c6869be9764b9ba24bf99120b3ffa609b377522b5296139f708791d7b31da05757757f535a7952c8a08483842804bc440ee0d73413806f9eb552fb8ad233a14"}, {0x10, 0x39b641f71cfea5ed, 0xff}], 0x190, 0x800}, 0x10) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654ffc8bab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0e52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000480)=0x94) [ 1386.912947] FAULT_INJECTION: forcing a failure. [ 1386.912947] name failslab, interval 1, probability 0, space 0, times 0 [ 1386.933923] CPU: 0 PID: 8235 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1386.942577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.952037] Call Trace: [ 1386.954652] dump_stack+0x244/0x39d [ 1386.958361] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1386.963579] should_fail.cold.4+0xa/0x17 [ 1386.967659] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1386.972791] ? lock_release+0xa10/0xa10 [ 1386.976788] ? perf_trace_sched_process_exec+0x860/0x860 [ 1386.982954] ? graph_lock+0x270/0x270 [ 1386.986784] ? find_held_lock+0x36/0x1c0 [ 1386.990870] ? __lock_is_held+0xb5/0x140 [ 1386.994953] ? perf_trace_sched_process_exec+0x860/0x860 [ 1387.000421] ? kernfs_activate+0x21a/0x2c0 [ 1387.004683] __should_failslab+0x124/0x180 [ 1387.008930] should_failslab+0x9/0x14 [ 1387.012738] kmem_cache_alloc+0x2be/0x730 [ 1387.016900] ? lock_downgrade+0x900/0x900 [ 1387.021064] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1387.026095] __kernfs_new_node+0x127/0x8d0 [ 1387.030356] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1387.035121] ? graph_lock+0x270/0x270 [ 1387.038947] ? __lock_is_held+0xb5/0x140 [ 1387.043141] ? wait_for_completion+0x8a0/0x8a0 [ 1387.047742] ? mutex_unlock+0xd/0x10 [ 1387.051475] ? kernfs_activate+0x21a/0x2c0 [ 1387.055722] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1387.060574] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1387.066118] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1387.070716] kernfs_new_node+0x95/0x120 [ 1387.074709] __kernfs_create_file+0x5a/0x340 [ 1387.079133] sysfs_add_file_mode_ns+0x222/0x530 [ 1387.083826] internal_create_group+0x3df/0xd80 [ 1387.088429] ? remove_files.isra.1+0x190/0x190 [ 1387.093021] ? up_write+0x7b/0x220 [ 1387.096573] ? down_write_nested+0x130/0x130 [ 1387.100991] ? down_read+0x120/0x120 [ 1387.104733] sysfs_create_group+0x1f/0x30 [ 1387.108898] lo_ioctl+0x166a/0x22a0 [ 1387.112539] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1387.116444] ? find_held_lock+0x36/0x1c0 [ 1387.120519] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1387.124422] blkdev_ioctl+0x98e/0x21b0 [ 1387.128324] ? blkpg_ioctl+0xc10/0xc10 [ 1387.132231] ? lock_downgrade+0x900/0x900 [ 1387.136387] ? check_preemption_disabled+0x48/0x280 [ 1387.141425] ? kasan_check_read+0x11/0x20 [ 1387.145612] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1387.150898] ? rcu_read_unlock_special+0x370/0x370 [ 1387.155848] ? __fget+0x4d1/0x740 [ 1387.159317] ? ksys_dup3+0x680/0x680 [ 1387.163059] block_ioctl+0xee/0x130 [ 1387.166695] ? blkdev_fallocate+0x400/0x400 [ 1387.171024] do_vfs_ioctl+0x1de/0x1790 [ 1387.174921] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1387.180485] ? ioctl_preallocate+0x300/0x300 [ 1387.184902] ? __fget_light+0x2e9/0x430 [ 1387.188884] ? fget_raw+0x20/0x20 [ 1387.192357] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1387.197385] ? kmem_cache_free+0x24f/0x290 [ 1387.201635] ? putname+0xf7/0x130 [ 1387.205104] ? do_syscall_64+0x9a/0x820 [ 1387.209084] ? do_syscall_64+0x9a/0x820 [ 1387.213067] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1387.217671] ? security_file_ioctl+0x94/0xc0 [ 1387.222102] ksys_ioctl+0xa9/0xd0 [ 1387.225598] __x64_sys_ioctl+0x73/0xb0 [ 1387.229500] do_syscall_64+0x1b9/0x820 [ 1387.233408] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1387.239264] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1387.244203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1387.249060] ? trace_hardirqs_on_caller+0x310/0x310 [ 1387.254092] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1387.259120] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1387.264148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1387.269011] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1387.274208] RIP: 0033:0x4573d7 [ 1387.277412] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1387.296330] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1387.304050] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 03:26:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000040)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x1, 0x10000, 0x6, 0x6}) close(0xffffffffffffffff) getpgid(r2) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1387.311333] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1387.318605] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1387.325880] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1387.333153] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1387.395123] FAT-fs (loop3): bogus number of reserved sectors [ 1387.422274] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:18 executing program 3 (fault-call:2 fault-nth:16): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:18 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000780)={0x2, 0x0, 0x2080, {0x10000, 0x3001, 0x3}, [], "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", "c901f99b2c08ffb0b13defbad807453ecc78a24fb392b445ef48af5601dd8e0440f7b639653c38231938be3ce1236e202bc7d1b89c632d707d4511e57b2442106bd7a96e5c41d84c606d9c0485de9c20a5c74c9c8d9a5b68290b6324eaf87f4b208ad52ac14677c021e33842fe9dc0e4dadeba33228886c36038ce511b59332792528c2845caf39cd22aca1778624d363d01821f1de8e25188721dfd4c70ade567e247af3a502fb16219993d283ecc883ea02b3a75a5cbd33a58a1fe1f8d88a2f2c17af6d9715ac92a1657914c84c95f7db3ae54c80653ec03df403e01bb737b89450681ded2cd08be5ca88e290a0b73f9075d3ce69757f20fa8f1aafd9e29987654b9a13a87b6b9f67cafed597120a70e0fc09cf6aed4c4a813e6b9b3f4bf565edb254de5185ff1b82dcd848508420807857f1daf19606ea0b223b8f3e413a996c8024742638a06505476fb2446c06d3d0da6e61a04272db4258e5daebcf1e8d74fd57c46d8ad630acef8c5a5766ed3ec4c77ecfa4e76633fc5104d2ad8aa7840b3c49545c8df2cdbc63080a077adaca820d3716dbc8bd43c09da1409885fe53f2cc05eab6a828f105eda1e1530e187cf1a083cd52cc50c6f68bee4a4558121971f395bf27a3461caeba72f25cad5bba0c1a353aeaa5df9d92415a367e5007a1959b8c72af07b5db5c0a83fab48c8fbcb43eeaf0e4c765c33161e748a28e7067afb19441f43b212fcba41643db091c9955911df3482ca9e2755871afd3b1a6b24eaf86d96ebd01e6e97209f37826c38841d671eae912adab9ac2e1aedeea1eae592ba2e5e18901eadc36548349924164fb97caf92e6d53f60dd62db0e7f51896f36a9d3ef1ab5d86aa4df6664f4fbbd60799e880ffa1e9cabb924f9a3347bafcaa386dc2932728f9cfe02f27098f8d53f116b60f872385d72edabaca4e3881883528e30b24509eb41d80d5ff3a6a904ad8bc84ef807d2ac9b7483c416947c0111a444c9824dede7efa8aabd81653a5cff52535be3793d9599983cc38959f2670e2ce9e91ea1463024a43b8d05b51c3d7c9b78d6b00d4203cfd3bef5b0582d30de12f229ff3efed876cc5346b256b125a7a6368ee9eb16ed6b9eb860f1c552838b0f4feb508f4cf4b47ee7d49ec69a981fd23ec073e9d8d3fdafd5215aabfdf67e8b9f45f17c9ae836613a5824f9629bf243cfa1c6b50ba0c79f6d62e65d319a6b085bb636499fcbbc10cbbc4d2f265f992fd3a081c3de5eec505e935a244a599985c784a16eecd6ca783ea901e63c82344ac035f689a01341c0b6f5d784428e9d4259adc4837989b1e9e8cff26550c5262939a934d972be10d035bc1ce48e805482080f26a66bdd7a9339293a8567684e89913e18f8b12dad00f5d4952cdd7a0fc4e79824c3a6185bca19dd3a36059b88e19d56a6a9768339ffb94516659b5b6a3cfa2441339d5262a9f1d32591dffc4ae64ec856c54a6e4035b1f89c34784845e10229081e4ce1d813cdde2bc681f2442e63fd95ae882519c9214fba9f41b4f1d89a69b1ef468e94a6ef816a23a6c8396d3aad9268d8cdff54d5c4810c00dc970b88eee579c8075a0803ab137826c7f37ce8903900e7c721442ac8f7689b4a49929d698c51e14df50def9615c75dcf7601a47516cb48a583f9932c98a3d02215ee781f4d86a74ed6a708ea8efc9b91481af1ec9499c3d96614c4f74e44efbffbcffc28c3eab2dc63f0369ab017a2eef9f30b1709454317979e8ddd5db534320bd466ba718b884d2baff2666d8d021c8c7b25e00a5c2018050677bec0c34f88ed1611509baf94b85b475facebc06a48e7328bf32c14df38c6e66d0867a193f1a18eb0d11643ad3a16ebf2325dd691789b983ce6a246b4e57915d657371d2e901f2e18819fdcdeadc955562704d6ddbd506aaf4a77f3f31561529b9fd9975384db2c963aeb91414f9a539a881b3232a883cd9a72d9fc6634a51369f47166fcb1d74367391f85f59b460918c98e9200bb1d885210526525dffccb2f4a4112bddb5b154696f1b0b47e07bd52b825fb3ec366e5903fd458266eed440aef48c096069aa3d1283534657fe931d0122675a388efce707deca2489f2dc18390befb703b74c178ad86f61b0d8fd5488ec39938687dcc0a5c44119eca0de2a5caeaaf1ca05fe628e96384e5d201eed66923118875b226c0462a0e6da58890037b917940bfcbef41b29997f25acc000fa88ecf0ae27b32cdc9cac7705a3a0cbf885f3a51a03c823161a9495f0faf93f3118e3db8b671bd85be2b155f18ac839a6d8d9f3147fa4a8ff17e144655be5225c031b9949d6b29f4edff36ff81844b4b36bd937b778985f6a39125dd3f4773f194bbf35941e03a40fde8a8ab0e646858d269cf46f294b8f1040098f3b985eb4c996de8dbf74895c3d9feca7eb3d3dd82d3c426d7d5cfeed375b89d608177f0ef1d676f878a8383330a281dfb87c414f9c77ac2c0ed1b8c38fccfcef03eac1c5798571bcae73c19378e78ce9c9e062302e13294bc4e57f5eb57e3eb60757115cc34c6854164ba51d3bc83265d4ce6c6e525ae12d18445af4f8430ddebd096be2bb39233683ab2d7074bf7dcae89f859dd6c5ec20215b6e1ed3e5452149c0a2d722d156157de1b61633cbdca6165162651b3d4ddc6a6cd830d206dc0cdbb5f0b2f862df7e8187a853ebc055d4d0c3b2c5b8d62c4ab352c1cfb0b30ad70166c777ea90d4e0c1610c66b99e9450b56551dcb28b2e983786ff9bce0dac7557564bb905da8478d975d430369f7f3ae540c218b2631c16db623dfd0af6a3f1a18066e659d06f6cf5ba26a60ac711fd10694e0e4618363215ecdebbc52901eb84190dcdd885a7a7edd766e9d8a62f5aded0adb6699ab15f726fd83b0283f2d4da35c58db28dc70582233e735bfb00a5a4db97b0515f45c8cdc078c7909f0e9a6477eb6d90c9a529bc053b52c3b26787c18921a4fe9ae036fddfb2b848d4212ea3e5f41e8a106972b7fe1c03e3150f31d227eb0f75ddd3201b7c4444bc7c0a39c6353ec9075c55c5378cc8dca382fdb66554c6286c0006eb7b308bc37d753f7b8190c4bd5e95d6ca62668f9e5c6d2a107ab222cffdde45fef4899412715e24954baea482f59666aa0f536f4b7e8f53adf01f8fe291dfcda8e87e1ed34817d3d496da732e2bce0c55ed9e018ccd0e56ac19f6452a52331826e58e0990df2d24e5f187a85759f54dda402990ee9a5fa3b2c1da9e9af4658a16d129668729d2355af33d85775d482870c3fbbc05daff3bee02180de2ca04eb4462710075dee5d108bd23da9996c847ce7105f3a97a226eb706a5b787e53cf5a40b74c8bb2fc0917b72934e9b3a70579eaacf733bafc5cdeb1f16261231a35c3e68275cc18211db0688e384ae4bde31e96bb089700ceed1def822a38113f8896e199271c11fb151aacfc14771619f469a8698a0f082fb40281b173eab833ac60825d0855383a18e73d12d8955a153e3c3d0aaafd7de5df44ae6be13bfb03372c116e79431525a8c3f63f0c27855615e5f2090d20a93adfca4a859903bf44818bfb8bf6dc23fd7d56802e16e2fcb2713d997e1f4c32f737dda5b43645ae2789d75514fb56eec36c4fb091d83946578ee538ca569ad16a91d1aabb55647da695ef3e2f1e8b70c8ef0dd6e78fe67c32961d0fe99271b4cf0d2e171fb2220a1dd0a5dab4fb1c8d27c0de2d01473900d8ce4d38b625ea1615f2b704c1049b835fbcfc9fe830a75bf92aaa810e4a3d89ff8b8ee5196aaa8cc82b78fd210a3d60d91a70fa9d4882a0f1b794656d390345ab912456344e5457387491323e166361c51c6347a4940f9d4a419f41e1f25b8bbfcad7df641e4686882e3509bbc2d0f337473ff3014ff5c43e887ba8015772b1c1608aa4ddfb437c44000e1942a192e885c4cc98fac645f8fd3297e457d06eec1db127b26385dba2f69f8502a35b16bfe011608632c0476214408c988ffc659f14922acc8c08b33ee4fe4b51a88f015743321c6d19b78b1b4ea8db3e52ee37205e6bf4c91e48eb5c5532b0ac3b3a3409adb40476f082a063861d6d4791a528c25efa74a774c3e4c18862edfcd7eaf680587a3b5fce1e9788396aa1ebdd18797005e6c93c5ba88d564fb80acb02ec76ddd8b4d2b5f621c899ead9b74a3bcba3a9e455028059d8df24c7dd28ffc1e5b7571406d1dba3c0015161502bbb6728ca0b673e07103ed74f0cf929f390a3421576c182b05a55303768a33996c44206a78dd655ddfbfc9950c3b15b78fed23a69b139574123ccfa0d3e915fad0b2ebab8abdcee6d36230ace74ac00b348574189a2997d3385bab8bd16bbdddc98da38b52cfd1c4f6b302f3e2c4258eff779cbf869d641a39845cf1ed8e6a8f48a5dd015586c2824267b3a61c5fb18f260d855ae7ca1e9677fbffb6be8d9acb3dfc31d36e67aeb4d83963db4979b64c3217dd7534f4b355088a3cab1a82dd8137ed511314e0e3eb206b569ef021a0a155d4041952005f524f85ae71855465d8ff25ae868a974f6c3bb4868d597a618f1d6fd5dd5c17a8a30b67b756606e5a60b2a46fae69025613e87008ed616431854ecbf02ab29c863deef40e6334836a3ab01dae1cc15014f67cac500bd00941b37b8ce7f6680a847507b437f3a417b46c1e637d67f14435dae7672205146b22391eb21921b7dc8403612cb32a719b64b41943bb3cd486d715d97a4013e4644f1e7985aaa2bec733c1051ba25f37cb5be00f04eec7cb9c961e58194894c63d9f4c1362cf0b89a1d39c11fecc0325ef793fd4a314742cb2dc99bca049b9d62875eae563adadc16f8db718044dd9fc8d827fc531de37768e27602dc91560896a67929bb0ed76874802babccbe40843daaf549674b7761f48cfabe434146436e88f709ca2c8ef2165e786db43de8cc5bb51360837b252033bbee32a47a5f36ef69d2a2e2143c7b3f0a60c10da698160f81e50431043972b10f919f3998cd3d8300416fadee50bfa4c9d4055eeb8e99a7da4b66728372294bd6aac7aa5422a4011fa34582ccef2d931a143952367472b296dddef814eb9d82bccf5074ea1a3fa142aadbe5d751298fca1dcbb2c8db6ae27fdbb5299e0238024251380dea0be9a5d82dbcd32bb89db6110b85b27ba1c7ddc286fff0f0e49b95898a70e52abb35df5eabdc548cbae9db48614f5683c2b1593f64f6898ff006da334847a1b08309e221c71e761e154d4da9850e48acaf2eee3e9a03868c232fd59da45126061f0680569d5522bdf9f402ddf3797e3fad2f1d1b3cd6cde763756d01acfc03f2f27f67bf7835dd5acf756c690c77d56f2b0764c77c5177f3468a897dbd677776959a301a964244729a5978a6348afa21b12383e08f33c99657fa339b8d8f4dc6c02540c0cb2263d05833a3d50661431fbb2989a72acd8c7db38052f5599c39e00d8bb5cbeaca9efbc01565e69abe905a1d637545edabb6c6a4662bdf32e891b386dbfefeb69384a80582e14992cd7b8c254c64ec9914f4aaabcce014bf82f8d3cde87a01547221820c6263d6bf9c3b18d1d4eb2a9f4017075a02574da6f9f358c108f64a26fc5134badc7a16439902c7a400bea022b86d629bcf17af8f07a2d1f81308e300d1307644be4c0f5ec43ee7387dfe1353e7876900c421cc79be7e19dc0fb77bca9211a7c3796e48722d41e092bb588ebccb52c1d23857e26ce8082b77c1aeddf1385f4e5bbb0bb5298925b8fbd3452563fe8dbcd48ee5726578cb416520ac7aea5a6058886d58ac0841cd36"}) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x9) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000000c0)=0x7c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1387.509353] XFS (loop2): Invalid superblock magic number 03:26:18 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:18 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x101000) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64\x00', &(0x7f0000000080)='\x00', 0x1, 0x2) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) [ 1387.640262] FAULT_INJECTION: forcing a failure. [ 1387.640262] name failslab, interval 1, probability 0, space 0, times 0 [ 1387.690441] CPU: 1 PID: 8269 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1387.698997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.708367] Call Trace: [ 1387.710976] dump_stack+0x244/0x39d [ 1387.714627] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1387.719846] should_fail.cold.4+0xa/0x17 [ 1387.723924] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1387.729154] ? lock_release+0xa10/0xa10 [ 1387.733139] ? perf_trace_sched_process_exec+0x860/0x860 [ 1387.738611] ? graph_lock+0x270/0x270 [ 1387.742429] ? find_held_lock+0x36/0x1c0 [ 1387.746504] ? __lock_is_held+0xb5/0x140 [ 1387.750599] ? perf_trace_sched_process_exec+0x860/0x860 [ 1387.756058] ? kernfs_activate+0x21a/0x2c0 [ 1387.760322] __should_failslab+0x124/0x180 [ 1387.764568] should_failslab+0x9/0x14 [ 1387.768372] kmem_cache_alloc+0x2be/0x730 [ 1387.772532] ? lock_downgrade+0x900/0x900 [ 1387.776826] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1387.781860] __kernfs_new_node+0x127/0x8d0 [ 1387.786126] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1387.790893] ? graph_lock+0x270/0x270 [ 1387.794712] ? __lock_is_held+0xb5/0x140 [ 1387.798779] ? wait_for_completion+0x8a0/0x8a0 [ 1387.803388] ? mutex_unlock+0xd/0x10 [ 1387.807116] ? kernfs_activate+0x21a/0x2c0 [ 1387.811371] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1387.816223] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1387.821784] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1387.826382] kernfs_new_node+0x95/0x120 [ 1387.830374] __kernfs_create_file+0x5a/0x340 [ 1387.834793] sysfs_add_file_mode_ns+0x222/0x530 [ 1387.839485] internal_create_group+0x3df/0xd80 [ 1387.844101] ? remove_files.isra.1+0x190/0x190 [ 1387.848708] ? up_write+0x7b/0x220 [ 1387.852263] ? down_write_nested+0x130/0x130 [ 1387.856689] ? down_read+0x120/0x120 [ 1387.860428] sysfs_create_group+0x1f/0x30 [ 1387.864585] lo_ioctl+0x166a/0x22a0 [ 1387.868412] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1387.872313] ? find_held_lock+0x36/0x1c0 [ 1387.876389] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1387.880298] blkdev_ioctl+0x98e/0x21b0 [ 1387.884199] ? blkpg_ioctl+0xc10/0xc10 [ 1387.888100] ? lock_downgrade+0x900/0x900 [ 1387.892259] ? check_preemption_disabled+0x48/0x280 [ 1387.897316] ? kasan_check_read+0x11/0x20 [ 1387.901475] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1387.906759] ? rcu_read_unlock_special+0x370/0x370 [ 1387.911715] ? __fget+0x4d1/0x740 [ 1387.915281] ? ksys_dup3+0x680/0x680 [ 1387.919017] block_ioctl+0xee/0x130 [ 1387.922655] ? blkdev_fallocate+0x400/0x400 [ 1387.927077] do_vfs_ioctl+0x1de/0x1790 [ 1387.930983] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1387.936543] ? ioctl_preallocate+0x300/0x300 [ 1387.940964] ? __fget_light+0x2e9/0x430 [ 1387.944951] ? fget_raw+0x20/0x20 [ 1387.948420] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1387.953448] ? kmem_cache_free+0x24f/0x290 [ 1387.957694] ? putname+0xf7/0x130 [ 1387.961161] ? do_syscall_64+0x9a/0x820 [ 1387.965146] ? do_syscall_64+0x9a/0x820 [ 1387.969167] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1387.973764] ? security_file_ioctl+0x94/0xc0 [ 1387.978188] ksys_ioctl+0xa9/0xd0 [ 1387.981655] __x64_sys_ioctl+0x73/0xb0 [ 1387.985552] do_syscall_64+0x1b9/0x820 [ 1387.989457] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1387.994836] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1387.999771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1388.004629] ? trace_hardirqs_on_caller+0x310/0x310 [ 1388.009658] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1388.014688] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1388.019721] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1388.024577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1388.029769] RIP: 0033:0x4573d7 [ 1388.032968] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1388.051884] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.059808] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1388.067094] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1388.074378] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1388.081655] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1388.088934] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1388.131238] FAT-fs (loop3): bogus number of reserved sectors [ 1388.148620] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1388.171424] XFS (loop2): Invalid superblock magic number 03:26:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:21 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:21 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$KVM_NMI(r0, 0xae9a) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x28, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r4, 0x8, 0x8}, 0xc) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, r3, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1d}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 03:26:21 executing program 3 (fault-call:2 fault-nth:17): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:21 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030b3b6663020303030303037303030302c757365725f", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1390.554772] FAULT_INJECTION: forcing a failure. [ 1390.554772] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.603037] CPU: 0 PID: 8313 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1390.611579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.620960] Call Trace: [ 1390.623582] dump_stack+0x244/0x39d [ 1390.627249] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1390.632484] ? is_bpf_text_address+0xd3/0x170 [ 1390.637024] should_fail.cold.4+0xa/0x17 [ 1390.641212] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1390.646356] ? graph_lock+0x270/0x270 [ 1390.650174] ? save_stack+0x43/0xd0 [ 1390.653809] ? kasan_kmalloc+0xc7/0xe0 [ 1390.657702] ? kmem_cache_alloc_trace+0x152/0x750 [ 1390.662735] ? kobject_uevent_env+0x2f3/0x101e [ 1390.667342] ? kobject_uevent+0x1f/0x24 [ 1390.672716] ? lo_ioctl+0x16f1/0x22a0 [ 1390.676625] ? find_held_lock+0x36/0x1c0 [ 1390.681404] ? __lock_is_held+0xb5/0x140 [ 1390.685508] ? perf_trace_sched_process_exec+0x860/0x860 [ 1390.690983] __should_failslab+0x124/0x180 [ 1390.695237] should_failslab+0x9/0x14 [ 1390.699136] __kmalloc+0x2e0/0x760 [ 1390.702686] ? kobject_uevent_env+0x2f3/0x101e [ 1390.707278] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1390.712314] ? kobject_get_path+0xc2/0x1b0 [ 1390.716570] ? kmem_cache_alloc_trace+0x353/0x750 [ 1390.721686] kobject_get_path+0xc2/0x1b0 [ 1390.725763] kobject_uevent_env+0x314/0x101e [ 1390.730192] kobject_uevent+0x1f/0x24 [ 1390.734016] lo_ioctl+0x16f1/0x22a0 [ 1390.737660] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1390.741565] ? find_held_lock+0x36/0x1c0 [ 1390.745811] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1390.749710] blkdev_ioctl+0x98e/0x21b0 [ 1390.753608] ? blkpg_ioctl+0xc10/0xc10 [ 1390.757501] ? lock_downgrade+0x900/0x900 [ 1390.761659] ? check_preemption_disabled+0x48/0x280 [ 1390.766692] ? kasan_check_read+0x11/0x20 [ 1390.770844] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1390.776134] ? rcu_read_unlock_special+0x370/0x370 [ 1390.781130] ? __fget+0x4d1/0x740 [ 1390.784604] ? ksys_dup3+0x680/0x680 [ 1390.788352] block_ioctl+0xee/0x130 [ 1390.792011] ? blkdev_fallocate+0x400/0x400 [ 1390.796343] do_vfs_ioctl+0x1de/0x1790 [ 1390.800248] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1390.805797] ? ioctl_preallocate+0x300/0x300 [ 1390.810218] ? __fget_light+0x2e9/0x430 [ 1390.814200] ? fget_raw+0x20/0x20 [ 1390.817772] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1390.822805] ? kmem_cache_free+0x24f/0x290 [ 1390.827046] ? putname+0xf7/0x130 [ 1390.830513] ? do_syscall_64+0x9a/0x820 [ 1390.834492] ? do_syscall_64+0x9a/0x820 [ 1390.838477] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1390.843071] ? security_file_ioctl+0x94/0xc0 [ 1390.847489] ksys_ioctl+0xa9/0xd0 [ 1390.850952] __x64_sys_ioctl+0x73/0xb0 [ 1390.854856] do_syscall_64+0x1b9/0x820 [ 1390.858750] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1390.864125] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1390.869060] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1390.873918] ? trace_hardirqs_on_caller+0x310/0x310 [ 1390.878942] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1390.883974] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1390.889016] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1390.893881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1390.899072] RIP: 0033:0x4573d7 [ 1390.902272] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1390.921187] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.928902] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1390.936179] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1390.943453] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 03:26:21 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/181, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) setrlimit(0xd, &(0x7f0000000000)={0x1, 0x100000001}) 03:26:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000002c0), 0x10000000000000a4, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/116, 0x74}], 0x1000000000000073, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1390.950726] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1390.958003] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1391.008070] XFS (loop2): Invalid superblock magic number [ 1391.023752] FAT-fs (loop3): bogus number of reserved sectors [ 1391.050097] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:22 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673f0", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:22 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000780)=ANY=[@ANYBLOB="d73feef90000dba9f0a8734153db831bd03d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) stat(0x0, &(0x7f0000000a00)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:22 executing program 3 (fault-call:2 fault-nth:18): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1391.317037] FAULT_INJECTION: forcing a failure. [ 1391.317037] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.346958] CPU: 0 PID: 8358 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1391.355531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.364898] Call Trace: [ 1391.367518] dump_stack+0x244/0x39d [ 1391.371168] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1391.376383] should_fail.cold.4+0xa/0x17 [ 1391.380466] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1391.385591] ? lock_release+0xa10/0xa10 [ 1391.389576] ? perf_trace_sched_process_exec+0x860/0x860 [ 1391.395045] ? graph_lock+0x270/0x270 [ 1391.398863] ? find_held_lock+0x36/0x1c0 [ 1391.402943] ? __lock_is_held+0xb5/0x140 [ 1391.407035] ? perf_trace_sched_process_exec+0x860/0x860 [ 1391.412494] ? kernfs_activate+0x21a/0x2c0 [ 1391.416745] __should_failslab+0x124/0x180 [ 1391.420990] should_failslab+0x9/0x14 [ 1391.424794] kmem_cache_alloc+0x2be/0x730 [ 1391.428954] ? lock_downgrade+0x900/0x900 [ 1391.433352] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1391.438380] __kernfs_new_node+0x127/0x8d0 [ 1391.442642] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 1391.447401] ? graph_lock+0x270/0x270 [ 1391.451250] ? __lock_is_held+0xb5/0x140 [ 1391.455319] ? wait_for_completion+0x8a0/0x8a0 [ 1391.459923] ? mutex_unlock+0xd/0x10 [ 1391.463653] ? kernfs_activate+0x21a/0x2c0 [ 1391.468058] ? kernfs_walk_and_get_ns+0x340/0x340 [ 1391.472915] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1391.478554] ? kernfs_link_sibling+0x1d2/0x3b0 [ 1391.483153] kernfs_new_node+0x95/0x120 [ 1391.487140] __kernfs_create_file+0x5a/0x340 [ 1391.491561] sysfs_add_file_mode_ns+0x222/0x530 [ 1391.496251] internal_create_group+0x3df/0xd80 [ 1391.500850] ? remove_files.isra.1+0x190/0x190 [ 1391.505437] ? up_write+0x7b/0x220 [ 1391.508982] ? down_write_nested+0x130/0x130 [ 1391.513396] ? down_read+0x120/0x120 [ 1391.517131] sysfs_create_group+0x1f/0x30 [ 1391.521285] lo_ioctl+0x166a/0x22a0 [ 1391.524932] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1391.528831] ? find_held_lock+0x36/0x1c0 [ 1391.532906] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1391.536811] blkdev_ioctl+0x98e/0x21b0 [ 1391.540729] ? blkpg_ioctl+0xc10/0xc10 [ 1391.544624] ? lock_downgrade+0x900/0x900 [ 1391.548798] ? check_preemption_disabled+0x48/0x280 [ 1391.553828] ? kasan_check_read+0x11/0x20 [ 1391.557990] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1391.563278] ? rcu_read_unlock_special+0x370/0x370 [ 1391.568224] ? __fget+0x4d1/0x740 [ 1391.571691] ? ksys_dup3+0x680/0x680 [ 1391.575426] block_ioctl+0xee/0x130 [ 1391.579066] ? blkdev_fallocate+0x400/0x400 [ 1391.583396] do_vfs_ioctl+0x1de/0x1790 [ 1391.587293] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1391.592843] ? ioctl_preallocate+0x300/0x300 [ 1391.597260] ? __fget_light+0x2e9/0x430 [ 1391.601236] ? fget_raw+0x20/0x20 [ 1391.604707] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1391.609733] ? kmem_cache_free+0x24f/0x290 [ 1391.613974] ? putname+0xf7/0x130 [ 1391.617436] ? do_syscall_64+0x9a/0x820 [ 1391.621417] ? do_syscall_64+0x9a/0x820 [ 1391.625400] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1391.629996] ? security_file_ioctl+0x94/0xc0 [ 1391.634413] ksys_ioctl+0xa9/0xd0 [ 1391.637879] __x64_sys_ioctl+0x73/0xb0 [ 1391.641801] do_syscall_64+0x1b9/0x820 [ 1391.645699] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1391.651155] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1391.656091] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1391.661116] ? trace_hardirqs_on_caller+0x310/0x310 [ 1391.666144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1391.671166] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1391.676201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1391.681090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1391.686284] RIP: 0033:0x4573d7 [ 1391.689483] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1391.708385] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.716101] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1391.723395] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1391.730672] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1391.737943] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1391.745239] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1391.790471] FAT-fs (loop3): bogus number of reserved sectors [ 1391.816193] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x5450, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x50043, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000040)={0x7, 0x101, 0x4, {0x9, 0x100, 0xfffffffffffffff8, 0x4}}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) signalfd4(r0, &(0x7f0000000240)={0x3b}, 0x8, 0x800) mkdir(0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f0000000780)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000100)={0x88, 0x25, &(0x7f00000000c0)="2ddcd86c2737a3dd148f6931e7185a8080f508821b81f4e97d31f1", {0xff, 0xc25, 0x38414762, 0x1d56115f329ede18, 0x81, 0x314, 0x9, 0x1}}) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:26:23 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:23 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:23 executing program 3 (fault-call:2 fault-nth:19): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1392.860680] FAULT_INJECTION: forcing a failure. [ 1392.860680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1392.872652] CPU: 1 PID: 8385 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1392.881163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.890542] Call Trace: [ 1392.893168] dump_stack+0x244/0x39d [ 1392.896842] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1392.902057] ? up+0xea/0x1c0 [ 1392.905118] should_fail.cold.4+0xa/0x17 03:26:24 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r4, 0x0, 0x2d, 0x0, 0x5f) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1392.909210] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1392.914330] ? mark_held_locks+0xc7/0x130 [ 1392.918495] ? lock_downgrade+0x900/0x900 [ 1392.923023] ? mark_held_locks+0x130/0x130 [ 1392.927264] ? vprintk_emit+0x391/0x990 [ 1392.931254] ? trace_hardirqs_off_caller+0x300/0x300 [ 1392.936377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1392.942187] ? llist_add_batch+0x106/0x170 [ 1392.946439] ? check_preemption_disabled+0x48/0x280 [ 1392.951469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.958149] ? should_fail+0x22d/0xd01 [ 1392.962135] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.967686] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1392.972810] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.978360] ? wake_up_klogd+0x11a/0x180 [ 1392.982465] __alloc_pages_nodemask+0x34b/0xdd0 [ 1392.987140] ? __down_trylock_console_sem+0x151/0x1f0 [ 1392.992351] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1392.997374] ? vprintk_emit+0x293/0x990 [ 1393.002413] ? find_held_lock+0x36/0x1c0 [ 1393.006511] ? trace_hardirqs_off+0xb8/0x310 [ 1393.010934] cache_grow_begin+0xa5/0x8c0 [ 1393.015353] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1393.021078] ? check_preemption_disabled+0x48/0x280 [ 1393.026114] kmem_cache_alloc_trace+0x684/0x750 [ 1393.030912] kobject_uevent_env+0x2f3/0x101e [ 1393.035443] kobject_uevent+0x1f/0x24 [ 1393.039258] lo_ioctl+0x16f1/0x22a0 [ 1393.042905] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1393.046817] ? find_held_lock+0x36/0x1c0 [ 1393.050893] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1393.054806] blkdev_ioctl+0x98e/0x21b0 [ 1393.058702] ? blkpg_ioctl+0xc10/0xc10 [ 1393.062597] ? lock_downgrade+0x900/0x900 [ 1393.066759] ? check_preemption_disabled+0x48/0x280 [ 1393.071807] ? kasan_check_read+0x11/0x20 [ 1393.075962] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1393.081247] ? rcu_read_unlock_special+0x370/0x370 [ 1393.086210] ? __fget+0x4d1/0x740 [ 1393.089700] ? ksys_dup3+0x680/0x680 [ 1393.093441] block_ioctl+0xee/0x130 [ 1393.097079] ? blkdev_fallocate+0x400/0x400 [ 1393.101408] do_vfs_ioctl+0x1de/0x1790 [ 1393.105310] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1393.110864] ? ioctl_preallocate+0x300/0x300 [ 1393.115301] ? __fget_light+0x2e9/0x430 [ 1393.119283] ? fget_raw+0x20/0x20 [ 1393.122744] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1393.127789] ? kmem_cache_free+0x24f/0x290 [ 1393.132034] ? putname+0xf7/0x130 [ 1393.135501] ? do_syscall_64+0x9a/0x820 [ 1393.139486] ? do_syscall_64+0x9a/0x820 [ 1393.143467] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1393.148067] ? security_file_ioctl+0x94/0xc0 [ 1393.152493] ksys_ioctl+0xa9/0xd0 [ 1393.155963] __x64_sys_ioctl+0x73/0xb0 [ 1393.159865] do_syscall_64+0x1b9/0x820 [ 1393.163765] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1393.169159] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1393.174104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1393.179221] ? trace_hardirqs_on_caller+0x310/0x310 [ 1393.184249] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1393.189370] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1393.194408] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1393.199275] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1393.204475] RIP: 0033:0x4573d7 [ 1393.207676] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1393.226594] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.234712] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1393.241997] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1393.249277] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 03:26:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x30d800, 0x0) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, {0xffffffff00000000, 0x4, 0xfffffffffffffff9, 0x8, 0x1, 0x800}}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x79) [ 1393.256553] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1393.263831] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1393.313417] FAT-fs (loop3): bogus number of reserved sectors [ 1393.342448] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1393.368214] XFS (loop2): Invalid superblock magic number 03:26:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75cd44ed29b4", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) wait4(r3, &(0x7f00000000c0), 0x9, &(0x7f0000000780)) getpgid(r3) fcntl$setflags(r0, 0x2, 0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x6a}) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:26:24 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2, 0xffffffffffffffff}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:24 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:24 executing program 3 (fault-call:2 fault-nth:20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1393.642706] FAULT_INJECTION: forcing a failure. [ 1393.642706] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.655044] CPU: 0 PID: 8424 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1393.663583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.672962] Call Trace: [ 1393.675590] dump_stack+0x244/0x39d [ 1393.679237] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1393.684451] ? lock_downgrade+0x900/0x900 [ 1393.688747] should_fail.cold.4+0xa/0x17 [ 1393.692925] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1393.698046] ? rcu_softirq_qs+0x20/0x20 [ 1393.702032] ? unwind_dump+0x190/0x190 [ 1393.705945] ? is_bpf_text_address+0xd3/0x170 [ 1393.710451] ? graph_lock+0x270/0x270 [ 1393.714261] ? __kernel_text_address+0xd/0x40 [ 1393.718767] ? unwind_get_return_address+0x61/0xa0 [ 1393.723712] ? find_held_lock+0x36/0x1c0 [ 1393.727793] ? __lock_is_held+0xb5/0x140 [ 1393.731881] ? kobject_uevent+0x1f/0x24 [ 1393.735862] ? perf_trace_sched_process_exec+0x860/0x860 [ 1393.741320] ? do_vfs_ioctl+0x1de/0x1790 [ 1393.745387] ? ksys_ioctl+0xa9/0xd0 [ 1393.749016] ? __x64_sys_ioctl+0x73/0xb0 [ 1393.753086] ? do_syscall_64+0x1b9/0x820 [ 1393.757165] __should_failslab+0x124/0x180 [ 1393.761411] should_failslab+0x9/0x14 [ 1393.765222] kmem_cache_alloc+0x2be/0x730 [ 1393.769489] skb_clone+0x1bb/0x500 [ 1393.773052] ? skb_split+0x11e0/0x11e0 [ 1393.778001] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1393.783032] ? netlink_trim+0x1b4/0x380 [ 1393.787026] ? netlink_skb_destructor+0x210/0x210 [ 1393.791892] netlink_broadcast_filtered+0x110f/0x1680 [ 1393.797099] ? __netlink_sendskb+0xd0/0xd0 [ 1393.801441] ? kasan_check_read+0x11/0x20 [ 1393.805598] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1393.810896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.816440] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1393.821995] ? refcount_dec_checked+0x70/0x70 [ 1393.826505] ? netlink_has_listeners+0x2cb/0x4a0 [ 1393.831270] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1393.836303] netlink_broadcast+0x3a/0x50 [ 1393.840379] kobject_uevent_env+0xa83/0x101e [ 1393.844895] kobject_uevent+0x1f/0x24 [ 1393.848705] lo_ioctl+0x16f1/0x22a0 [ 1393.852448] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1393.856349] ? find_held_lock+0x36/0x1c0 [ 1393.860425] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1393.864322] blkdev_ioctl+0x98e/0x21b0 [ 1393.868223] ? blkpg_ioctl+0xc10/0xc10 [ 1393.872124] ? lock_downgrade+0x900/0x900 [ 1393.876278] ? check_preemption_disabled+0x48/0x280 [ 1393.881308] ? kasan_check_read+0x11/0x20 [ 1393.885463] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1393.890750] ? rcu_read_unlock_special+0x370/0x370 [ 1393.895696] ? __fget+0x4d1/0x740 [ 1393.899172] ? ksys_dup3+0x680/0x680 [ 1393.902911] block_ioctl+0xee/0x130 [ 1393.906550] ? blkdev_fallocate+0x400/0x400 [ 1393.910885] do_vfs_ioctl+0x1de/0x1790 [ 1393.914787] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1393.920334] ? ioctl_preallocate+0x300/0x300 [ 1393.924753] ? __fget_light+0x2e9/0x430 [ 1393.928744] ? fget_raw+0x20/0x20 [ 1393.932205] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1393.937229] ? kmem_cache_free+0x24f/0x290 [ 1393.941470] ? putname+0xf7/0x130 [ 1393.944932] ? do_syscall_64+0x9a/0x820 [ 1393.948910] ? do_syscall_64+0x9a/0x820 [ 1393.952893] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1393.957484] ? security_file_ioctl+0x94/0xc0 [ 1393.961904] ksys_ioctl+0xa9/0xd0 [ 1393.965371] __x64_sys_ioctl+0x73/0xb0 [ 1393.969266] do_syscall_64+0x1b9/0x820 [ 1393.974470] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1393.979844] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1393.984777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1393.989638] ? trace_hardirqs_on_caller+0x310/0x310 [ 1393.994669] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1393.999717] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1394.004752] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1394.009618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1394.014812] RIP: 0033:0x4573d7 [ 1394.018275] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1394.037271] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1394.044992] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1394.052268] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1394.059563] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1394.066836] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1394.074107] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1394.142910] FAT-fs (loop3): bogus number of reserved sectors [ 1394.170116] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x5452, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:26 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0xd) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:26 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000040)="b240bda06eea54d6e02e962fac650d02f67bb9c71877ba4d9bf0dda8f007aa8ea0", 0x0}, 0x18) 03:26:26 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:26 executing program 3 (fault-call:2 fault-nth:21): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1395.752554] FAULT_INJECTION: forcing a failure. [ 1395.752554] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.765006] CPU: 1 PID: 8439 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1395.773545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1395.782920] Call Trace: [ 1395.785552] dump_stack+0x244/0x39d [ 1395.789207] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1395.794416] ? lock_downgrade+0x900/0x900 [ 1395.798588] should_fail.cold.4+0xa/0x17 [ 1395.802666] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1395.807779] ? rcu_softirq_qs+0x20/0x20 [ 1395.811758] ? unwind_dump+0x190/0x190 [ 1395.815673] ? is_bpf_text_address+0xd3/0x170 [ 1395.820176] ? graph_lock+0x270/0x270 [ 1395.823984] ? __kernel_text_address+0xd/0x40 [ 1395.828499] ? unwind_get_return_address+0x61/0xa0 [ 1395.833459] ? find_held_lock+0x36/0x1c0 [ 1395.837558] ? __lock_is_held+0xb5/0x140 [ 1395.841644] ? kobject_uevent+0x1f/0x24 [ 1395.845802] ? perf_trace_sched_process_exec+0x860/0x860 [ 1395.851261] ? do_vfs_ioctl+0x1de/0x1790 [ 1395.855328] ? ksys_ioctl+0xa9/0xd0 [ 1395.859056] ? __x64_sys_ioctl+0x73/0xb0 [ 1395.863126] ? do_syscall_64+0x1b9/0x820 [ 1395.867206] __should_failslab+0x124/0x180 [ 1395.871458] should_failslab+0x9/0x14 [ 1395.875267] kmem_cache_alloc+0x2be/0x730 [ 1395.879437] skb_clone+0x1bb/0x500 [ 1395.882992] ? skb_split+0x11e0/0x11e0 [ 1395.886976] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1395.892029] ? netlink_trim+0x1b4/0x380 [ 1395.896017] ? netlink_skb_destructor+0x210/0x210 [ 1395.900878] netlink_broadcast_filtered+0x110f/0x1680 [ 1395.906088] ? __netlink_sendskb+0xd0/0xd0 [ 1395.910349] ? kasan_check_read+0x11/0x20 [ 1395.914615] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1395.919913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1395.925464] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1395.930937] ? refcount_dec_checked+0x70/0x70 [ 1395.935447] ? netlink_has_listeners+0x2cb/0x4a0 [ 1395.940220] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1395.945525] netlink_broadcast+0x3a/0x50 [ 1395.949605] kobject_uevent_env+0xa83/0x101e [ 1395.954035] kobject_uevent+0x1f/0x24 [ 1395.957844] lo_ioctl+0x16f1/0x22a0 [ 1395.961490] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1395.965405] ? find_held_lock+0x36/0x1c0 [ 1395.969481] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1395.973388] blkdev_ioctl+0x98e/0x21b0 [ 1395.977292] ? blkpg_ioctl+0xc10/0xc10 [ 1395.981187] ? lock_downgrade+0x900/0x900 [ 1395.985348] ? check_preemption_disabled+0x48/0x280 [ 1395.990381] ? kasan_check_read+0x11/0x20 [ 1395.994545] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1395.999835] ? rcu_read_unlock_special+0x370/0x370 [ 1396.004791] ? __fget+0x4d1/0x740 [ 1396.008266] ? ksys_dup3+0x680/0x680 [ 1396.012008] block_ioctl+0xee/0x130 [ 1396.015644] ? blkdev_fallocate+0x400/0x400 [ 1396.019978] do_vfs_ioctl+0x1de/0x1790 [ 1396.023883] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1396.029450] ? ioctl_preallocate+0x300/0x300 [ 1396.033962] ? __fget_light+0x2e9/0x430 [ 1396.037949] ? fget_raw+0x20/0x20 [ 1396.041418] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1396.046447] ? kmem_cache_free+0x24f/0x290 [ 1396.050696] ? putname+0xf7/0x130 [ 1396.054164] ? do_syscall_64+0x9a/0x820 [ 1396.058147] ? do_syscall_64+0x9a/0x820 [ 1396.062131] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1396.066732] ? security_file_ioctl+0x94/0xc0 [ 1396.071332] ksys_ioctl+0xa9/0xd0 [ 1396.074812] __x64_sys_ioctl+0x73/0xb0 [ 1396.078716] do_syscall_64+0x1b9/0x820 [ 1396.082615] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1396.087989] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1396.092926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1396.097777] ? trace_hardirqs_on_caller+0x310/0x310 [ 1396.102806] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1396.107842] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1396.112876] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1396.117747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1396.122954] RIP: 0033:0x4573d7 [ 1396.126160] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1396.145073] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1396.152797] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1396.160078] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1396.167356] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1396.174638] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1396.181924] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:27 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x5, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}], 0x1, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300), 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x699783285d5b5c73, 0x21, 0x1}, 0x136) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) 03:26:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = dup2(r0, r0) timerfd_create(0x6, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x9, 0x9, 0x200, 0x1, r1, 0x1000}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) [ 1396.216670] XFS (loop2): Invalid superblock magic number 03:26:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1396.382643] FAT-fs (loop3): bogus number of reserved sectors [ 1396.435443] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:27 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x7003, &(0x7f0000000200)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r2, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:27 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xa6, 0x4001) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1ee, 0x8000) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0xd9) 03:26:27 executing program 3 (fault-call:2 fault-nth:22): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1396.694072] XFS (loop2): Invalid superblock magic number [ 1396.723486] FAULT_INJECTION: forcing a failure. [ 1396.723486] name failslab, interval 1, probability 0, space 0, times 0 [ 1396.807151] CPU: 0 PID: 8482 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1396.815711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.825090] Call Trace: [ 1396.827710] dump_stack+0x244/0x39d [ 1396.831367] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1396.836581] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1396.840508] should_fail.cold.4+0xa/0x17 [ 1396.844586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1396.849697] ? blkpg_ioctl+0xc10/0xc10 [ 1396.853595] ? lock_downgrade+0x900/0x900 [ 1396.857755] ? check_preemption_disabled+0x48/0x280 [ 1396.862790] ? kasan_check_read+0x11/0x20 [ 1396.866942] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1396.872225] ? rcu_read_unlock_special+0x370/0x370 [ 1396.877170] ? find_held_lock+0x36/0x1c0 [ 1396.881525] ? perf_trace_sched_process_exec+0x860/0x860 [ 1396.886981] ? block_ioctl+0xee/0x130 [ 1396.890804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1396.896363] __should_failslab+0x124/0x180 [ 1396.900609] should_failslab+0x9/0x14 [ 1396.904415] kmem_cache_alloc+0x2be/0x730 [ 1396.908580] ? fget_raw+0x20/0x20 [ 1396.912043] getname_flags+0xd0/0x590 [ 1396.915849] do_mkdirat+0xc5/0x310 [ 1396.919410] ? __ia32_sys_mknod+0xb0/0xb0 [ 1396.923575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1396.928946] ? trace_hardirqs_off_caller+0x300/0x300 [ 1396.934056] ? ksys_ioctl+0x81/0xd0 [ 1396.937694] __x64_sys_mkdir+0x5c/0x80 [ 1396.941595] do_syscall_64+0x1b9/0x820 [ 1396.945492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1396.950864] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1396.955800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1396.960662] ? trace_hardirqs_on_caller+0x310/0x310 [ 1396.965696] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1396.970732] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1396.975768] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1396.980634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1396.985831] RIP: 0033:0x456987 [ 1396.989034] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1397.007947] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1397.015654] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1397.022915] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1397.030172] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1397.037432] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1397.044693] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x4020940d, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:30 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$KDSETLED(r1, 0x4b32, 0x8) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) 03:26:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$smack_current(r1, &(0x7f00000000c0)='/dev/rtc\x00', 0x9) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:26:30 executing program 3 (fault-call:2 fault-nth:23): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:30 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1399.316350] FAULT_INJECTION: forcing a failure. [ 1399.316350] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.346966] CPU: 0 PID: 8498 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1399.355536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.365033] Call Trace: [ 1399.367664] dump_stack+0x244/0x39d [ 1399.371341] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1399.376575] ? lock_downgrade+0x900/0x900 [ 1399.380758] should_fail.cold.4+0xa/0x17 [ 1399.384849] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1399.389978] ? rcu_softirq_qs+0x20/0x20 [ 1399.393976] ? unwind_dump+0x190/0x190 [ 1399.397897] ? is_bpf_text_address+0xd3/0x170 [ 1399.402735] ? graph_lock+0x270/0x270 [ 1399.406556] ? __kernel_text_address+0xd/0x40 [ 1399.411072] ? unwind_get_return_address+0x61/0xa0 [ 1399.416028] ? find_held_lock+0x36/0x1c0 [ 1399.420109] ? __lock_is_held+0xb5/0x140 [ 1399.424205] ? kobject_uevent+0x1f/0x24 [ 1399.428204] ? perf_trace_sched_process_exec+0x860/0x860 [ 1399.433989] ? do_vfs_ioctl+0x1de/0x1790 [ 1399.438650] ? ksys_ioctl+0xa9/0xd0 [ 1399.442284] ? __x64_sys_ioctl+0x73/0xb0 [ 1399.446357] ? do_syscall_64+0x1b9/0x820 [ 1399.450437] __should_failslab+0x124/0x180 [ 1399.454692] should_failslab+0x9/0x14 [ 1399.458501] kmem_cache_alloc+0x2be/0x730 [ 1399.462768] skb_clone+0x1bb/0x500 [ 1399.466322] ? skb_split+0x11e0/0x11e0 [ 1399.470229] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1399.475257] ? netlink_trim+0x1b4/0x380 [ 1399.479250] ? netlink_skb_destructor+0x210/0x210 [ 1399.484113] netlink_broadcast_filtered+0x110f/0x1680 [ 1399.489322] ? __netlink_sendskb+0xd0/0xd0 [ 1399.493583] ? kasan_check_read+0x11/0x20 [ 1399.497742] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1399.503048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1399.508602] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 1399.514246] ? refcount_dec_checked+0x70/0x70 [ 1399.518755] ? netlink_has_listeners+0x2cb/0x4a0 [ 1399.523529] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1399.528567] netlink_broadcast+0x3a/0x50 [ 1399.532696] kobject_uevent_env+0xa83/0x101e [ 1399.537132] kobject_uevent+0x1f/0x24 [ 1399.540981] lo_ioctl+0x16f1/0x22a0 [ 1399.544629] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1399.548534] ? find_held_lock+0x36/0x1c0 [ 1399.552614] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1399.556537] blkdev_ioctl+0x98e/0x21b0 [ 1399.560439] ? blkpg_ioctl+0xc10/0xc10 [ 1399.564335] ? lock_downgrade+0x900/0x900 [ 1399.568491] ? check_preemption_disabled+0x48/0x280 [ 1399.573538] ? kasan_check_read+0x11/0x20 [ 1399.577696] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1399.582986] ? rcu_read_unlock_special+0x370/0x370 [ 1399.587948] ? __fget+0x4d1/0x740 [ 1399.591421] ? ksys_dup3+0x680/0x680 [ 1399.595166] block_ioctl+0xee/0x130 [ 1399.598818] ? blkdev_fallocate+0x400/0x400 [ 1399.603152] do_vfs_ioctl+0x1de/0x1790 [ 1399.607062] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1399.612623] ? ioctl_preallocate+0x300/0x300 [ 1399.617040] ? __fget_light+0x2e9/0x430 [ 1399.621520] ? fget_raw+0x20/0x20 [ 1399.624986] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1399.630024] ? kmem_cache_free+0x24f/0x290 [ 1399.634276] ? putname+0xf7/0x130 [ 1399.637741] ? do_syscall_64+0x9a/0x820 [ 1399.641725] ? do_syscall_64+0x9a/0x820 [ 1399.645712] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1399.650311] ? security_file_ioctl+0x94/0xc0 [ 1399.655085] ksys_ioctl+0xa9/0xd0 [ 1399.658550] __x64_sys_ioctl+0x73/0xb0 [ 1399.662448] do_syscall_64+0x1b9/0x820 [ 1399.666344] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1399.671722] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1399.676662] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1399.681519] ? trace_hardirqs_on_caller+0x310/0x310 [ 1399.686550] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1399.691588] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1399.696737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1399.701600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1399.706794] RIP: 0033:0x4573d7 [ 1399.709994] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1399.728988] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.736712] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000004573d7 [ 1399.743991] RDX: 0000000000000006 RSI: 0000000000004c00 RDI: 0000000000000007 [ 1399.751813] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1399.759786] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 03:26:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:30 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000000)=0x6, 0x4) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) 03:26:30 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1399.767241] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1399.809933] FAT-fs (loop3): bogus number of reserved sectors [ 1399.815809] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:31 executing program 3 (fault-call:2 fault-nth:24): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000000880)=0x48) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000240)={0x1, r0}) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:26:31 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0xc0000) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x200) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c420100000000000000") r3 = dup2(r2, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x8000000f, 0x7, 0xd287, 0x2, 0x23, r3, 0x10001}, 0x4fa5817fcee9d70a) [ 1399.947676] XFS (loop2): Invalid superblock magic number [ 1400.045484] FAULT_INJECTION: forcing a failure. [ 1400.045484] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.085750] CPU: 1 PID: 8531 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1400.094312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.104299] Call Trace: [ 1400.106925] dump_stack+0x244/0x39d [ 1400.110588] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1400.115816] ? lo_rw_aio+0x1ef0/0x1ef0 [ 1400.119743] should_fail.cold.4+0xa/0x17 [ 1400.123835] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1400.128971] ? blkpg_ioctl+0xc10/0xc10 [ 1400.132871] ? lock_downgrade+0x900/0x900 [ 1400.137029] ? check_preemption_disabled+0x48/0x280 [ 1400.142058] ? kasan_check_read+0x11/0x20 [ 1400.146210] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1400.151498] ? rcu_read_unlock_special+0x370/0x370 [ 1400.156442] ? find_held_lock+0x36/0x1c0 [ 1400.160535] ? perf_trace_sched_process_exec+0x860/0x860 [ 1400.166104] ? block_ioctl+0xee/0x130 [ 1400.169923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1400.175479] __should_failslab+0x124/0x180 [ 1400.179731] should_failslab+0x9/0x14 [ 1400.183545] kmem_cache_alloc+0x2be/0x730 [ 1400.187711] ? fget_raw+0x20/0x20 [ 1400.191178] getname_flags+0xd0/0x590 [ 1400.194996] do_mkdirat+0xc5/0x310 [ 1400.198553] ? __ia32_sys_mknod+0xb0/0xb0 [ 1400.202708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1400.208083] ? trace_hardirqs_off_caller+0x300/0x300 [ 1400.213383] ? ksys_ioctl+0x81/0xd0 [ 1400.217029] __x64_sys_mkdir+0x5c/0x80 [ 1400.220941] do_syscall_64+0x1b9/0x820 [ 1400.224845] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1400.230220] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1400.235156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1400.240011] ? trace_hardirqs_on_caller+0x310/0x310 [ 1400.245042] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1400.250071] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1400.255275] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1400.260144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1400.265343] RIP: 0033:0x456987 [ 1400.268549] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1400.287463] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1400.295183] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1400.302462] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1400.309742] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1400.317019] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1400.324291] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0xc0045878, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:33 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667301", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1f, 0x9, 0x80000000, 0x3ff, 0x15, r0, 0x6}, 0x2c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x200040) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000002c0)={0x4, 0x0, [{0x80000007, 0x7, 0x7fffffff, 0x3, 0x7f}, {0xf, 0x1c05, 0x6, 0x46d, 0x7149}, {0xf, 0x80000001, 0x7, 0x9, 0x2}, {0xc0000007, 0x40, 0x68, 0x4000000, 0x4}]}) ioctl(r0, 0x2, &(0x7f0000000000)="008f0001000000000000a9") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) r3 = dup2(r0, r2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0xffffffff, 0x7fffffff, 0x800, 0x80, 0x4}, 0x14) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x1ff, @local, 0x6}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e22}, @in6={0xa, 0x4e24, 0x1, @local, 0x3}, @in6={0xa, 0x4e24, 0x8, @local, 0x8000}, @in6={0xa, 0x4e22, 0x54e, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0x30eb}], 0x9c) open(&(0x7f0000000240)='./file0\x00', 0x1, 0x80) 03:26:33 executing program 3 (fault-call:2 fault-nth:25): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:33 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1402.354155] FAULT_INJECTION: forcing a failure. [ 1402.354155] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.396559] CPU: 0 PID: 8545 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1402.405122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.414505] Call Trace: [ 1402.417109] dump_stack+0x244/0x39d [ 1402.420738] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1402.425946] should_fail.cold.4+0xa/0x17 [ 1402.430005] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1402.435242] ? add_to_page_cache_lru+0xdb0/0xdb0 [ 1402.440012] ? mark_held_locks+0x130/0x130 [ 1402.444247] ? graph_lock+0x270/0x270 [ 1402.448057] ? print_usage_bug+0xc0/0xc0 [ 1402.452134] ? __lock_acquire+0x62f/0x4c20 [ 1402.456366] ? lock_unpin_lock+0x4a0/0x4a0 [ 1402.460708] ? __lock_is_held+0xb5/0x140 [ 1402.464771] ? xhci_irq+0x5b50/0x5ff0 [ 1402.468659] ? lock_downgrade+0x900/0x900 [ 1402.472991] ? __find_get_block+0xba3/0xf10 [ 1402.477319] ? perf_trace_sched_process_exec+0x860/0x860 [ 1402.482778] ? kasan_check_write+0x14/0x20 [ 1402.487008] ? __brelse+0x104/0x180 [ 1402.490646] __should_failslab+0x124/0x180 [ 1402.494876] should_failslab+0x9/0x14 [ 1402.498676] kmem_cache_alloc+0x2be/0x730 [ 1402.502819] ? __find_get_block+0x3b9/0xf10 [ 1402.507141] ? ratelimit_state_init+0xb0/0xb0 [ 1402.511627] ext4_alloc_inode+0xc7/0x880 [ 1402.515679] ? ratelimit_state_init+0xb0/0xb0 [ 1402.520176] ? __lock_acquire+0x62f/0x4c20 [ 1402.524417] ? mark_held_locks+0x130/0x130 [ 1402.528646] ? graph_lock+0x270/0x270 [ 1402.533070] ? ext4_es_lookup_extent+0x48f/0xdd0 [ 1402.537936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1402.543475] ? ratelimit_state_init+0xb0/0xb0 [ 1402.547978] alloc_inode+0x63/0x190 [ 1402.551598] new_inode_pseudo+0x71/0x1a0 [ 1402.555827] ? prune_icache_sb+0x1c0/0x1c0 [ 1402.560072] new_inode+0x1c/0x40 [ 1402.563434] __ext4_new_inode+0x4c8/0x65a0 [ 1402.567687] ? ext4_free_inode+0x1a10/0x1a10 [ 1402.572098] ? find_held_lock+0x36/0x1c0 [ 1402.576159] ? is_bpf_text_address+0xac/0x170 [ 1402.580659] ? lock_downgrade+0x900/0x900 [ 1402.584801] ? check_preemption_disabled+0x48/0x280 [ 1402.589812] ? kasan_check_read+0x11/0x20 [ 1402.593951] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1402.599221] ? rcu_read_unlock_special+0x370/0x370 [ 1402.604445] ? rcu_softirq_qs+0x20/0x20 [ 1402.608414] ? unwind_dump+0x190/0x190 [ 1402.612738] ? is_bpf_text_address+0xd3/0x170 [ 1402.617319] ? kernel_text_address+0x79/0xf0 [ 1402.621721] ? __kernel_text_address+0xd/0x40 [ 1402.626216] ? unwind_get_return_address+0x61/0xa0 [ 1402.631250] ? __save_stack_trace+0x8d/0xf0 [ 1402.635579] ? save_stack+0xa9/0xd0 [ 1402.639550] ? save_stack+0x43/0xd0 [ 1402.643171] ? __kasan_slab_free+0x102/0x150 [ 1402.647570] ? kasan_slab_free+0xe/0x10 [ 1402.651537] ? kmem_cache_free+0x83/0x290 [ 1402.655678] ? print_usage_bug+0xc0/0xc0 [ 1402.659743] ? __x64_sys_mkdir+0x5c/0x80 [ 1402.663814] ? do_syscall_64+0x1b9/0x820 [ 1402.667870] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1402.673237] ? trace_hardirqs_off+0xb8/0x310 [ 1402.677640] ? kasan_check_read+0x11/0x20 [ 1402.681790] ? do_raw_spin_unlock+0xa7/0x330 [ 1402.686190] ? trace_hardirqs_on+0x310/0x310 [ 1402.690593] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1402.696129] ? __dquot_initialize+0x629/0xdd0 [ 1402.700628] ? dquot_get_next_dqblk+0x180/0x180 [ 1402.705304] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1402.710332] ? common_perm+0x1f6/0x7b0 [ 1402.714234] ext4_mkdir+0x2e1/0xe60 [ 1402.717873] ? ext4_init_dot_dotdot+0x510/0x510 [ 1402.722564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1402.728105] ? security_inode_permission+0xd2/0x100 [ 1402.733122] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1402.738741] ? security_inode_mkdir+0xe8/0x120 [ 1402.743324] vfs_mkdir+0x42e/0x6b0 [ 1402.746860] do_mkdirat+0x27a/0x310 [ 1402.750492] ? __ia32_sys_mknod+0xb0/0xb0 [ 1402.754649] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1402.760024] ? trace_hardirqs_off_caller+0x300/0x300 [ 1402.765120] ? ksys_ioctl+0x81/0xd0 [ 1402.768743] __x64_sys_mkdir+0x5c/0x80 [ 1402.773062] do_syscall_64+0x1b9/0x820 [ 1402.777210] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1402.782590] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1402.787529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1402.792375] ? trace_hardirqs_on_caller+0x310/0x310 [ 1402.797395] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1402.803715] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1402.808735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1402.813584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1402.818769] RIP: 0033:0x456987 [ 1402.821956] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1402.841028] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 03:26:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000000), 0x0}, 0x18) r2 = fcntl$dupfd(r1, 0x406, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x2, {0x6, 0x100000000, "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", 0xf3, 0x2, 0xffffffffffffffff, 0x4e65879a, 0x4, 0x7, 0x3, 0x1}, r3}}, 0x128) [ 1402.848735] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1402.856020] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1402.863290] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1402.870554] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1402.877823] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:26:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x110) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x3ff, {{0xa, 0x4e22, 0xee, @mcast2, 0x2}}, 0x1, 0x4, [{{0xa, 0x4e23, 0x7ff, @remote, 0x80}}, {{0xa, 0x4e20, 0x4, @local, 0xdb}}, {{0xa, 0x4e23, 0x7, @empty, 0x7ff}}, {{0xa, 0x4e20, 0x8, @ipv4={[], [], @remote}, 0x7}}]}, 0x290) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000240)={0x0, 0x1fffc000}) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) removexattr(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)=@known='system.advise\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba32e852559977488681769f02b0d480541b2a9ac81841de8ad604006599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa76a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc02088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000040), 0x12) 03:26:34 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:34 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:34 executing program 3 (fault-call:2 fault-nth:26): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:34 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1403.112981] FAULT_INJECTION: forcing a failure. [ 1403.112981] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.138638] CPU: 1 PID: 8574 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1403.147208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.156582] Call Trace: [ 1403.159194] dump_stack+0x244/0x39d [ 1403.162904] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1403.168127] ? __switch_to_asm+0x34/0x70 [ 1403.168143] ? __switch_to_asm+0x40/0x70 [ 1403.168166] ? print_usage_bug+0xc0/0xc0 [ 1403.180338] should_fail.cold.4+0xa/0x17 [ 1403.184540] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1403.189666] ? walk_component+0x3fe/0x2590 [ 1403.193915] ? graph_lock+0x270/0x270 [ 1403.193942] ? graph_lock+0x270/0x270 [ 1403.193958] ? mark_held_locks+0x130/0x130 [ 1403.193977] ? path_parentat.isra.41+0x20/0x160 [ 1403.205799] ? find_held_lock+0x36/0x1c0 [ 1403.205822] ? __lock_is_held+0xb5/0x140 [ 1403.205856] ? perf_trace_sched_process_exec+0x860/0x860 [ 1403.224082] __should_failslab+0x124/0x180 [ 1403.228337] should_failslab+0x9/0x14 [ 1403.232149] kmem_cache_alloc+0x2be/0x730 [ 1403.236565] ? rcu_read_unlock_special+0x370/0x370 [ 1403.241525] __d_alloc+0xc8/0xb90 [ 1403.244991] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 1403.250021] ? d_alloc_parallel+0x1f40/0x1f40 [ 1403.250037] ? d_lookup+0x255/0x300 [ 1403.250053] ? d_lookup+0x255/0x300 [ 1403.250075] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1403.258182] ? lookup_dcache+0x22/0x140 [ 1403.258204] ? trace_hardirqs_off_caller+0x300/0x300 [ 1403.258231] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1403.280523] d_alloc+0x96/0x380 [ 1403.283811] ? __d_lookup+0x9e0/0x9e0 [ 1403.287629] ? __d_alloc+0xb90/0xb90 [ 1403.291370] __lookup_hash+0xd9/0x190 [ 1403.295186] filename_create+0x1e5/0x5b0 [ 1403.299258] ? kern_path_mountpoint+0x40/0x40 [ 1403.303762] ? fget_raw+0x20/0x20 [ 1403.307235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1403.312777] ? getname_flags+0x26e/0x590 [ 1403.316857] do_mkdirat+0xda/0x310 [ 1403.320407] ? __ia32_sys_mknod+0xb0/0xb0 [ 1403.324570] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1403.329946] ? trace_hardirqs_off_caller+0x300/0x300 [ 1403.335142] ? ksys_ioctl+0x81/0xd0 [ 1403.338783] __x64_sys_mkdir+0x5c/0x80 [ 1403.342682] do_syscall_64+0x1b9/0x820 [ 1403.346575] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1403.351955] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1403.356976] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1403.361841] ? trace_hardirqs_on_caller+0x310/0x310 [ 1403.366872] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1403.371899] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1403.376936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1403.381801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1403.387005] RIP: 0033:0x456987 [ 1403.390206] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1403.409596] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1403.417317] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1403.424589] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1403.431953] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1403.439226] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1403.446500] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1403.475985] XFS (loop2): Invalid superblock magic number 03:26:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0xc0189436, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000240)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L-', 0x81}, 0x28, 0x3) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r3, 0x302, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), 0x0}, 0x18) 03:26:36 executing program 5: mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:36 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:36 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) tgkill(r2, r2, 0x38) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:36 executing program 3 (fault-call:2 fault-nth:27): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1405.919815] FAULT_INJECTION: forcing a failure. [ 1405.919815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1405.931692] CPU: 1 PID: 8596 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1405.940205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.949573] Call Trace: [ 1405.952205] dump_stack+0x244/0x39d [ 1405.955867] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1405.961084] ? graph_lock+0x270/0x270 [ 1405.964922] should_fail.cold.4+0xa/0x17 [ 1405.969009] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1405.974129] ? find_held_lock+0x36/0x1c0 [ 1405.978215] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 1405.983861] ? lock_downgrade+0x900/0x900 [ 1405.988024] ? check_preemption_disabled+0x48/0x280 [ 1405.993064] ? kasan_check_read+0x11/0x20 [ 1405.997224] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1406.002513] ? graph_lock+0x270/0x270 [ 1406.006328] ? rcu_read_unlock_special+0x370/0x370 [ 1406.011305] ? rcu_read_unlock+0x16/0x60 [ 1406.015407] __alloc_pages_nodemask+0x34b/0xdd0 03:26:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1406.020091] ? kasan_check_read+0x11/0x20 [ 1406.024257] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1406.029279] ? rcu_read_unlock_special+0x370/0x370 [ 1406.034251] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1406.039808] ? trace_hardirqs_off+0xb8/0x310 [ 1406.039834] cache_grow_begin+0xa5/0x8c0 [ 1406.039851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1406.039871] ? check_preemption_disabled+0x48/0x280 [ 1406.048352] kmem_cache_alloc+0x66b/0x730 [ 1406.048370] ? __find_get_block+0x3b9/0xf10 [ 1406.048396] ? ratelimit_state_init+0xb0/0xb0 [ 1406.048410] ext4_alloc_inode+0xc7/0x880 [ 1406.048424] ? ratelimit_state_init+0xb0/0xb0 [ 1406.048455] ? __lock_acquire+0x62f/0x4c20 [ 1406.084821] ? mark_held_locks+0x130/0x130 [ 1406.089083] ? graph_lock+0x270/0x270 [ 1406.092898] ? ext4_es_lookup_extent+0x48f/0xdd0 [ 1406.097674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1406.103333] ? ratelimit_state_init+0xb0/0xb0 [ 1406.107846] alloc_inode+0x63/0x190 [ 1406.111489] new_inode_pseudo+0x71/0x1a0 [ 1406.115571] ? prune_icache_sb+0x1c0/0x1c0 [ 1406.119830] new_inode+0x1c/0x40 [ 1406.123215] __ext4_new_inode+0x4c8/0x65a0 [ 1406.127491] ? ext4_free_inode+0x1a10/0x1a10 [ 1406.131920] ? find_held_lock+0x36/0x1c0 [ 1406.136009] ? is_bpf_text_address+0xac/0x170 [ 1406.140516] ? lock_downgrade+0x900/0x900 [ 1406.144676] ? check_preemption_disabled+0x48/0x280 [ 1406.149712] ? kasan_check_read+0x11/0x20 [ 1406.153870] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1406.159157] ? rcu_read_unlock_special+0x370/0x370 [ 1406.164101] ? rcu_softirq_qs+0x20/0x20 [ 1406.168089] ? unwind_dump+0x190/0x190 [ 1406.171998] ? is_bpf_text_address+0xd3/0x170 [ 1406.176508] ? kernel_text_address+0x79/0xf0 [ 1406.181110] ? __kernel_text_address+0xd/0x40 [ 1406.185615] ? unwind_get_return_address+0x61/0xa0 [ 1406.190571] ? __save_stack_trace+0x8d/0xf0 [ 1406.194923] ? save_stack+0xa9/0xd0 [ 1406.198577] ? save_stack+0x43/0xd0 [ 1406.202217] ? __kasan_slab_free+0x102/0x150 [ 1406.206720] ? kasan_slab_free+0xe/0x10 [ 1406.210794] ? kmem_cache_free+0x83/0x290 [ 1406.214960] ? print_usage_bug+0xc0/0xc0 [ 1406.219026] ? __x64_sys_mkdir+0x5c/0x80 [ 1406.223095] ? do_syscall_64+0x1b9/0x820 [ 1406.227165] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1406.232637] ? trace_hardirqs_off+0xb8/0x310 [ 1406.237055] ? kasan_check_read+0x11/0x20 [ 1406.241212] ? do_raw_spin_unlock+0xa7/0x330 [ 1406.245637] ? trace_hardirqs_on+0x310/0x310 [ 1406.250063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1406.255611] ? __dquot_initialize+0x629/0xdd0 [ 1406.260163] ? dquot_get_next_dqblk+0x180/0x180 [ 1406.264850] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1406.269789] ? common_perm+0x1f6/0x7b0 [ 1406.273700] ext4_mkdir+0x2e1/0xe60 [ 1406.277358] ? ext4_init_dot_dotdot+0x510/0x510 [ 1406.282049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1406.287605] ? security_inode_permission+0xd2/0x100 [ 1406.292644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1406.298204] ? security_inode_mkdir+0xe8/0x120 [ 1406.302805] vfs_mkdir+0x42e/0x6b0 [ 1406.306355] do_mkdirat+0x27a/0x310 [ 1406.310018] ? __ia32_sys_mknod+0xb0/0xb0 [ 1406.314186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe 03:26:37 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000001bc0)='./file0\x00', 0x8002, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) process_vm_writev(r2, &(0x7f0000000100)=[{&(0x7f0000000780)=""/219, 0xdb}, {&(0x7f0000000880)=""/73, 0x49}], 0x2, &(0x7f0000000240)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/247, 0xf7}, {&(0x7f0000001a00)=""/149, 0x95}], 0x3, 0x0) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) r6 = getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) lsetxattr(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)=@known='system.sockprotoname\x00', &(0x7f0000001b40)='\x00', 0x1, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r6, 0x37) [ 1406.319576] ? trace_hardirqs_off_caller+0x300/0x300 [ 1406.324699] ? ksys_ioctl+0x81/0xd0 [ 1406.328337] __x64_sys_mkdir+0x5c/0x80 [ 1406.332253] do_syscall_64+0x1b9/0x820 [ 1406.336152] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1406.336174] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1406.336190] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1406.336210] ? trace_hardirqs_on_caller+0x310/0x310 [ 1406.336227] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1406.356452] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1406.356477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1406.356508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1406.356521] RIP: 0033:0x456987 [ 1406.356550] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1406.398899] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1406.406622] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1406.413905] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 03:26:37 executing program 4: [ 1406.421186] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1406.428464] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1406.435742] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1406.469651] FAT-fs (loop3): bogus number of reserved sectors [ 1406.479739] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:37 executing program 3 (fault-call:2 fault-nth:28): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:37 executing program 4: [ 1406.528287] XFS (loop2): Invalid superblock magic number 03:26:37 executing program 5: mkdir(0x0, 0x0) r0 = open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7003, &(0x7f0000000200)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r1, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1406.867207] FAULT_INJECTION: forcing a failure. [ 1406.867207] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.921727] CPU: 1 PID: 8626 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1406.930290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.939667] Call Trace: [ 1406.942280] dump_stack+0x244/0x39d [ 1406.946193] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1406.951403] ? perf_trace_sched_process_exec+0x860/0x860 [ 1406.956867] ? lock_downgrade+0x900/0x900 [ 1406.961038] should_fail.cold.4+0xa/0x17 [ 1406.965117] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1406.970230] ? block_commit_write+0x30/0x30 [ 1406.974566] ? print_usage_bug+0xc0/0xc0 [ 1406.978748] ? __ext4_handle_dirty_metadata+0x1e0/0x5a0 [ 1406.984130] ? kasan_check_write+0x14/0x20 [ 1406.988379] ? graph_lock+0x270/0x270 [ 1406.992209] ? __lock_is_held+0xb5/0x140 [ 1406.996310] ? perf_trace_sched_process_exec+0x860/0x860 [ 1407.001774] ? __lock_acquire+0x62f/0x4c20 [ 1407.006023] __should_failslab+0x124/0x180 [ 1407.010336] should_failslab+0x9/0x14 [ 1407.014148] __kmalloc+0x2e0/0x760 [ 1407.017706] ? ext4_find_extent+0x757/0x9b0 [ 1407.022135] ext4_find_extent+0x757/0x9b0 [ 1407.026310] ext4_ext_map_blocks+0x28c/0x48e0 [ 1407.030817] ? kasan_check_write+0x14/0x20 [ 1407.035076] ? ext4_ext_release+0x10/0x10 [ 1407.039242] ? graph_lock+0x270/0x270 [ 1407.043069] ? graph_lock+0x270/0x270 [ 1407.046888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1407.052443] ? check_preemption_disabled+0x48/0x280 [ 1407.057518] ? lock_acquire+0x1ed/0x520 [ 1407.061524] ? ext4_map_blocks+0x487/0x1b50 [ 1407.065864] ? lock_release+0xa10/0xa10 [ 1407.069850] ? perf_trace_sched_process_exec+0x860/0x860 [ 1407.075318] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 1407.080000] ? kasan_check_read+0x11/0x20 [ 1407.084157] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1407.089457] ? down_read+0x8d/0x120 [ 1407.093114] ? ext4_map_blocks+0x487/0x1b50 [ 1407.097467] ? __down_interruptible+0x700/0x700 [ 1407.102156] ? kernel_text_address+0x79/0xf0 [ 1407.106592] ext4_map_blocks+0xe2d/0x1b50 [ 1407.110756] ? __save_stack_trace+0x8d/0xf0 [ 1407.115099] ? ext4_issue_zeroout+0x190/0x190 [ 1407.119611] ? save_stack+0x43/0xd0 [ 1407.123245] ? __kasan_slab_free+0x102/0x150 [ 1407.127662] ? kasan_slab_free+0xe/0x10 [ 1407.131645] ? kmem_cache_free+0x83/0x290 [ 1407.135804] ext4_getblk+0x10e/0x630 [ 1407.139536] ? ext4_iomap_begin+0x1390/0x1390 [ 1407.144044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1407.149590] ? __dquot_initialize+0x629/0xdd0 [ 1407.154106] ext4_bread+0x95/0x2b0 [ 1407.157657] ? ext4_getblk+0x630/0x630 [ 1407.161555] ? dquot_get_next_dqblk+0x180/0x180 [ 1407.166237] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1407.171178] ? common_perm+0x1f6/0x7b0 [ 1407.175091] ext4_append+0x14e/0x370 [ 1407.178825] ext4_mkdir+0x532/0xe60 [ 1407.182493] ? ext4_init_dot_dotdot+0x510/0x510 [ 1407.187179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1407.192729] ? security_inode_permission+0xd2/0x100 [ 1407.197762] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1407.203313] ? security_inode_mkdir+0xe8/0x120 [ 1407.207911] vfs_mkdir+0x42e/0x6b0 [ 1407.211475] do_mkdirat+0x27a/0x310 [ 1407.215117] ? __ia32_sys_mknod+0xb0/0xb0 [ 1407.219277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1407.224657] ? trace_hardirqs_off_caller+0x300/0x300 [ 1407.229939] ? ksys_ioctl+0x81/0xd0 [ 1407.233917] __x64_sys_mkdir+0x5c/0x80 [ 1407.237818] do_syscall_64+0x1b9/0x820 [ 1407.241718] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1407.247094] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1407.252034] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1407.256893] ? trace_hardirqs_on_caller+0x310/0x310 [ 1407.261919] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1407.266949] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1407.271980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1407.276839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1407.282034] RIP: 0033:0x456987 [ 1407.285234] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1407.304147] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1407.311867] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1407.319145] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1407.326421] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1407.333703] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1407.340974] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1407.490457] FAT-fs (loop3): bogus number of reserved sectors [ 1407.515834] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:41 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x5421, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:26:41 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:41 executing program 4: 03:26:41 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:41 executing program 3 (fault-call:2 fault-nth:29): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:41 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000240)={0x7f, @broadcast, 0x4e22, 0x0, 'wrr\x00', 0x2, 0x5, 0x7d}, 0x2c) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) renameat(r0, &(0x7f00000000c0)='./bus\x00', r0, &(0x7f0000000100)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:41 executing program 4: [ 1410.625195] FAULT_INJECTION: forcing a failure. [ 1410.625195] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.637163] CPU: 0 PID: 8646 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1410.645674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.655046] Call Trace: [ 1410.657667] dump_stack+0x244/0x39d [ 1410.661328] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1410.666550] should_fail.cold.4+0xa/0x17 [ 1410.670635] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1410.675767] ? mark_held_locks+0x130/0x130 [ 1410.680028] ? find_held_lock+0x36/0x1c0 [ 1410.684111] ? is_bpf_text_address+0xac/0x170 [ 1410.688628] ? lock_downgrade+0x900/0x900 [ 1410.692787] ? check_preemption_disabled+0x48/0x280 [ 1410.697840] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1410.703136] ? rcu_read_unlock_special+0x370/0x370 [ 1410.707742] XFS (loop2): Invalid superblock magic number [ 1410.708085] ? rcu_softirq_qs+0x20/0x20 [ 1410.717498] ? unwind_dump+0x190/0x190 [ 1410.721408] ? graph_lock+0x270/0x270 03:26:41 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000004040)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:41 executing program 4: [ 1410.725221] __should_failslab+0x124/0x180 [ 1410.725244] should_failslab+0x9/0x14 [ 1410.733269] kmem_cache_alloc+0x47/0x730 [ 1410.737350] ? __es_tree_search.isra.12+0x1ba/0x220 [ 1410.742386] ? find_held_lock+0x36/0x1c0 [ 1410.746472] __es_insert_extent+0x30c/0x1120 [ 1410.750905] ? ext4_es_free_extent+0x790/0x790 [ 1410.755510] ? kasan_check_write+0x14/0x20 [ 1410.759862] ? do_raw_write_lock+0x14f/0x310 [ 1410.764276] ? do_raw_read_unlock+0x70/0x70 [ 1410.764294] ? __lock_is_held+0xb5/0x140 [ 1410.764328] ext4_es_insert_extent+0x352/0xbd0 [ 1410.764349] ? ext4_es_scan_clu+0x50/0x50 [ 1410.781439] ? __lock_is_held+0xb5/0x140 [ 1410.785539] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1410.790671] ext4_ext_put_gap_in_cache+0x15f/0x1f0 [ 1410.795632] ? ext4_rereserve_cluster+0x240/0x240 [ 1410.800499] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1410.806071] ext4_ext_map_blocks+0x1d92/0x48e0 [ 1410.810673] ? kasan_check_write+0x14/0x20 [ 1410.814937] ? ext4_ext_release+0x10/0x10 [ 1410.819100] ? graph_lock+0x270/0x270 [ 1410.819119] ? graph_lock+0x270/0x270 [ 1410.819144] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.819164] ? check_preemption_disabled+0x48/0x280 [ 1410.837324] ? lock_acquire+0x1ed/0x520 [ 1410.841319] ? ext4_map_blocks+0x487/0x1b50 [ 1410.845652] ? lock_release+0xa10/0xa10 [ 1410.845669] ? perf_trace_sched_process_exec+0x860/0x860 [ 1410.845688] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 1410.845709] ? kasan_check_read+0x11/0x20 [ 1410.863946] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1410.869353] ? down_read+0x8d/0x120 [ 1410.873087] ? ext4_map_blocks+0x487/0x1b50 [ 1410.877439] ? __down_interruptible+0x700/0x700 [ 1410.882147] ? kernel_text_address+0x79/0xf0 [ 1410.886579] ext4_map_blocks+0xe2d/0x1b50 [ 1410.890749] ? __save_stack_trace+0x8d/0xf0 [ 1410.895127] ? ext4_issue_zeroout+0x190/0x190 [ 1410.899643] ? save_stack+0x43/0xd0 [ 1410.903287] ? __kasan_slab_free+0x102/0x150 [ 1410.907797] ? kasan_slab_free+0xe/0x10 [ 1410.911788] ? kmem_cache_free+0x83/0x290 [ 1410.915952] ext4_getblk+0x10e/0x630 [ 1410.919682] ? ext4_iomap_begin+0x1390/0x1390 03:26:42 executing program 4: [ 1410.924198] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.929748] ? __dquot_initialize+0x629/0xdd0 [ 1410.934261] ext4_bread+0x95/0x2b0 [ 1410.937814] ? ext4_getblk+0x630/0x630 [ 1410.941716] ? dquot_get_next_dqblk+0x180/0x180 [ 1410.946404] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1410.951352] ? common_perm+0x1f6/0x7b0 [ 1410.955253] ext4_append+0x14e/0x370 [ 1410.955280] ext4_mkdir+0x532/0xe60 [ 1410.955309] ? ext4_init_dot_dotdot+0x510/0x510 [ 1410.955331] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.972859] ? security_inode_permission+0xd2/0x100 [ 1410.977902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1410.983469] ? security_inode_mkdir+0xe8/0x120 [ 1410.988087] vfs_mkdir+0x42e/0x6b0 [ 1410.991664] do_mkdirat+0x27a/0x310 [ 1410.995310] ? __ia32_sys_mknod+0xb0/0xb0 [ 1410.995332] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1410.995354] ? trace_hardirqs_off_caller+0x300/0x300 [ 1410.995370] ? ksys_ioctl+0x81/0xd0 [ 1410.995388] __x64_sys_mkdir+0x5c/0x80 [ 1411.017524] do_syscall_64+0x1b9/0x820 [ 1411.021440] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1411.026824] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1411.029247] IPVS: ftp: loaded support on port[0] = 21 [ 1411.031766] ? trace_hardirqs_on_caller+0x310/0x310 [ 1411.031787] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1411.031809] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1411.031832] ? __switch_to_asm+0x40/0x70 [ 1411.058376] ? __switch_to_asm+0x34/0x70 [ 1411.062477] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1411.067353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1411.072555] RIP: 0033:0x456987 03:26:42 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x5, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}], 0x1, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300), 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x699783285d5b5c73, 0x21, 0x1}, 0x136) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) [ 1411.075767] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1411.094690] RSP: 002b:00007f00d880da88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1411.102426] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1411.109712] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1411.117024] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1411.124313] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1411.131605] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1411.162131] FAT-fs (loop3): bogus number of reserved sectors [ 1411.168109] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:42 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673e4", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1412.109749] device bridge_slave_1 left promiscuous mode [ 1412.115419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.180317] device bridge_slave_0 left promiscuous mode [ 1412.186018] bridge0: port 1(bridge_slave_0) entered disabled state 03:26:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x60) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000380)=0x30) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x5, 0x4c3, 0x7, 0x6, 0xffffffffffffffff, 0x1ff}) 03:26:46 executing program 3 (fault-call:2 fault-nth:30): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:46 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfsB', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:46 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:46 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x5, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}], 0x1, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300), 0x0, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}}], 0x6, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r3) setsockopt$inet_buf(r4, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x699783285d5b5c73, 0x21, 0x1}, 0x136) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) [ 1415.701566] FAULT_INJECTION: forcing a failure. [ 1415.701566] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.713523] CPU: 1 PID: 8687 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1415.722037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.731597] Call Trace: [ 1415.734209] dump_stack+0x244/0x39d [ 1415.737864] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1415.743090] should_fail.cold.4+0xa/0x17 [ 1415.747161] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1415.752292] ? mark_held_locks+0x130/0x130 [ 1415.756549] ? find_held_lock+0x36/0x1c0 [ 1415.760639] ? is_bpf_text_address+0xac/0x170 [ 1415.765151] ? lock_downgrade+0x900/0x900 [ 1415.769401] ? check_preemption_disabled+0x48/0x280 [ 1415.774433] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1415.780766] ? rcu_read_unlock_special+0x370/0x370 [ 1415.785700] ? rcu_softirq_qs+0x20/0x20 [ 1415.789689] ? unwind_dump+0x190/0x190 [ 1415.793590] ? graph_lock+0x270/0x270 [ 1415.797411] __should_failslab+0x124/0x180 [ 1415.801674] should_failslab+0x9/0x14 [ 1415.805492] kmem_cache_alloc+0x47/0x730 [ 1415.809590] ? __es_tree_search.isra.12+0x1ba/0x220 [ 1415.814620] ? find_held_lock+0x36/0x1c0 [ 1415.818785] __es_insert_extent+0x30c/0x1120 [ 1415.823244] ? ext4_es_free_extent+0x790/0x790 [ 1415.827836] ? kasan_check_write+0x14/0x20 [ 1415.832076] ? do_raw_write_lock+0x14f/0x310 [ 1415.836496] ? do_raw_read_unlock+0x70/0x70 [ 1415.840823] ? __lock_is_held+0xb5/0x140 [ 1415.844904] ext4_es_insert_extent+0x352/0xbd0 [ 1415.849506] ? ext4_es_scan_clu+0x50/0x50 [ 1415.853676] ? __lock_is_held+0xb5/0x140 [ 1415.857764] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1415.862801] ext4_ext_put_gap_in_cache+0x15f/0x1f0 [ 1415.867737] ? ext4_rereserve_cluster+0x240/0x240 [ 1415.872592] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1415.878154] ext4_ext_map_blocks+0x1d92/0x48e0 [ 1415.882747] ? kasan_check_write+0x14/0x20 [ 1415.887006] ? ext4_ext_release+0x10/0x10 [ 1415.891169] ? graph_lock+0x270/0x270 [ 1415.894984] ? graph_lock+0x270/0x270 [ 1415.898794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1415.904340] ? check_preemption_disabled+0x48/0x280 [ 1415.909385] ? lock_acquire+0x1ed/0x520 [ 1415.913365] ? ext4_map_blocks+0x487/0x1b50 [ 1415.917789] ? lock_release+0xa10/0xa10 [ 1415.921772] ? perf_trace_sched_process_exec+0x860/0x860 [ 1415.927237] ? ext4_es_cache_extent+0x6a0/0x6a0 [ 1415.931921] ? kasan_check_read+0x11/0x20 [ 1415.936082] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1415.941379] ? down_read+0x8d/0x120 [ 1415.945013] ? ext4_map_blocks+0x487/0x1b50 [ 1415.949340] ? __down_interruptible+0x700/0x700 [ 1415.954020] ? kernel_text_address+0x79/0xf0 [ 1415.958440] ext4_map_blocks+0xe2d/0x1b50 [ 1415.962606] ? __save_stack_trace+0x8d/0xf0 [ 1415.967049] ? ext4_issue_zeroout+0x190/0x190 [ 1415.971558] ? save_stack+0x43/0xd0 [ 1415.975197] ? __kasan_slab_free+0x102/0x150 [ 1415.979615] ? kasan_slab_free+0xe/0x10 [ 1415.983599] ? kmem_cache_free+0x83/0x290 [ 1415.987759] ext4_getblk+0x10e/0x630 [ 1415.991506] ? ext4_iomap_begin+0x1390/0x1390 [ 1415.996023] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1416.001581] ? __dquot_initialize+0x629/0xdd0 [ 1416.006094] ext4_bread+0x95/0x2b0 [ 1416.009661] ? ext4_getblk+0x630/0x630 [ 1416.013572] ? dquot_get_next_dqblk+0x180/0x180 [ 1416.018260] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1416.023202] ? common_perm+0x1f6/0x7b0 [ 1416.027110] ext4_append+0x14e/0x370 [ 1416.030845] ext4_mkdir+0x532/0xe60 [ 1416.034502] ? ext4_init_dot_dotdot+0x510/0x510 [ 1416.039190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1416.044740] ? security_inode_permission+0xd2/0x100 [ 1416.049769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1416.055452] ? security_inode_mkdir+0xe8/0x120 [ 1416.060062] vfs_mkdir+0x42e/0x6b0 [ 1416.063715] do_mkdirat+0x27a/0x310 [ 1416.067351] ? __ia32_sys_mknod+0xb0/0xb0 [ 1416.071523] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1416.076899] ? trace_hardirqs_off_caller+0x300/0x300 [ 1416.082002] ? ksys_ioctl+0x81/0xd0 [ 1416.082019] __x64_sys_mkdir+0x5c/0x80 [ 1416.082036] do_syscall_64+0x1b9/0x820 [ 1416.082055] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1416.082070] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1416.082089] ? trace_hardirqs_on_caller+0x310/0x310 [ 1416.108742] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1416.113766] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 1416.120439] ? __switch_to_asm+0x40/0x70 [ 1416.124595] ? __switch_to_asm+0x34/0x70 [ 1416.128839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1416.133699] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1416.138893] RIP: 0033:0x456987 [ 1416.142093] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1416.161088] RSP: 002b:00007f00d880da88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1416.168801] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1416.176072] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1416.183342] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1416.190617] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1416.197995] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1416.218948] FAT-fs (loop3): bogus number of reserved sectors [ 1416.231822] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1418.941132] team0 (unregistering): Port device team_slave_1 removed [ 1418.963900] team0 (unregistering): Port device team_slave_0 removed [ 1418.994615] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1419.044266] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1419.169869] bond0 (unregistering): Released all slaves [ 1420.718684] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.725306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.733252] device bridge_slave_0 entered promiscuous mode [ 1420.780999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1420.787511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.795828] device bridge_slave_1 entered promiscuous mode [ 1420.866655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1420.929663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1421.072285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1421.168155] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1421.290341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1421.297350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1421.441590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1421.449987] team0: Port device team_slave_0 added [ 1421.496072] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1421.519298] team0: Port device team_slave_1 added [ 1421.578110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1421.678985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1421.748559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1421.755714] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1421.773656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1421.837358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1421.858772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1421.876856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1422.393363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.399944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1422.406615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.413044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.421747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1423.292897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1424.216228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.383160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1424.553930] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1424.560623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1424.569476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1424.742754] 8021q: adding VLAN 0 to HW filter on device team0 03:26:57 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x4e24, 0x4000000000000000, @mcast1, 0x1}}, 0x100000001, 0x1000, 0x85a3, 0x4, 0xb3}, &(0x7f0000000d00)=0x98) sendmmsg$inet_sctp(r3, &(0x7f0000000dc0)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000100)="b76fbb9bb3caf85afd8defe7c47709e6c762779a0f54b299a99e00615b28e9239f4cc22eac8d3736d1bea49fa5ba33ec5ca5f29b8a9e90a5dd", 0x39}, {&(0x7f00000002c0)="ef76ae639e8038bc627a8f034a8a796dc0a3af2d0c25d8a9d180b4b6913eb1ff0d71bbdeddbf54f0c5633df77dfcceed6169b908a230862af87295ddd55b52bd5f046d1bf4a591a7908ccdf3c37b0845eb5b9a243f5f66b1db1214571f8f4b5f374134acfb6e415a888fa7abfa82108d76c458", 0x73}, {&(0x7f0000000240)="1fdc6228cb61ade123e8e368f6ec1db695c6f092b01f29b42d0a735e77a3c6312702497b0ddd85beff97b356", 0x2c}, {&(0x7f0000000640)="dd71660f38f141ae8bee369d3474cbd616d1d0663c17b4eeb52a3c92f902621fac81e111c868a5492ca273389ff2a705aaa21f4852428eeb1408460bd1d52bff17ea4ca4994373a87d6cdf3c4fb3346ffb81a3a7efc18f12121f77311839814363f8512a0693fb9df67a0b7b873cef2d5c0b01d133d55df7ce0f9b970804927f69f0e9c311d393001aef111e59cc96476f08d58511422da60df4b2e6f797282f3477561f161a1c33cf7f6673f8007479a5777da857c71983ceb606a143d3f7db8a3e662b2db20ca694d7893eb1080dde5c2501e7b3ae9681b5c95a", 0xdb}, {&(0x7f0000000780)="1ee17cad40294ce815a8467086e704f4d7a320644580ed1c320eebf2c1967cf563da62b1b278cff89fac61a3a789983f8b9a649a3b83d1778970523ba4a89f1d2a1c508c525aae5b326c8cff626ae0b9c3d0be2679ee2cd6b497b1796e95c04f94994925e815528864fcb727945063c3d2971969e20266345176c59118a8be15d100810cce79bb2ee9eb2f2820d78f284f418f288c449099d16b497815c9e6c1f35fe9f8bfccc98ed2ebe6b5d312a1efcbf4f704ff3e76ab7d32007b4a39087c6be20a9db562bd4713ec4bac9a6d19e4f3ce21cf02f5b0bbf7d3a0426fdc215b9ef4b161daf7375b11a3fc3b77a95071df1cb4", 0xf3}, {&(0x7f0000000880)="dfe3444a5893e4fbf990e6cc324cea6524ab2b924fa22ac41bf8954f68a7a5b3be2abe70fa03cf8a5420e87c35c7f5d24ee0e0ae1630de1c30a135c240138dc58d27182ef7c1dbe9be453bfadcbf22cb2a7c720c80dfb1690109e8573c2cee7a260f08149074e2cb61ccd6796685170c9f4bff68c4bcedcc0c6315c5c14b6e6322300e22fc4fdaebdaa69eb0087f781bf3a8e3dd65fb2f4c1d8aece8d152730b90701d9f166cbb19d9f247fcc3703954ad35e3fe0dbcb0b4bc8ec69d010940120f5879e7f32dc1a4e8cdefe2df44a99882e953fa9edfb79aec3cec6764ae44a4234d59260bc2", 0xe6}, {&(0x7f0000000980)="9b2757c672f90888ac59ee4dacbdf6191188fb00b3320ecc9452dfb398d380aee2f0490c9ef821ba73e45e3a69b13ec890d755d407d2fca7515238870189215b4327cac6bfc7bccedb5d8eef6177c88bc9998ef4b26f4c996764af651dd222f0287dc000a73fbb7899ceac0681ff8df1cb23971fdea6d679c0fd28d5db41a25d1feb64047d563b633bb84e84175be7bf3870f6deac060529d259ea5b865269c2703e777773c4", 0xa6}, {&(0x7f0000000a40)="dc70c6a4d9732a6640034a440349937d18361809a4cf6a48a73c7423ac2266c3dda99e78d69bd29dc206233d5f652b61cd95787c527104502810c2e91e939b7355310e877e2468bb64094cc1460fcdd360198cb68876b0bd3c6d74332700d30d38894e2b996ddaf6ddb67f53b78aa15a18a3666275a4b70c7172f3c080fc9c9f80399586ab746f79d7e84e0cdd6ecc38a5e4d985a3b9bb3473e2f28a698f43bb3d9de5216ea3054f114999c8b47777c6aefed15e3d992329be4bf0ceaaa7a8aa0b61", 0xc2}, {&(0x7f0000000b40)}], 0x9, &(0x7f0000000d40)=[@init={0x18, 0x84, 0x0, {0x7, 0x2, 0x7, 0x10000}}, @sndinfo={0x20, 0x84, 0x2, {0x1400000000, 0x8000, 0x401, 0x27, r4}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0x68, 0x8000}], 0x1, 0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:57 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000380)={0x5, 0x0, 0x2080, {0x7000, 0x1001, 0x1}, [], "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", "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"}) mq_notify(r4, &(0x7f0000000200)={0x0, 0x17, 0x7, @thr={&(0x7f0000000040)="447091c0a5befa057ed4ff04a65c33539f4f1cc05056fb87045af343d5e633a6252d1ebf4a5a07728e59bafd60a7619e987b9cf43a67a3cf27733837aa0b6568d139015512930e5cbaa07a501dcb1b50cad723a2c86cebf7d620e1a911e470d48a47b7f4a3010c814df3caf840378a3dd6b1af663686737cdd71bb290b3a324bcca12e728729e9c4633f669e5397e9be53d797d3d1bdecba1efe428177990ad00022cffaf418555283613618a260648c6e89957eaff77cfbd6c0e7c132af11baddc1bb64e35f719bc4b17b19f78d2b92a49cfef2dffc05ef57bba102904400beb9a3b5bba8bb3d022474e12a0f10cb138dd9c6", &(0x7f0000000180)}}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000002400)={0x8, 0x9, 0xfffffffffffffff7, 0xfffffffffffffff9, 0xffffffffffffff24, 0xffffffff00000000, 0xfffffffffffffff7, 0xffffffffffffff7f, 0x400}) 03:26:57 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:57 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:57 executing program 3 (fault-call:2 fault-nth:31): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0x7ff, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) [ 1426.675931] FAULT_INJECTION: forcing a failure. [ 1426.675931] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.712723] CPU: 0 PID: 8951 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1426.721372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.730746] Call Trace: [ 1426.733363] dump_stack+0x244/0x39d [ 1426.737022] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1426.742246] ? __kernel_text_address+0xd/0x40 [ 1426.746756] ? unwind_get_return_address+0x61/0xa0 [ 1426.751708] should_fail.cold.4+0xa/0x17 [ 1426.751733] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1426.751760] ? kasan_kmalloc+0xc7/0xe0 [ 1426.751774] ? __kmalloc_track_caller+0x157/0x760 [ 1426.751788] ? memdup_user+0x2c/0xa0 [ 1426.751804] ? graph_lock+0x270/0x270 [ 1426.751818] ? do_syscall_64+0x1b9/0x820 [ 1426.751837] ? graph_lock+0x270/0x270 [ 1426.778551] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1426.781343] ? graph_lock+0x270/0x270 [ 1426.781365] ? find_held_lock+0x36/0x1c0 [ 1426.781400] ? perf_trace_sched_process_exec+0x860/0x860 [ 1426.806554] ? lock_release+0xa10/0xa10 [ 1426.810565] ? perf_trace_sched_process_exec+0x860/0x860 [ 1426.816048] ? usercopy_warn+0x110/0x110 [ 1426.820135] __should_failslab+0x124/0x180 [ 1426.824392] should_failslab+0x9/0x14 [ 1426.828204] kmem_cache_alloc_trace+0x2d7/0x750 [ 1426.832892] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1426.838445] ? _copy_from_user+0xdf/0x150 [ 1426.842618] copy_mount_options+0x5f/0x430 [ 1426.846876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1426.852439] ksys_mount+0xd0/0x140 [ 1426.855999] __x64_sys_mount+0xbe/0x150 [ 1426.859996] do_syscall_64+0x1b9/0x820 [ 1426.863894] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1426.869364] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1426.874307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1426.879161] ? trace_hardirqs_on_caller+0x310/0x310 [ 1426.884195] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1426.889231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1426.894784] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1426.900088] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1426.904973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1426.910171] RIP: 0033:0x459fda 03:26:58 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1426.913377] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1426.932293] RSP: 002b:00007f00d882ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1426.940213] RAX: ffffffffffffffda RBX: 00007f00d882eb30 RCX: 0000000000459fda [ 1426.947532] RDX: 00007f00d882ead0 RSI: 0000000020000080 RDI: 00007f00d882eaf0 [ 1426.954818] RBP: 0000000020000080 R08: 00007f00d882eb30 R09: 00007f00d882ead0 [ 1426.962121] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1426.969408] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1427.003901] XFS (loop2): Invalid superblock magic number 03:26:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000380)={0x5, 0x0, 0x2080, {0x7000, 0x1001, 0x1}, [], "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", "9cc4406a3a0d2b96505ca937a75ec831eebf0c72c8a0afd5cd9a5813b60c9a72c35252bc5380a8efa714f3a47584c4b545bcd723b62a1e702aecd3a2faa82f0dadd7757fd825bf38b11e4c23c4eec52a6816891eb78d7480623b67f188660d85488691ddd0d0c65ba359ba124b14da5a5a519d932cad084dbf779e0592f8c7e6f17edd021933051027325d0299ba8b1e9a0c535b980185d26deee2044028d7f55c423170e66b7cb94a92d2e117c76f861a9a78e96396acfbef70b3d6b150ae5750110028b1547683ac85c4cb0240052a1e2f9195d4881588db1e44b252493c3a079c191d109c9630a0facbdef55aa9822c0a58c35656c3c5e7a1a67ebe0bdb54d800ab226770f3aa353326557dfad219ef95719c3d9eb86d8ea0e6cf8b316375dac739db117c5db927207b31a96f33143c7b1daaa9965403a45d32ed9d9e7c76fb6803667b41342e80acb92229c6f8f3151b5f629738eea54be386950cb8326f1ee238187e4eb140a755fc19a91edc919f367b88986c5b6bb4422c6eebf356349a967c37e6841285ec711b8ae0bd43022de4ed780b719b7933de8086a7a9793b5e4aa024d30e30760e181b184ee2425b5f1b3d33190c7d8c8b6eb2d53924098b2233ee41d031c15131c94e449c16871c1818920a694c268f52cb9f0bb82d2584cc4b60c946d98ef0cc9c373b0df64a34d0a675dcb225e02ababe91600ec133a00332d1b35a259dcf38b785de2f847269d857fbe2e94b78833ed3d4e214d160971f1f2dc822af22d3c36ca7cdfe24aea1393a40b1a88eb9d26f81ec7fa5bedbe51bce9dca2ef58fdb3f4f1580819c98042b52a0516257db956dcb7321905a2f94b756869a6fc2ce3f01f51a2df4d4ea212f2a5501b92e247fdbff68b3254491a0e4f1f2cf08415b037fa7e6a2f2b0a89bf072b9326104f43c71bf1415330fcbf0daa264c69dcba94d977f0145746cd4e252e86958b2478e93b27609a37f5c688ae2f0f90e04e06721e54580feea137f63dcc0c61aeed97f80c9d0cee03c63fd799bf61bac3e6f5c4ec2b0ce38c6444bbf9020a7f8cbccabfbdfafa07864e5eca67702165b482edf2abd8da0a9287e484e3b7c1c354907218d40ec8d362fdddbc37bd97fac3760cf2508039fd6231afc7fc7b1b402503837fdf2071ffa173b5eb63e5257514e3fbf5acc3b5fe1da4e4108ef7391f321f1ba767ce6ced48b5df07105d77407c1550211c89320f01c63741f2a29f2c43828305de0e7c5a55f574ac4e86805667d17e74b9f563111235858cd1b029c9c655c440060b19583416f26a403f3d93474963375e82be23edc2b03e00c3a04fbfe8c70f5301d150dfea6dcf2c48a01e7a6648735e9ae8fb3c25bed07c05d78917a604b1c6312b36bf141471af958f7ad9e015e6bf2e45bae9e80662a5d886e261dd9e88f2c433775e23f7faa0a31457a06fc42ba13fac7ef5ba6414bc2b4363068c6bb6a997063d9cd31096a8129bded660a5952568f30294db7faf4db0de3e9f85def22f0a80e5804489ec9cb277bfbdbde2904992a432df061702f5cb32f0a762e6a79195e9b6ea30def453bc126ec18bfc1f32d01c5fd58fec7c9c800b95e533ad940e59d7635c27dfb943e58f215735afbf3c987b5c4c90ef983fe281aaef437e956cc8bd5d6d0fe3d739bb9cdca91f537845076321720da7452f6a4443b8b502ca0405c4c73990bc0ba3692d474becccc72eb4a4b09e1e8c70b1c1a8bbb15cae363355162b4f753fcd2f9b32c81d2d664cbc34ab5a61c9adc388db38b59b1933ecf2b06fa8ebe697141ccc14e0cf2c626800f2d88abe2b621d1927389f7c1958ff4301d9e474bc330233cbbc33b10d0e7a1b0196e4ded4c94e52b4843abc6e68b2223246f6d8d4a3095eaf7b9215955acb2d3bfe0d59c50082ee9722046c786da08b33aa2a712dd08e731720f773855592807b907c4eceb5c2ac158f670f3394c01dfbb38f4db34c142a248acf1be225fe2438474994fbefcc246f35a434eab58eefbe881cd0028c437d6567a68eeb391b5922c6db02512072de72caceebc4b6bb46b1f4abd74114b7a296bab05908d61f533604c69d60e2aeae429570d9dee2aad5ab0f0ab612cacaf74218108d2fc1682b96763850c502018d4954f92de16d7c47d59cef616433ee02b66e7fff0e40827fb0d45d6bac14a7d7bd1bd4c9962bb579e253a8652bea8e65c935b2f5b49cb78a3bfd060a239cbf181b54c3d9b5cec4bb46385608f34668e3e22f5e2ad24517d077ed30eeef4758e1d591ed7fb42e5d8f50a34c3141cfa125f2eed26430941ed027b29fe4d5429ca9c67a3773df4c0f2986b92d4f5f556de537e455d7b4c8ca39110e486abd5289d508532a54fae44508a52dc78e2ed88c8eac1ee352277b0f1183e15722e705720eb0660f097582daa142e9a10bd145742ee0d18c5ae7e3e99b6301da3bc3cda147ae3c9fe3f69ce4792a9960fe6d2a26943d63fca6899e2f3340f75b9b95ab0abd88ed07540bb53e30d8f3d34844ac4bcd1a160e087159a283aaf70eed08b95348570a2734f1c8548834780dfe27a7c801050467b1966d4a7a1ea2f1c6f1acac501e74f70f93fac00ca0574c7b49f0bc4a4ae361e140027af95690aa1fb6c6df341ca7ca776ebf47d84010c92775f35414f6c65109d22c2f4057eb6177936ed8d85e826aebbd3fe710aa1c274c27e7766865fa2b3472595700c07b87f2189db8126972a0b43066fafc8007d72d1dc6b13940aa78bfbfb60170f6b2779c9ea1c713b0b08b6bcfc7f642bbbe5285037588893fa7e9946f18135641bf287fc1a3f189ae57e0cfefb7f1e55ee25f8d77e7f7c5c27d488219f4c12cc0643e5cde294e85c9d198d76c087dddcb6dc75e17d92860252f7be29d171e60f7a3f62468b77abe87e901c2cf3ca0647856de5001c05bfa030763301b112b9a9d0b057ed0d6561aa675ee36a44132f57929590491bca3ee782f0216d10c166682e8b8018d5b7e059f4401435ebc4a409645f21e5394c995a29c96d8b7e12ef8bc9d8c653c1ddb1130cb9ff725979611a400508d5221d4a21e01882f8864ca131da0265ae8d70f91bd29d3e10337049d4916848b488181aa41b7ad72f9583762d9b0e6c66466a896cb2e1a2cee0d35621442e3c95c3fc7ba028314bc0fde982df55b9327c7902f5f03772bc8e07e41aa0f6efe77d53f89296df42f9588a9e102e3975d1ce001bcf028ecc233665efd664a97e25d356ab7faa4bd33b0426b2a01bf2290be6399e7d8c63438f17577c8514aa8bfd779dce66b901433f9a6b8d803764282921da307fa2692fb59dd0f9a4623fdf97298f76a837ea32c67c4c37483fcd4b4eebf9c6a3cdb7f830ddc0f3cff6a5620fcbdc918982b9d4c82ad014ff54795330ac7a6ed109fc9c198a11c796370ca8ba41d042ee015988d26547011b4b495c7423a0e71e31705112c1a58716a7a5a2b604ba5114a752f1b13e38e306b3de3364b4217c5ae421c2f0c324130777392d86cb9b87baf5d2c27fc491d5d9d5d85ba77383518264c6d7ed1fbe6ff423a2ca7bb1f4df885493ebb9e12477f0225976117159d51e2ac0eb86ffc83a6611acab46ae3913b0daa91ac71e977dfe418c22470fefc7e68ab3018f37848add5b001a79423fc132780bfc8a80998ce0a007318817b6b5684c370d413a1a89e26f5c5d00a7a0578ca777f15055e9e2c5aaa625ad7abe78d3465177a887032914fe1c432dcc7d7fc9f6c47622024ea6024a3508a89b42887a0713d601bcf5d65b84c15e534db2390e027f309ecb9cca7066e86495c8a731ed565f3df216797659ade0d9a590eedfcea12292be22820bef453226bb8bbc9aab09e867269d03dcec6b1300189e00bad683ae8f4e6fd6139ed050008148a94c9bc6aed135d93ef2ef19dbe131c990cd73637d48cf746b60a1cf2508780921eefb5af2d1fbed526d4b828ba12a998a737a39a5981b1b833e67022018128c18c27f63bb4ce8a8f2ee9f4370c8b70b0c6b670fbcffc28d21066a33153397f24534b269ebc78b9164b32dd790eeafdb0f494b488f3166ccd82bb81ce42e2b00c3705a1b739a28b644bf466e29cbf903253e231f198c7cce39a3440627272a666bfb0c2c39538d797ed4bbacd533804669a9417b4a52706c49750dc0adea7f2e7d32dc783235cd6ec4402db0457f8e253f5069d78826b93e4ec1b626f92fc59e5791ac8599526f7f15520195a742f1971c451d65ddb191f6b1023166be43ac930dd2c4d320c8195f366c4bab790b42528b974ef54e81377dda593d38764f04d1b1afffe4b58f0a74fb81074672db0d325b36954d4ca41033d159202ab5ef554c15e4589cfb965b3f2e8ab5a130a7e4ad14d2b851263b107a7dcbc3779f173b3b5d8fd02de6a91e81fc16290cfd91e48cd2cd894554a5a8af0855d5864da26008b12e740c3315312e063f3d64c82bdc6513744a03353bb9bf344301d29171dbe9ca0cc9d721a9c4005917ff4521a06a69289d741729c4d426065f75c2de5d4b36fbd1f579898c8c8af62be56a1ead9220860ad9536a828ab6518aead3d6f2f94c9d1396ba4f31adbd6863c0d26a26fb431e208771fcbb55be26189c379e50dd341f964c303bdf6d87cd0d87f2c412915fcd1bd54303be93b529a7d2340f0fd3ea8378edae324198b0f433061e121be0f3b17f50217674b28c80ebc73a6d2d67cacd063f7eb472421410bec4342bce8d5607ec67062b4a053153cd5b06a2b1ef8dfaaf9967235c154e6c6de49e58d0e1cc08d0f24d76b51d89e19ee54e15759a057ace287c175092fa1d54d76027773bea7b2b6719a44e31b46d6e425d7ddab7f42893d8064f1ee4abadd387719b497ce854321b85d7e336e606c34a1478b993af9eda075fdeb45539da343606b18e395b80471a84aaf05865b6af47ca9849ad5691e0254cee9239cf7597f8149fcff51f8bc132b047cbffe761ac69e7f9948d663e2b4cc1c48a35d393e2c5726b1f9646de61129783ac4cb6fcdace34dd44410e91a9940779d02d58f6565817b39d34123aec5076d4eb7fe771aa5a004dd7ba37845d05ea74e5f3c7df82816f7d5fc4830fea6c1d2f4669f31741248377d8629a29cbbf87ce44a93b9d9e78d411e5047a2549a5e8e85ad9efa8aaa65aee5da2927c07b4a7dd802a190be9e5572a22a8f53b101b7420288364543d7f8d507dc350ced4c763b0008d603e231072056188ccc7e0e4fe4160986276714b2688d784da772560012ff56433fc30d047a65c45667d28205c0487635e8eb0ba83a81196ea89f4534d99db1f5fa5f31410f574afc1cadbe45b88a7526d12766a8a857bb9c02b549853590bcc58fe60f28b8864feb604b343758599b03c3308a4a3d0b6569218d3db9c23103742e2e244ece27065c7196afdff8a03877ee2e12a2e09adead225d1a79fa782a8e74a317cc427481ad9570cce01a6c9a41adf7bba1fbf5a93e41a5c1ba7fc9ccd36019e33e89508372fb6fe0fc34662fad3e370d288e4e4cf87f312f7d729810acd23afc8b876ce505312cd292b1b8f0dab05d224528491ec75fc7a8ed0e7623c93221871aa5bddd3cb3c35daf2adb531e12d9a29b224f4ef827b6047085a56af05cf5b0fa3f76aa48cab6a73d6b74d7f46d1e17fe5bd4061c034a5a438ac978280b36610e2fbe3fb1216f10ef89ccb908ccee75191eaad69d754a2e2347a6d53ff419ae805d302630ef246da6f378ff1d31c48756a441c149c910b132129dad28b70690f56320912d6d93358"}) mq_notify(r4, &(0x7f0000000200)={0x0, 0x17, 0x7, @thr={&(0x7f0000000040)="447091c0a5befa057ed4ff04a65c33539f4f1cc05056fb87045af343d5e633a6252d1ebf4a5a07728e59bafd60a7619e987b9cf43a67a3cf27733837aa0b6568d139015512930e5cbaa07a501dcb1b50cad723a2c86cebf7d620e1a911e470d48a47b7f4a3010c814df3caf840378a3dd6b1af663686737cdd71bb290b3a324bcca12e728729e9c4633f669e5397e9be53d797d3d1bdecba1efe428177990ad00022cffaf418555283613618a260648c6e89957eaff77cfbd6c0e7c132af11baddc1bb64e35f719bc4b17b19f78d2b92a49cfef2dffc05ef57bba102904400beb9a3b5bba8bb3d022474e12a0f10cb138dd9c6", &(0x7f0000000180)}}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000002400)={0x8, 0x9, 0xfffffffffffffff7, 0xfffffffffffffff9, 0xffffffffffffff24, 0xffffffff00000000, 0xfffffffffffffff7, 0xffffffffffffff7f, 0x400}) 03:26:58 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:58 executing program 3 (fault-call:2 fault-nth:32): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:58 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1427.154370] FAULT_INJECTION: forcing a failure. [ 1427.154370] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.165902] CPU: 1 PID: 8978 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1427.174415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1427.183792] Call Trace: [ 1427.186418] dump_stack+0x244/0x39d [ 1427.190081] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1427.195312] should_fail.cold.4+0xa/0x17 [ 1427.199574] ? kasan_slab_free+0xe/0x10 [ 1427.203577] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1427.208717] ? ext4_mkdir+0x532/0xe60 [ 1427.212551] ? mark_held_locks+0x130/0x130 [ 1427.216804] ? trace_hardirqs_on+0x310/0x310 [ 1427.221241] ? ext4_es_delayed_clu+0x37e/0x420 [ 1427.225857] ? graph_lock+0x270/0x270 [ 1427.229673] ? mark_held_locks+0xc7/0x130 [ 1427.234170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1427.239728] ? check_preemption_disabled+0x48/0x280 [ 1427.244773] ? __lock_is_held+0xb5/0x140 [ 1427.248884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:26:58 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1427.254454] ? ext4_ext_map_blocks+0xedc/0x48e0 [ 1427.259143] __should_failslab+0x124/0x180 [ 1427.263394] should_failslab+0x9/0x14 [ 1427.267208] kmem_cache_alloc+0x47/0x730 [ 1427.271284] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1427.276316] ? ext4_es_can_be_merged+0x23d/0x2a0 [ 1427.281200] ? __es_tree_search.isra.12+0x1ba/0x220 [ 1427.286243] __es_insert_extent+0x30c/0x1120 [ 1427.290672] ? ext4_es_free_extent+0x790/0x790 [ 1427.295629] ? do_raw_write_lock+0x14f/0x310 [ 1427.300054] ? do_raw_read_unlock+0x70/0x70 [ 1427.304394] ? __lock_is_held+0xb5/0x140 [ 1427.308494] ext4_es_insert_extent+0x352/0xbd0 [ 1427.313097] ? ext4_es_scan_clu+0x50/0x50 [ 1427.317257] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1427.322555] ? down_write+0x8a/0x130 [ 1427.326284] ? ext4_map_blocks+0x88f/0x1b50 [ 1427.330621] ? down_read+0x120/0x120 [ 1427.334351] ? kernel_text_address+0x79/0xf0 [ 1427.338777] ext4_map_blocks+0xb0c/0x1b50 [ 1427.342944] ? __save_stack_trace+0x8d/0xf0 [ 1427.347302] ? ext4_issue_zeroout+0x190/0x190 [ 1427.351816] ? save_stack+0x43/0xd0 [ 1427.355458] ? __kasan_slab_free+0x102/0x150 [ 1427.359870] ? kasan_slab_free+0xe/0x10 [ 1427.363855] ? kmem_cache_free+0x83/0x290 [ 1427.368015] ext4_getblk+0x10e/0x630 [ 1427.371745] ? ext4_iomap_begin+0x1390/0x1390 [ 1427.376257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1427.381849] ? __dquot_initialize+0x629/0xdd0 [ 1427.386374] ext4_bread+0x95/0x2b0 [ 1427.389930] ? ext4_getblk+0x630/0x630 [ 1427.393830] ? dquot_get_next_dqblk+0x180/0x180 [ 1427.399019] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1427.403965] ? common_perm+0x1f6/0x7b0 [ 1427.407888] ext4_append+0x14e/0x370 [ 1427.411638] ext4_mkdir+0x532/0xe60 [ 1427.415289] ? ext4_init_dot_dotdot+0x510/0x510 [ 1427.419980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1427.425538] ? security_inode_permission+0xd2/0x100 [ 1427.430576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1427.436142] ? security_inode_mkdir+0xe8/0x120 [ 1427.440749] vfs_mkdir+0x42e/0x6b0 [ 1427.444306] do_mkdirat+0x27a/0x310 [ 1427.447953] ? __ia32_sys_mknod+0xb0/0xb0 [ 1427.452118] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1427.457500] ? trace_hardirqs_off_caller+0x300/0x300 [ 1427.462638] ? ksys_ioctl+0x81/0xd0 [ 1427.466289] __x64_sys_mkdir+0x5c/0x80 [ 1427.470198] do_syscall_64+0x1b9/0x820 [ 1427.474107] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1427.479588] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1427.484529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1427.489390] ? trace_hardirqs_on_caller+0x310/0x310 [ 1427.494436] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1427.499561] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1427.504621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1427.509484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1427.514686] RIP: 0033:0x456987 [ 1427.517898] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1427.536822] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1427.544622] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1427.551912] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1427.559191] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1427.566471] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1427.573754] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1427.595858] FAT-fs (loop3): bogus number of reserved sectors 03:26:58 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) modify_ldt$write(0x1, &(0x7f0000000100)={0x6, 0x20000800, 0xffffffffffffffff, 0xfff, 0x4aaa, 0x6, 0x0, 0x3a9, 0x7, 0x5}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:26:58 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:26:58 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667310", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1427.613369] FAT-fs (loop3): Can't find a valid FAT filesystem 03:26:58 executing program 3 (fault-call:2 fault-nth:33): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:26:58 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1427.703592] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1427.845138] FAULT_INJECTION: forcing a failure. [ 1427.845138] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.856657] CPU: 0 PID: 9002 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1427.865158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1427.865166] Call Trace: [ 1427.865191] dump_stack+0x244/0x39d [ 1427.865215] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1427.877201] should_fail.cold.4+0xa/0x17 [ 1427.877219] ? kasan_slab_free+0xe/0x10 [ 1427.894113] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1427.899233] ? ext4_mkdir+0x532/0xe60 [ 1427.903056] ? mark_held_locks+0x130/0x130 [ 1427.907302] ? trace_hardirqs_on+0x310/0x310 [ 1427.911814] ? ext4_es_delayed_clu+0x37e/0x420 [ 1427.916470] ? graph_lock+0x270/0x270 [ 1427.920285] ? mark_held_locks+0xc7/0x130 [ 1427.924461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1427.930011] ? check_preemption_disabled+0x48/0x280 [ 1427.935224] ? __lock_is_held+0xb5/0x140 [ 1427.939312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1427.944863] ? ext4_ext_map_blocks+0xedc/0x48e0 [ 1427.949561] __should_failslab+0x124/0x180 [ 1427.953816] should_failslab+0x9/0x14 [ 1427.957631] kmem_cache_alloc+0x47/0x730 [ 1427.961707] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1427.966739] ? ext4_es_can_be_merged+0x23d/0x2a0 [ 1427.971520] ? __es_tree_search.isra.12+0x1ba/0x220 [ 1427.976588] __es_insert_extent+0x30c/0x1120 [ 1427.981027] ? ext4_es_free_extent+0x790/0x790 [ 1427.985627] ? do_raw_write_lock+0x14f/0x310 [ 1427.990053] ? do_raw_read_unlock+0x70/0x70 [ 1427.994390] ? __lock_is_held+0xb5/0x140 [ 1427.998489] ext4_es_insert_extent+0x352/0xbd0 [ 1428.003108] ? ext4_es_scan_clu+0x50/0x50 [ 1428.007270] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1428.012595] ? down_write+0x8a/0x130 [ 1428.016422] ? ext4_map_blocks+0x88f/0x1b50 [ 1428.020758] ? down_read+0x120/0x120 [ 1428.024486] ? kernel_text_address+0x79/0xf0 [ 1428.028909] ext4_map_blocks+0xb0c/0x1b50 [ 1428.033070] ? __save_stack_trace+0x8d/0xf0 [ 1428.037503] ? ext4_issue_zeroout+0x190/0x190 [ 1428.042025] ? save_stack+0x43/0xd0 [ 1428.045666] ? __kasan_slab_free+0x102/0x150 [ 1428.050081] ? kasan_slab_free+0xe/0x10 [ 1428.054065] ? kmem_cache_free+0x83/0x290 [ 1428.058229] ext4_getblk+0x10e/0x630 [ 1428.061958] ? ext4_iomap_begin+0x1390/0x1390 [ 1428.066472] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1428.072028] ? __dquot_initialize+0x629/0xdd0 [ 1428.076555] ext4_bread+0x95/0x2b0 [ 1428.080108] ? ext4_getblk+0x630/0x630 [ 1428.084004] ? dquot_get_next_dqblk+0x180/0x180 [ 1428.088690] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 1428.093629] ? common_perm+0x1f6/0x7b0 [ 1428.097543] ext4_append+0x14e/0x370 [ 1428.101277] ext4_mkdir+0x532/0xe60 [ 1428.104926] ? ext4_init_dot_dotdot+0x510/0x510 [ 1428.109623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1428.115176] ? security_inode_permission+0xd2/0x100 [ 1428.120208] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1428.125743] ? security_inode_mkdir+0xe8/0x120 [ 1428.130325] vfs_mkdir+0x42e/0x6b0 [ 1428.133865] do_mkdirat+0x27a/0x310 [ 1428.137489] ? __ia32_sys_mknod+0xb0/0xb0 [ 1428.141645] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1428.147005] ? trace_hardirqs_off_caller+0x300/0x300 [ 1428.152104] ? ksys_ioctl+0x81/0xd0 [ 1428.155755] __x64_sys_mkdir+0x5c/0x80 [ 1428.159644] do_syscall_64+0x1b9/0x820 [ 1428.163550] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1428.168911] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1428.173840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1428.178681] ? trace_hardirqs_on_caller+0x310/0x310 [ 1428.183692] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1428.188703] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1428.193715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1428.198563] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1428.203744] RIP: 0033:0x456987 [ 1428.206934] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1428.225835] RSP: 002b:00007f00d882ea88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1428.233538] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000456987 [ 1428.240801] RDX: 0000000000000006 RSI: 00000000000001ff RDI: 0000000020000080 [ 1428.248068] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 1428.255331] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000006 [ 1428.262593] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1428.290422] FAT-fs (loop3): bogus number of reserved sectors [ 1428.296445] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:01 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:27:01 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x373) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:01 executing program 3 (fault-call:2 fault-nth:34): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000380)={0x5, 0x0, 0x2080, {0x7000, 0x1001, 0x1}, [], "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", "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"}) mq_notify(r4, &(0x7f0000000200)={0x0, 0x17, 0x7, @thr={&(0x7f0000000040)="447091c0a5befa057ed4ff04a65c33539f4f1cc05056fb87045af343d5e633a6252d1ebf4a5a07728e59bafd60a7619e987b9cf43a67a3cf27733837aa0b6568d139015512930e5cbaa07a501dcb1b50cad723a2c86cebf7d620e1a911e470d48a47b7f4a3010c814df3caf840378a3dd6b1af663686737cdd71bb290b3a324bcca12e728729e9c4633f669e5397e9be53d797d3d1bdecba1efe428177990ad00022cffaf418555283613618a260648c6e89957eaff77cfbd6c0e7c132af11baddc1bb64e35f719bc4b17b19f78d2b92a49cfef2dffc05ef57bba102904400beb9a3b5bba8bb3d022474e12a0f10cb138dd9c6", &(0x7f0000000180)}}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000002400)={0x8, 0x9, 0xfffffffffffffff7, 0xfffffffffffffff9, 0xffffffffffffff24, 0xffffffff00000000, 0xfffffffffffffff7, 0xffffffffffffff7f, 0x400}) 03:27:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id?', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,allow_other,blksize=0x0000000000001c00,allow_other,default_permissions,seclabel,\x00']) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x1, 0x6000}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1}) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1430.165838] FAULT_INJECTION: forcing a failure. [ 1430.165838] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.196516] CPU: 0 PID: 9022 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1430.205060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.214429] Call Trace: [ 1430.217049] dump_stack+0x244/0x39d [ 1430.220707] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1430.225924] ? __kernel_text_address+0xd/0x40 [ 1430.230453] ? unwind_get_return_address+0x61/0xa0 [ 1430.235493] should_fail.cold.4+0xa/0x17 [ 1430.239580] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1430.244712] ? save_stack+0x43/0xd0 [ 1430.248434] ? kasan_kmalloc+0xc7/0xe0 [ 1430.252351] ? __kmalloc_track_caller+0x157/0x760 [ 1430.257210] ? memdup_user+0x2c/0xa0 [ 1430.260941] ? do_syscall_64+0x1b9/0x820 [ 1430.265017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1430.270401] ? graph_lock+0x270/0x270 [ 1430.274212] ? graph_lock+0x270/0x270 [ 1430.278028] ? find_held_lock+0x36/0x1c0 [ 1430.282125] ? perf_trace_sched_process_exec+0x860/0x860 [ 1430.287588] ? lock_release+0xa10/0xa10 [ 1430.291572] ? perf_trace_sched_process_exec+0x860/0x860 [ 1430.297046] __should_failslab+0x124/0x180 [ 1430.301296] should_failslab+0x9/0x14 [ 1430.305122] __kmalloc_track_caller+0x2d1/0x760 [ 1430.309806] ? strncpy_from_user+0x5a0/0x5a0 [ 1430.314231] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1430.319781] ? strndup_user+0x77/0xd0 [ 1430.323600] memdup_user+0x2c/0xa0 [ 1430.327178] strndup_user+0x77/0xd0 [ 1430.330821] ksys_mount+0x73/0x140 [ 1430.334642] __x64_sys_mount+0xbe/0x150 [ 1430.338638] do_syscall_64+0x1b9/0x820 [ 1430.342546] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1430.348019] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1430.352963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1430.357824] ? trace_hardirqs_on_caller+0x310/0x310 [ 1430.362858] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1430.367885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1430.373435] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1430.378480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1430.383356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1430.388558] RIP: 0033:0x459fda [ 1430.391766] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 03:27:01 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:27:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) eventfd(0x70) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1430.410679] RSP: 002b:00007f00d882ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1430.418402] RAX: ffffffffffffffda RBX: 00007f00d882eb30 RCX: 0000000000459fda [ 1430.425946] RDX: 00007f00d882ead0 RSI: 0000000020000080 RDI: 00007f00d882eaf0 [ 1430.433227] RBP: 0000000020000080 R08: 00007f00d882eb30 R09: 00007f00d882ead0 [ 1430.440508] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1430.447791] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:27:01 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:01 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1430.493239] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:01 executing program 3 (fault-call:2 fault-nth:35): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:01 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:27:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x401004000000016) 03:27:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000380)={0x5, 0x0, 0x2080, {0x7000, 0x1001, 0x1}, [], "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", "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"}) mq_notify(r4, &(0x7f0000000200)={0x0, 0x17, 0x7, @thr={&(0x7f0000000040)="447091c0a5befa057ed4ff04a65c33539f4f1cc05056fb87045af343d5e633a6252d1ebf4a5a07728e59bafd60a7619e987b9cf43a67a3cf27733837aa0b6568d139015512930e5cbaa07a501dcb1b50cad723a2c86cebf7d620e1a911e470d48a47b7f4a3010c814df3caf840378a3dd6b1af663686737cdd71bb290b3a324bcca12e728729e9c4633f669e5397e9be53d797d3d1bdecba1efe428177990ad00022cffaf418555283613618a260648c6e89957eaff77cfbd6c0e7c132af11baddc1bb64e35f719bc4b17b19f78d2b92a49cfef2dffc05ef57bba102904400beb9a3b5bba8bb3d022474e12a0f10cb138dd9c6", &(0x7f0000000180)}}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:01 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000070000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"]) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) [ 1430.675108] FAULT_INJECTION: forcing a failure. [ 1430.675108] name failslab, interval 1, probability 0, space 0, times 0 03:27:01 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1430.722407] XFS (loop2): Invalid superblock magic number [ 1430.749753] CPU: 0 PID: 9051 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1430.758354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.767732] Call Trace: [ 1430.770359] dump_stack+0x244/0x39d [ 1430.774060] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1430.779325] ? __kernel_text_address+0xd/0x40 [ 1430.783857] ? unwind_get_return_address+0x61/0xa0 [ 1430.789088] should_fail.cold.4+0xa/0x17 [ 1430.793183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1430.798322] ? kasan_kmalloc+0xc7/0xe0 [ 1430.802223] ? __kmalloc_track_caller+0x157/0x760 [ 1430.807078] ? memdup_user+0x2c/0xa0 [ 1430.810840] ? graph_lock+0x270/0x270 [ 1430.814658] ? do_syscall_64+0x1b9/0x820 [ 1430.818738] ? graph_lock+0x270/0x270 [ 1430.822563] ? graph_lock+0x270/0x270 [ 1430.826392] ? find_held_lock+0x36/0x1c0 [ 1430.830501] ? perf_trace_sched_process_exec+0x860/0x860 [ 1430.835976] ? lock_release+0xa10/0xa10 [ 1430.839966] ? perf_trace_sched_process_exec+0x860/0x860 [ 1430.845446] ? usercopy_warn+0x110/0x110 [ 1430.849876] __should_failslab+0x124/0x180 [ 1430.854147] should_failslab+0x9/0x14 [ 1430.857968] kmem_cache_alloc_trace+0x2d7/0x750 [ 1430.862658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1430.868211] ? _copy_from_user+0xdf/0x150 [ 1430.872394] copy_mount_options+0x5f/0x430 [ 1430.876653] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1430.882235] ksys_mount+0xd0/0x140 [ 1430.885912] __x64_sys_mount+0xbe/0x150 [ 1430.889914] do_syscall_64+0x1b9/0x820 [ 1430.893822] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1430.899311] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1430.904272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1430.909141] ? trace_hardirqs_on_caller+0x310/0x310 [ 1430.914179] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1430.919223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1430.925003] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1430.930055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1430.934937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1430.940144] RIP: 0033:0x459fda [ 1430.943359] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1430.962294] RSP: 002b:00007f00d882ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 03:27:02 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1430.970030] RAX: ffffffffffffffda RBX: 00007f00d882eb30 RCX: 0000000000459fda [ 1430.977324] RDX: 00007f00d882ead0 RSI: 0000000020000080 RDI: 00007f00d882eaf0 [ 1430.984707] RBP: 0000000020000080 R08: 00007f00d882eb30 R09: 00007f00d882ead0 [ 1430.991998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1430.999300] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:27:02 executing program 3 (fault-call:2 fault-nth:36): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:02 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1431.109173] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000380)={0x5, 0x0, 0x2080, {0x7000, 0x1001, 0x1}, [], "0e7b3a0828f2684b9b34864bf04caa3e5685cdcc779681f21048603479930e84f209b41965ccf89244b1ae8610c1bebb413feff38ec98f2f431b473af46a0314c31830394fffa97ec305118746128b2be75adbbff57a5ca58910ffddf942f132a3930808f47d595fbf030b0092cf5f0f07ac144b75a13ccfd9a3a786e55efbe4d9c6a6e7d9ece12f1dfb65fdd38f2e9d010eab34e945956ec5173dad585955f123e10f77a2b10c3fd899610ab084315a3c2b6c727e92748c6366da9581977579f0fe61815eeb79895a96d8682a52e63286c045685a7bc6b87bd18f519af53a2338650e2f18231039eba9d8a1a99d0a00579dcf23e5910cb0e670b274f51cf7884cdf04b02281b79b6bbe1bcec5bb8ee7629bee32a14b9bd21a241a470dff1bddf105b05d9542b82c75048cd0c63a39cd7ff78888186a7254c69850fea2d01115b6c9434ae6d29e7562e9417558b3b55d1c36a789f34d6050df629e8c233b4cf2cfb7824ff72d25670af2e239df4e548440ff4ea882459b247b0fcee3243498ccfaff82352d1eb32040ae2def3eda01fdf05b1399b2d12c18b95bd116ac39c6b4117eec1cef1350d0a111e3dedbcae17fdae8454ede4005a32997ed38a18455ef46f7496ab500090e963466fd647b8b8ece4281c2b7778dd9eee60461fea802deae8197054f1cad76ca35af510cfed99a95d429bfaa321a9d647e4d749f9c7d070647f48bc4e82150b1a429552ab1c4b3c54e0379924d91c8677e4cf4941e1a669a0075b9737e49bbee150898a57e80362b39be5c8f4b33a0b39bc1cd3e6cae0d997af12bb75622b8d364edc2a9e2db60399000a0f610fd976efa4c77162080c3d9563ed07b5b98fb8465ae8fd9ce79a2789c83fae5781f35b06a275ccceed3468ef418b3747ad8dfd52a96dea4e3efd90beaf211febc4ef63c87e8225941eec515219463995c4fef1ecae218283865ae0fed3de2964cb8dae0a1efdc20cdfd8412e2f03acc37a0c4a735977f0701945c9b5a43be0cf1d0e2b13dbb4b5c605f6554752a5bae98a6aad453e3d8f12c4604ec5ab6804ae58a728d07e308ab62effc7ca44ccc71b772f337c588fdf8d1f6ba3272b9721d397485b78c39abec9f2ab4b127d062640bd6ec5f3fe776477b50a126df69d0343937c58d7e67a28edfa1b89c3969d77fa0841f498b3d6b6b496c05aa699dd6bdc407082985d8e3dea06b27403e412222aeac68568ac91133a508e35ec789df1b172eb2209eadbc8ff4ac6ba829f9183c9da5953a3d3bee9606bb533e167d311de7cf9f77262839afb5f8a6a34e34d9e39d32b0df7dfc40d60e9f0afbbdab88b1f9ac2e52bd570654752b3465913c350fbcb3c3ccc3dace2b75513d84618b737f675c1bd47518bcb49fce8f5c1e9070ddbf121090df2df9265e5d50c0680fdd2cdbb16006a6699011b8e05782d876a6949ab52c8471e6bed28ce1cae5c2f22a0c765b9b8a24fe2a824dc03cb17bdc6e7326470bb91d899e26782ef9f633e988daf2e4c4d264a1e51f4959ff23bde5b8ece2af02fa3cd073a1677a378dc5f913099a3ee99e9700dd07e850734c9ef462bfde15b8ac53db0295a353317644b7d36fb47713e7a37e5e304e0ba2e3d480fc5e65d21cc72837523a0f2bd7a566858964703d5831fb0a7a5a441355cd2f42358740a0a20365e8d11b8b163137a4ef2beae135a1ab2bf5136157d178613a8d26e449f53194004c31d4ce17a3d1e98b22ad2ef1632ef41fa6bdffbcdf329d14ffee584732456a54bc9fa379d9794e2f8f2d2bb54e987801863b1423737155cca8397ccbd02ae8be92c97766ef45c0ba0df24d7596cd734e078ccf11f4add5fcbf62ac3a02d022a3052c16aa5c97f439e85f4309f8497469e5ff86dd826e218e9821809db817b63c9212654d4659d93e309e77543d0ade447bd69164f7dbd9926acb7b8d75af2695f8aefea382e50611129c3364cc44e6fec8a2bf57055847a71bdf46a0d652cf1ac6d981ef31824ca4b436962a5f9b2fcbc532dcc8c7100e3e042ae99087e46e6676c3c749bdbe6b06fffa8f49c927db49c77287b2576f78c611d9964a8c2c753d29b8693a303fea19a83e12fb15d042bcdc258039bfccca02c8c053c42ba069e2b5ad7852faf5afce32e6bdf7be596ea30372984a1d28ae27122c60dc94cc95b9d795da1f1f301cdd7da2e6ab1d8e82ef1307f5abcc8181f5c9c9a5104159a742797cdd0d955538487c26bec80e78e8df57a5faa5067a286517a8725499d8766e8f435cd69eeb7dfeba73d2e0a35f81474d4af2bcd01fd07fd2cb53a3d9aef09d1708b75c49b9ce039ee02617189aae5117466f3b55fec2758538e33f1deace852440d0b94e3841cf810dc30a733af3b53910338012ef68059197e598259c6ba36d2dad13558d0a22479f68d32e1ee44b6e5f143a965cb3cec5de0f47f51c03dede6ac6b8299b274c36c550a9312fabd36d77c30c1d04c0e6780d102ec33e0894f7eb5157de2652546639feabf527abe43cf9c0ce202a38e556738760fa244240bf8e89ca81c117d911f4620187c0c2a91a2e67538059bd43c1c69818401ddab3c3e11f987cb60da4a3f8bb093e36794eff7939bc40326a3837d46df00e79cca57efb1ed41e55a9b792425dc0ed12d9fda9a467d048f3b72637373ea30b8c1d1410c4b1e20190dadd711f40ea714cfcf729e719ab0a1fb58d654b1b29e83b3db37d2df1cbd34a38abd5c941dc889254b484ab1d53276fc6d9f001aa7c22297686c79e5e7adaec2d99a308ec22a203e1e779ff92a4ee2e1f74edc32cde8255b3ddfa6c0297209d6ec56af942dc8cdc1acb819ec2cb107143422b7c6526fc014971adee66f58e6aa9751c0e376fcaf209cec7d3b41868ed64567e50c9858f638d21a804437e8d8b3038dfe5bc5088d66d09b24641e03afa8728b3a83eee2efdfdeb61846898936b736681d3c2ade882d9b7d9431adf6547b8d664f6bce7aaa8182efb78cb34b2ef019c1ff4cc2c497d1cd01717463bfccd7dbce4f21ef28d82ccb09283c4860165d135c91de25b318d7b301b06707d648385a4a717308244198e767406f5ae00436831b424132aa1d01a955977d2f845fbaf4f53471ddbb4fe00e3f7e182bb3fa56e814cc3e24edba371c4d1ba5b2e99aa6b0064f7acc5d193a0f9ef305bdc5dbd32be5414da457831a6ca246aa85795e312f3fe4e3860c65a613f0b525710035240c450ef87d861f0b68381e06f79e4f7703a0c02a75d0c359577fb74e709a5720facf6e623f8a474affb80bc3ed9da405af616ef2db16c8bb54c7479ff6b7c6147bded03526f1ed9d06a622590869c5352ec73920286ecf117d0a22a9bf905b79b1f0f62a1b20e558c5528bc46eb5eead5570fa654c7518bbddb5ea0e1c7fc14a78eb046f4a6b24f2ce7dffad745e0bfa992fc613522780c413e123b9fed337127289c62216eb8bd678defaec335e06b7b9f06221522a36e769991774bf14defb24291b1080bee8dfca9885fb1cbaff7cba5b88b67eedaf9b78289829c5dbf7388dd20a5e11e11cd8ac9e008dc66fb124a9809703dc280b6e424f815357ba1ce8ee7bc402ac1f21a0ee6ea29a57f80ca2c31c6fb6ba902d7767e21df5a496512901342f8254a60ed1c0f768e18d638c5e7fd6f22c5a64e5751aa6783535f764806c4ef59cbb98e875636ea364410dcbfa3733a532a4f71684a7d59c91b1ff146c86efaab02cc79f5bfdea4564204e76a0e196fd9e831169b7734596b3ad3778f22b53dccf7dc9ebe957022a0801bc2843d5a37ee3522a3b03a8e6b47926ab054252b66bf0f1ea552c31a822d1a0435ec478c1f594acb17d1ec6305bae27525e1079b94d34e5e9fbf3e8db0d7b348bfcaab9635b0a3958eba3e8f2d4de6b330802c95c39ae6987c552ad388fa0001e045172ff5502726379f44ffcfd6b7dca96344febc1d9adf939a4c3e9ccb0d7b77511de22eda1bdfc0f2fe06c76de4e424ee4b79f5a949474d739b48387c0df4f4d112f40befbdf6dd00e60c3fd26a75936a833c114a683dd7f422751410dae942893c041328b99114f0c76188414748631d83f462c12b8b3f28ebcb5ec943ff166180d471a2080e020f6dbb538b60e877f617040092d28ca5c597f7f198451514d18539a46b7d6368530b09e9220bfc7c09422b5e895e53fb731b9db4fcce2fbd024099bd6945fb0fbc2365441e2620bcd10b57eec00b5820a426141f4ca64160fa391741e99aa0ea5c9b9d2d919fb05d66595cdd2a5656e5baa21d890492c672da1329f7f9bd5fa4bd943c0e27e73472086db49216bfe0e49e2d33ad920b984724034b21d13f3d4e0933ddb5e8bc5b6a2993af9336e50a6dbc9c8765793894dbf09403045c97244104f525cad5d9cc677cae329aed0dcec467cac7141b386688de028cac4f0ce8f3bc191b8b4a8b7cb7d170f8443ee9acab23d6b18a2ec0c8128f4e49f0ce6a2d63b6a60caab913a811a675c3cc96ec69fb1f1ee3496b6298ad5ef48627c53820e4f770ff7a45f7bc5d1a9675926f240cebbe8af53f2e32e8bc207d7c7e89d8d0bb46f17566cf1bbf7585713a45c036bff1ce9bc7bc87230e8acbeb7b30d6f221f498d8807f5a1f1ed183af77e339c6395e80cdbe3daead62349ac1904b124dfa061f480e651b6e431a970579e8071862b168d81769282c1d20ba948d0ddce1d6b1d00232ee9008307a4fbf971e7030defd8c97e4b569317c2516c0c95f37cc74c5ac4bc9d44b2c69140885589eeaf5137a6bd87d1fcad6ba117faca382c213456e08679a9dccf8e1cacddcbfa9462ea0823ffab6e699c503ced5b39ed3601da99faa299e1f6f13e5b75e0944f33915b7a1fffede89b8ad0779239b80b28a8dc96ae22b5eb6b3e1f503309b05d18f031015066c840f552f3a459a1faa9d4c0139fcb2201337877696053f14df3daa1518f8a611503ea9ce3220f55ae2dd4ece38ce5f89ee531c709a05a1d0eb0d026297e78b8fca18c56f34f056bc54e2619c2e8c6989b7e049ab296c76c5201aaa66496e22bcfc0a334b2b465a30c3e32e02271fd4ce1c359048e8ee2c11824d1935027ad7e5227f94d2682bb3670180b9101b3b982ac47554198ee37f739df3b68db12e67c9d4cd67129e4328317c515c499ad10ea8e7a506ff48c37f333eba41a2f7e39b3c142da8644006cd18fe91e9837caab61db09ea3f4302c618446d5b86b8b653b318f175704eed54b610da18a5e56bc9624c9b3638515842856356dc058513034a9407aee196ad306bd4755de78f7cc2e22f7ce9bd2e70bb59264e886f9ac5cd364ab42f84f8925548904ada8d879cf9eb3bc095152e0d895b82779c9b7ca58ed42d35ab5b51df9f928f8b14623468e578b0a0f1081cd4f86cb4fc3076e88ed175fc9e513316749e9f344aaf37a218f5f9723cc26f2c0b1b895758419edf4f6ba9c8aa4589fd3b4d9a74259403b2a9a5358647c9eb2a3ecdb2b4b3a46f26e9b0857687322b64d28a410beb040b094d177752ff03bab2d3549a2198369befb02a9251210d1231f03570d411b9b1854c8e6ce2aa535d9de90c665376ec1c78009419ad219cf1f1a47ed2ae47ea22c3037b00505db43c018f75ba400f8969ed8c295144393891e979430ccd9f78005c75a97ce460c72cfe437b0c5678d837efa36c6e40890939ea0bcbe5466c4062f98578571831a55dd06e72f987d3ec3607978cd7d3d74b659cc0473156bb1069221ad834bf8873cabb84e94fffa88b456384dfbdc9a603f4ac767", "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"}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:02 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="c8d4282428d27493a4bec81985966aab4d9783f1ba36e852559977488681769f02b0d480541b2a9ac81841de8ad68c806599761103a5ea7d63a4efd71593151b0dfdd2ec53091844510b73913a72835b237d19d201654f1a8cab1a8ac2e2e37aac7fa7c10377f90200bc04487aedc86a0c75b2b5263f7b7df57de10ff2a988aade0eb99c44750757131f7d3b1ecded4cbe9ebe6d2a6b4e045f4190b4c8cd7105a524e29ecc08088dbb001745d025a0240a0248c46fccaab8ecaa7fd7273ee70200000056832eed581d8e1d0ef425f83f9d449513f47b7bc9f1ea52441599a49686bda6524284c5a7cac38359658b713fd4cf81322ad884745be35ed663408a1fc4"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1431.236828] FAULT_INJECTION: forcing a failure. [ 1431.236828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1431.248718] CPU: 1 PID: 9073 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1431.257241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.266610] Call Trace: [ 1431.269246] dump_stack+0x244/0x39d [ 1431.272893] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1431.278118] should_fail.cold.4+0xa/0x17 [ 1431.282205] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1431.287349] ? __lock_acquire+0x62f/0x4c20 [ 1431.291601] ? lock_downgrade+0x900/0x900 [ 1431.295761] ? check_preemption_disabled+0x48/0x280 [ 1431.300801] ? mark_held_locks+0x130/0x130 [ 1431.305057] ? mark_held_locks+0x130/0x130 [ 1431.309321] ? is_bpf_text_address+0xd3/0x170 [ 1431.313829] ? kernel_text_address+0x79/0xf0 [ 1431.318262] ? __kernel_text_address+0xd/0x40 [ 1431.322774] ? unwind_get_return_address+0x61/0xa0 [ 1431.327721] ? __save_stack_trace+0x8d/0xf0 [ 1431.332151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1431.337736] ? should_fail+0x22d/0xd01 [ 1431.341640] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1431.346765] __alloc_pages_nodemask+0x34b/0xdd0 [ 1431.351450] ? __kmalloc_track_caller+0x157/0x760 [ 1431.356307] ? memdup_user+0x2c/0xa0 [ 1431.360481] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1431.365525] ? find_held_lock+0x36/0x1c0 [ 1431.369612] ? acpi_get_ioapic_id+0x2a8/0x890 [ 1431.374141] ? trace_hardirqs_off+0xb8/0x310 [ 1431.378569] cache_grow_begin+0xa5/0x8c0 [ 1431.382742] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1431.388294] ? check_preemption_disabled+0x48/0x280 [ 1431.393337] kmem_cache_alloc_trace+0x684/0x750 [ 1431.398586] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1431.404156] copy_mount_options+0x5f/0x430 [ 1431.408406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1431.413963] ksys_mount+0xd0/0x140 [ 1431.417523] __x64_sys_mount+0xbe/0x150 [ 1431.421521] do_syscall_64+0x1b9/0x820 [ 1431.425422] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1431.430805] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1431.435745] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1431.440607] ? trace_hardirqs_on_caller+0x310/0x310 [ 1431.445636] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1431.450668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1431.456233] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1431.461274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1431.466151] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1431.471354] RIP: 0033:0x459fda [ 1431.474562] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1431.493475] RSP: 002b:00007f00d882ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1431.501211] RAX: ffffffffffffffda RBX: 00007f00d882eb30 RCX: 0000000000459fda [ 1431.508490] RDX: 00007f00d882ead0 RSI: 0000000020000080 RDI: 00007f00d882eaf0 [ 1431.515773] RBP: 0000000020000080 R08: 00007f00d882eb30 R09: 00007f00d882ead0 [ 1431.523053] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1431.530337] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 03:27:02 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1431.544817] FAT-fs (loop3): bogus number of reserved sectors [ 1431.550886] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:02 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) select(0x40, &(0x7f00000000c0)={0xffffffffffff9536, 0x70e1, 0x7, 0x100000000, 0x43, 0x1, 0xc6b, 0x7}, &(0x7f0000000100)={0x8000, 0x40000000000000, 0x1f, 0x9fc8, 0x3, 0x3e, 0xffffffff, 0x3ff}, &(0x7f0000000240)={0xffffffffffff4d0e, 0x7, 0x8, 0x6, 0x1, 0x0, 0x3f, 0x7673}, &(0x7f0000000780)={0x77359400}) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:27:02 executing program 3 (fault-call:2 fault-nth:37): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1431.600481] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1431.619512] XFS (loop2): Invalid superblock magic number [ 1431.741197] FAULT_INJECTION: forcing a failure. [ 1431.741197] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1431.753070] CPU: 0 PID: 9101 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1431.753084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.753090] Call Trace: [ 1431.753117] dump_stack+0x244/0x39d [ 1431.753140] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1431.753160] ? find_get_entries_tag+0x1400/0x1400 [ 1431.753199] should_fail.cold.4+0xa/0x17 [ 1431.753221] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1431.771106] ? print_usage_bug+0xc0/0xc0 [ 1431.800556] ? mark_held_locks+0x130/0x130 [ 1431.804803] ? graph_lock+0x270/0x270 [ 1431.808610] ? graph_lock+0x270/0x270 [ 1431.812419] ? print_usage_bug+0xc0/0xc0 [ 1431.816510] ? find_held_lock+0x36/0x1c0 [ 1431.820590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1431.826224] ? should_fail+0x22d/0xd01 [ 1431.830123] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1431.835250] __alloc_pages_nodemask+0x34b/0xdd0 [ 1431.839932] ? rcu_read_unlock_special+0x370/0x370 [ 1431.844875] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1431.849911] ? find_held_lock+0x36/0x1c0 [ 1431.854008] ? trace_hardirqs_off+0xb8/0x310 [ 1431.858424] cache_grow_begin+0xa5/0x8c0 [ 1431.862502] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1431.868048] ? check_preemption_disabled+0x48/0x280 [ 1431.873086] kmem_cache_alloc+0x66b/0x730 [ 1431.877246] ? find_held_lock+0x36/0x1c0 [ 1431.881329] getname_flags+0xd0/0x590 [ 1431.885149] user_path_at_empty+0x2d/0x50 [ 1431.889325] do_mount+0x180/0x1ff0 [ 1431.892877] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1431.898422] ? rcu_pm_notify+0xc0/0xc0 [ 1431.902336] ? copy_mount_string+0x40/0x40 [ 1431.906589] ? copy_mount_options+0x5f/0x430 [ 1431.911008] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1431.916041] ? kmem_cache_alloc_trace+0x353/0x750 [ 1431.920902] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1431.926450] ? _copy_from_user+0xdf/0x150 [ 1431.930625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1431.936191] ? copy_mount_options+0x315/0x430 [ 1431.940705] ksys_mount+0x12d/0x140 [ 1431.944350] __x64_sys_mount+0xbe/0x150 [ 1431.948347] do_syscall_64+0x1b9/0x820 [ 1431.952250] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1431.957628] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1431.962564] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1431.967418] ? trace_hardirqs_on_caller+0x310/0x310 [ 1431.972447] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1431.977741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1431.983382] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1431.988450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1431.993326] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1431.998524] RIP: 0033:0x459fda [ 1432.001733] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1432.020641] RSP: 002b:00007f00d882ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1432.028358] RAX: ffffffffffffffda RBX: 00007f00d882eb30 RCX: 0000000000459fda [ 1432.035641] RDX: 00007f00d882ead0 RSI: 0000000020000080 RDI: 00007f00d882eaf0 [ 1432.042920] RBP: 0000000020000080 R08: 00007f00d882eb30 R09: 00007f00d882ead0 [ 1432.050197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1432.057480] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1432.073279] FAT-fs (loop3): bogus number of reserved sectors [ 1432.079404] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) fchdir(r0) r2 = socket(0x5, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000006c0)={0x518, 0x9, 0x40, 0x0, 0x0, 0x3ff, 0x4, 0x20, 0x1, 0x8000, 0x4616}, 0xb) 03:27:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:05 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:05 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) getegid() mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@seclabel='seclabel'}]}}) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) getegid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) stat(0x0, &(0x7f00000049c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0), 0x3, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x7003, &(0x7f0000000200)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(r2) setsockopt$inet_buf(r3, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r4, &(0x7f0000000740)={0x7, 0x21, 0x1}, 0x7) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000780)={0x5, 0x0, 0x8ae7, {r5, r6+10000000}, 0x10001, 0x5}) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) 03:27:05 executing program 3 (fault-call:2 fault-nth:38): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:05 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1434.095515] FAULT_INJECTION: forcing a failure. [ 1434.095515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1434.107381] CPU: 1 PID: 9111 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1434.115888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1434.125255] Call Trace: [ 1434.127873] dump_stack+0x244/0x39d [ 1434.131519] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1434.136745] ? find_get_entries_tag+0x1400/0x1400 [ 1434.141621] should_fail.cold.4+0xa/0x17 [ 1434.145698] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1434.150825] ? print_usage_bug+0xc0/0xc0 [ 1434.154917] ? mark_held_locks+0x130/0x130 [ 1434.159155] ? graph_lock+0x270/0x270 [ 1434.162969] ? graph_lock+0x270/0x270 [ 1434.166781] ? print_usage_bug+0xc0/0xc0 [ 1434.170861] ? find_held_lock+0x36/0x1c0 [ 1434.174938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1434.180489] ? should_fail+0x22d/0xd01 [ 1434.184385] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1434.189519] __alloc_pages_nodemask+0x34b/0xdd0 [ 1434.194281] ? rcu_read_unlock_special+0x370/0x370 [ 1434.199221] ? __alloc_pages_slowpath+0x2e30/0x2e30 [ 1434.204259] ? find_held_lock+0x36/0x1c0 [ 1434.208350] ? trace_hardirqs_off+0xb8/0x310 [ 1434.212780] cache_grow_begin+0xa5/0x8c0 [ 1434.216852] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1434.222399] ? check_preemption_disabled+0x48/0x280 [ 1434.227431] kmem_cache_alloc+0x66b/0x730 [ 1434.231593] getname_flags+0xd0/0x590 [ 1434.235412] user_path_at_empty+0x2d/0x50 [ 1434.239571] do_mount+0x180/0x1ff0 [ 1434.243120] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1434.248667] ? rcu_pm_notify+0xc0/0xc0 [ 1434.252562] ? copy_mount_string+0x40/0x40 [ 1434.256812] ? copy_mount_options+0x5f/0x430 [ 1434.261223] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1434.266250] ? kmem_cache_alloc_trace+0x353/0x750 [ 1434.271104] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1434.276655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1434.282196] ? copy_mount_options+0x315/0x430 [ 1434.286701] ksys_mount+0x12d/0x140 [ 1434.290337] __x64_sys_mount+0xbe/0x150 [ 1434.294322] do_syscall_64+0x1b9/0x820 [ 1434.298217] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1434.303588] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1434.308528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1434.313380] ? trace_hardirqs_on_caller+0x310/0x310 [ 1434.318403] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1434.323430] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1434.328994] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1434.334021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1434.338888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1434.344080] RIP: 0033:0x459fda [ 1434.347370] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 7d 89 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5a 89 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 1434.366277] RSP: 002b:00007f00d882ea88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 1434.373996] RAX: ffffffffffffffda RBX: 00007f00d882eb30 RCX: 0000000000459fda [ 1434.381270] RDX: 00007f00d882ead0 RSI: 0000000020000080 RDI: 00007f00d882eaf0 [ 1434.388630] RBP: 0000000020000080 R08: 00007f00d882eb30 R09: 00007f00d882ead0 [ 1434.395907] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000006 [ 1434.403191] R13: 0000000000000000 R14: 00000000004d8d20 R15: 0000000000000005 [ 1434.435720] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) sendmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[{0x10, 0x117}], 0x10}}], 0x1, 0x48000) 03:27:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), 0x0}, 0x18) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1434.504318] XFS (loop2): Invalid superblock magic number 03:27:05 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:05 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) 03:27:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) sendmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[{0x10, 0x117, 0x3}], 0x10}}], 0x1, 0x48000) 03:27:05 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1434.759671] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1434.956888] XFS (loop2): Invalid superblock magic number 03:27:08 executing program 1: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) tkill(r0, 0xc) r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 03:27:08 executing program 0: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000001f00)) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000500)=@v3, 0x18, 0x6) modify_ldt$read(0x0, &(0x7f0000000340)=""/36, 0x24) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000003140)=ANY=[], 0x0) r0 = socket$inet6(0xa, 0x3, 0x3f) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f0000000140)='9', 0x1, 0x0, 0x0, 0x0) accept$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000600)=0x1c) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x47, 0x2}, 0x7) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0xa, 0x8) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000100)={0x9, 0x3ff, 0x300000, 0x0, 0x1cb, 0x8000, 0x0, 0xd2, 0x5, 0x98}) capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300)={0x1ff, 0x7, 0x6, 0x9, 0x100000000, 0x9}) mount(&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX], &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f000000a000)) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000180)) 03:27:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x4, 0x200004, 0x2}, 0x2c) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667301", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:08 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) mount(&(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) [ 1437.298167] FAT-fs (loop3): bogus number of reserved sectors [ 1437.308549] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1437.328560] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000002540)={0x1, 0x60, &(0x7f0000002440)="b118b79d100f57ec2d8641a1b14915fc5f6897be17505653d5469be983be78fd96fcbda93757f1cf80a66e3a98286f14cb20483062344657af75b5fe0199fd20945f125157e1678b2fb639a90865359dd1501ac4602ffbd6be33f36060bf34cae6dd54bef82a2bceafde5a56f3727930b739a1239413cfc9708cc071dd57dcdb33524709659bc3ed03ec901bc68a8391c4b16717a98d39603b2bedb767c8f49bcb2d81f261acdb1be1063aa251e55091d18b9a4092e331e67480667a44b7bff7c92cabdbf93700676a8640a2da576ab30d4818532c", {0xe3, 0x4c6d, 0x3f7f7f5f, 0x2, 0x80000000, 0x3, 0x6, 0x2}}) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='\nfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:08 executing program 5: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003f40)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xffffffffffffff6d) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x4}], 0x1, 0x0) close(0xffffffffffffffff) getpgid(0x0) setsockopt$inet_buf(r0, 0x0, 0x2f, 0x0, 0x0) write$P9_RXATTRCREATE(r1, 0x0, 0x0) mount(&(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) [ 1437.574530] XFS (loop2): Invalid superblock magic number [ 1437.593710] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1437.820006] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1437.849446] XFS (loop2): Invalid superblock magic number 03:27:11 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x88001, 0x0) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{}, 0x6}}, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x15d001, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10200, 0x2, 0x101000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000140)) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f0000000200)="58a363b7eecf5f915bf18e8b938f1751d9946b274927c632161d810fcdfff9cfb56a9edbc36f937fce2ff815119c52eb0fcb1169852a8bf5edfac5146fcb22d977cf1905fa694b5bf010dba6039b907c1fd031ce964a0206288077e9157894365f661f154ed0e3ee29ecc729cd78698040e00cd8e11f5dd0ff929380f538a8672d363ed1e76ecd4c5eab9d9e386c0bfadf7d85c9315a35f8a526db88708934ec", 0xa0}, {&(0x7f0000000380)="81d6421620c93d3ec9dbeb3122f05ffa0c6a90539a26426b75b203f6b00e926a37c5d709e670f0dac508ad5ca41d67efe7ee379637a56069fbc3b1228e6338dcaf71a5ccc3f10f00729d719c5a5d7b1462b73d36a5af73c2715f468c38c60c4acdd5d26f2571dc", 0x67}, {&(0x7f0000000400)="4079e7ca64e1badbd95727717625cc2b4eda2930f512adbc4c78e21cb3945302276656e116cf0c8adf7340dfe9fada31ac1a9aaf6746b55b851a6fff6176457fbabd5ba0c532fea149190287706e6381cebf6f1ae38ecc4897887eb6c8df5544cdd2128dfde1f4c5847ff143049fd548bfc9328bde25d83775481d5556f9fe6f0f6d207922920faf64c7d6eacf3d1b4f5307ee6653349edad532474fa40cc306df0cc5363affac6a81d11c829858aae2765379fa7bfdfbbd25c54915adc76856f441db8e4f8131c78cd9aafec391e2f1b19c74e4f8f0", 0xd6}], 0x3, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x9, 0x73, 0x301f}) 03:27:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='%fat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:11 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:11 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) getdents(r0, 0x0, 0x0) 03:27:11 executing program 5: r0 = memfd_create(&(0x7f00000002c0)="bccbb284bae9afc7157d4ee2200192790092146df957e5d8850a649df38e018f6c23cc4dab3d9911a649b66af28a28f5dcb6accc9beddd6a96b49ae1f31b145b1e38322139316f7dd0f0bbf82b822445b97238c2df009f5e6933d138be824d8eb02dd259a33306a5b5eb1d896e9154003b97ba24a087d2b4e13dcdebadeadcae827825a4895ebc81cb656a4edee0734e0f30bcbb6a2089", 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sync_file_range(r0, 0x0, 0x0, 0x0) [ 1440.310650] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) sendmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002380)=[{0x18, 0x117, 0x3, "98"}], 0x18}}], 0x1, 0x48000) 03:27:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r1, &(0x7f00000017c0), 0x1fe, 0x400000000000) 03:27:11 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1440.435310] XFS (loop2): Invalid superblock magic number 03:27:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000000180)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="cd", 0x1, 0x0, 0x0, 0x0) listen(r0, 0x2003) accept(r0, &(0x7f0000000100)=@hci, &(0x7f0000000240)=0x80) 03:27:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='v\nat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:11 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673fd", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1440.567157] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = socket$inet6(0xa, 0x80006, 0x7) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x8, [0x7f46, 0x7, 0xffffffffffffffc0, 0x80000001, 0x9, 0x7, 0x80000001, 0x10000]}, 0x14) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:14 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5500000018007f1412fe01b2a4a280930a06027700a84306910000002000140035000c0006000000190015c004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4faba7d4", 0x55}], 0x1}, 0x0) 03:27:14 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') dup3(r0, r1, 0x80000) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x7) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000026ff8)='./file0\x00', 0x0, 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) 03:27:14 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000002c0)=""/134, &(0x7f0000000240)=0x86) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:14 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfss', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='v%at\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1443.393476] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1443.403431] netlink: 'syz-executor5': attribute type 20 has an invalid length. [ 1443.424794] netlink: 25 bytes leftover after parsing attributes in process `syz-executor5'. 03:27:14 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x2f0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x1, [@local]}, 0x14) 03:27:14 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00000025c0)={0x0, 0x8, 0xff, 0xfff, 0x81, 0x8}) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x20}) [ 1443.667922] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='v.at\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1443.734284] XFS (loop2): Invalid superblock magic number 03:27:14 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) [ 1443.905373] sched: DL replenish lagged too much [ 1445.731538] device team0 entered promiscuous mode [ 1445.739920] device team_slave_0 entered promiscuous mode [ 1445.761510] device team_slave_1 entered promiscuous mode [ 1445.784463] 8021q: adding VLAN 0 to HW filter on device team0 03:27:18 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:18 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) syz_open_dev$admmidi(&(0x7f0000002580)='/dev/admmidi#\x00', 0x6, 0x200) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:18 executing program 0: 03:27:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='v/at\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2002, 0x0) tkill(r1, 0x401004000000016) 03:27:18 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) [ 1447.526641] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:18 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) [ 1447.670133] device team0 left promiscuous mode [ 1447.674890] device team_slave_0 left promiscuous mode [ 1447.681952] device team_slave_1 left promiscuous mode [ 1447.748240] XFS (loop2): Invalid superblock magic number [ 1448.486571] device team0 entered promiscuous mode [ 1448.492916] device team_slave_0 entered promiscuous mode 03:27:19 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1448.538883] device team_slave_1 entered promiscuous mode [ 1448.547303] 8021q: adding VLAN 0 to HW filter on device team0 03:27:19 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) 03:27:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vf\nt\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:19 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1448.830014] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1448.961081] XFS (loop2): Invalid superblock magic number 03:27:20 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="7866730e", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:20 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1449.064308] device team0 entered promiscuous mode [ 1449.071875] device team_slave_0 entered promiscuous mode [ 1449.078058] device team_slave_1 entered promiscuous mode [ 1449.090141] 8021q: adding VLAN 0 to HW filter on device team0 03:27:20 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) [ 1449.404826] device team0 left promiscuous mode [ 1449.410896] device team_slave_0 left promiscuous mode [ 1449.422148] device team_slave_1 left promiscuous mode 03:27:20 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673c4", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1449.588168] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:20 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfsf', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1450.061430] device team0 entered promiscuous mode [ 1450.066381] device team_slave_0 entered promiscuous mode [ 1450.072110] device team_slave_1 entered promiscuous mode [ 1450.079807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1450.109920] device team0 left promiscuous mode [ 1450.114767] device team_slave_0 left promiscuous mode [ 1450.125889] device team_slave_1 left promiscuous mode [ 1450.521109] device team0 entered promiscuous mode [ 1450.526028] device team_slave_0 entered promiscuous mode [ 1450.538773] device team_slave_1 entered promiscuous mode [ 1450.546176] 8021q: adding VLAN 0 to HW filter on device team0 03:27:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)=""/176) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0) getgroups(0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0x0]) setresgid(r2, r3, r4) tkill(r1, 0x401004000000016) 03:27:22 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:22 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) 03:27:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vf%t\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:22 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x10100, 0x0) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:22 executing program 0: 03:27:22 executing program 0: [ 1451.942102] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1451.967329] device team0 left promiscuous mode [ 1451.972236] device team_slave_0 left promiscuous mode [ 1451.979249] device team_slave_1 left promiscuous mode 03:27:23 executing program 0: 03:27:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1452.254414] XFS (loop2): Invalid superblock magic number 03:27:23 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs`', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:23 executing program 0: [ 1452.514809] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:23 executing program 0: [ 1452.773128] device team0 entered promiscuous mode [ 1452.778268] device team_slave_0 entered promiscuous mode [ 1452.809132] device team_slave_1 entered promiscuous mode [ 1452.820703] 8021q: adding VLAN 0 to HW filter on device team0 03:27:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0], 0x1000001df) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:26 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:26 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) 03:27:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfa\n\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:26 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:26 executing program 0: syz_open_procfs(0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000300)={0x78, 0x0, 0x0, {0x0, 0x7, 0x0, {0x0, 0x0, 0x0, 0x42258e9f, 0x0, 0x9}}}, 0x78) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0xa48204) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1455.005263] kauditd_printk_skb: 6 callbacks suppressed [ 1455.005278] audit: type=1804 audit(1544066846.124:84): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir395407687/syzkaller.i7mfYb/23/bus" dev="sda1" ino=16690 res=1 [ 1455.111117] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1455.125978] audit: type=1800 audit(1544066846.154:85): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16690 res=0 [ 1455.218177] audit: type=1804 audit(1544066846.194:86): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir395407687/syzkaller.i7mfYb/23/bus" dev="sda1" ino=16690 res=1 [ 1455.242547] device team0 left promiscuous mode [ 1455.247420] device team_slave_0 left promiscuous mode [ 1455.253927] device team_slave_1 left promiscuous mode [ 1455.283077] audit: type=1804 audit(1544066846.204:87): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir395407687/syzkaller.i7mfYb/23/bus" dev="sda1" ino=16690 res=1 03:27:26 executing program 0: syz_open_procfs(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000300)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1ff}}}, 0x78) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0xa48204) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r2, &(0x7f0000005000)=""/4096, 0xffffffc7, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffea) [ 1455.421537] audit: type=1800 audit(1544066846.204:88): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16690 res=0 03:27:26 executing program 4: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1455.543440] audit: type=1804 audit(1544066846.664:89): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir395407687/syzkaller.i7mfYb/24/bus" dev="sda1" ino=16571 res=1 [ 1455.579019] XFS (loop2): Invalid superblock magic number [ 1455.616374] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1455.670113] audit: type=1800 audit(1544066846.664:90): pid=9527 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16571 res=0 03:27:27 executing program 4: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1455.967281] device team0 entered promiscuous mode [ 1455.973255] device team_slave_0 entered promiscuous mode [ 1455.997096] device team_slave_1 entered promiscuous mode [ 1456.009530] 8021q: adding VLAN 0 to HW filter on device team0 03:27:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfa%\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:27 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) linkat(0xffffffffffffffff, 0x0, r5, &(0x7f0000000180)='./file0\x00', 0x1000) 03:27:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="7866730f", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1456.019930] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1456.274468] audit: type=1804 audit(1544066847.394:91): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir395407687/syzkaller.i7mfYb/24/bus" dev="sda1" ino=16571 res=1 [ 1456.303070] device team0 left promiscuous mode [ 1456.307714] device team_slave_0 left promiscuous mode [ 1456.339041] device team_slave_1 left promiscuous mode [ 1456.353464] audit: type=1804 audit(1544066847.394:92): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir395407687/syzkaller.i7mfYb/24/bus" dev="sda1" ino=16571 res=1 [ 1456.424297] audit: type=1800 audit(1544066847.394:93): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="bus" dev="sda1" ino=16571 res=0 [ 1456.755344] device team0 entered promiscuous mode [ 1456.760383] device team_slave_0 entered promiscuous mode [ 1456.766200] device team_slave_1 entered promiscuous mode [ 1456.773464] 8021q: adding VLAN 0 to HW filter on device team0 03:27:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={&(0x7f0000000000)="4bf793590654df1b1af5c4dba82ebda1fe5b6f12cc2069a094d838569b62c94efcab7c", &(0x7f0000000040)="21112dcb6c5937618d4b5d80632ff1d50a67e89f2d6000fbba91eece20611567ffe6a42ede7c5cd19003e07345e032e9f08f38f5b4f4f53315a4bcad6adec9fd4c4d579f644258f3a3a06f2d77ce8ffe2e6b81c8cb894a55ff36f02f607eb98ea87df51846b0e43a147179e9bea766590c2f4000b76ef6cbef210745257adfbf58fa25284ceb19e22850ccc1508e1632c7246cf2e752308bdbd4bc947f9d4b386384d799e3381b164a5d8d355a404453a3301d326b978e5fea2387ed89a92390c8d6"}}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:29 executing program 4: ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:29 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60f1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) 03:27:29 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:29 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) [ 1458.820247] FAT-fs (loop3): bogus number of reserved sectors [ 1458.836197] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:30 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000240)="47504c0083ff130f5fb00e5d5b644354b6e27770c5a6241e8defd6533e2ae106be655c6c526349216c30bb1f80fb450ec0d5be", 0x1, 0x99, &(0x7f0000000440)=""/153}, 0x48) [ 1458.914023] XFS (loop2): Invalid superblock magic number [ 1458.992502] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1459.084829] device team0 left promiscuous mode [ 1459.090018] device team_slave_0 left promiscuous mode [ 1459.097780] device team_slave_1 left promiscuous mode 03:27:30 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673ec", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1459.462221] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:30 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1459.696348] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1459.765531] device team0 entered promiscuous mode [ 1459.773237] device team_slave_0 entered promiscuous mode [ 1459.814470] device team_slave_1 entered promiscuous mode [ 1459.822016] 8021q: adding VLAN 0 to HW filter on device team0 [ 1459.864311] FAT-fs (loop3): bogus number of reserved sectors [ 1459.870424] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1459.900437] FAT-fs (loop3): bogus number of reserved sectors [ 1459.907621] XFS (loop2): Invalid superblock magic number [ 1459.908473] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x101, 0x200, 0x2, 0x5}, {0x2, 0x5, 0x2, 0x2}, {0x800, 0xffffffffffffffff, 0x6, 0x1b}, {0x5, 0xbc, 0xe766, 0x9}]}, 0x10) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:33 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:33 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 03:27:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24, 0xfffffffffffffffd}, 0xfffffffffffffe74) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x697c) r4 = socket$kcm(0x2, 0x3, 0x2) socketpair(0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000a80)=""/164, 0xa4}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000600)=""/119, 0x77}], 0x4, &(0x7f0000000fc0)=""/83, 0x53, 0x778}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000380)='&@[\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000240), 0x12) recvmsg$kcm(r4, &(0x7f0000000c00)={&(0x7f0000000580)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001040)=""/207, 0xcf}, {&(0x7f00000008c0)=""/80, 0xffffffffffffff4e}], 0x2, &(0x7f0000000940)=""/56, 0x38, 0x5}, 0x12020) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6e72300100"}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r5 = socket$kcm(0x2, 0x0, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7) recvmsg(r5, &(0x7f0000000a40)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)=""/98, 0x62}, {&(0x7f00000007c0)=""/222, 0xde}], 0x2, &(0x7f0000000980)=""/188, 0xbc, 0x1f}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f00000000c0)) write$cgroup_int(r6, &(0x7f0000000200), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='syz0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a1, &(0x7f0000000680)='&@[\x00') 03:27:33 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1462.361122] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1462.369309] FAT-fs (loop3): bogus number of reserved sectors [ 1462.378550] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:33 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfst', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1462.461927] device team0 left promiscuous mode [ 1462.471619] device team_slave_0 left promiscuous mode [ 1462.482867] device team_slave_1 left promiscuous mode 03:27:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1462.530587] FAT-fs (loop3): bogus number of reserved sectors [ 1462.557380] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:33 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1462.664856] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:33 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1462.844948] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:34 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1462.973657] XFS (loop2): Invalid superblock magic number [ 1462.997504] device team0 entered promiscuous mode [ 1463.002514] device team_slave_0 entered promiscuous mode [ 1463.008146] device team_slave_1 entered promiscuous mode [ 1463.015148] 8021q: adding VLAN 0 to HW filter on device team0 03:27:34 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1463.070607] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1463.386132] device team0 left promiscuous mode [ 1463.391503] device team_slave_0 left promiscuous mode [ 1463.399752] device team_slave_1 left promiscuous mode [ 1464.067220] device team0 entered promiscuous mode [ 1464.072278] device team_slave_0 entered promiscuous mode [ 1464.077912] device team_slave_1 entered promiscuous mode [ 1464.110056] 8021q: adding VLAN 0 to HW filter on device team0 03:27:36 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:36 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\n', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:36 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 03:27:36 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:36 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) [ 1465.909284] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 1466.061888] device team0 left promiscuous mode [ 1466.073067] device team_slave_0 left promiscuous mode [ 1466.076361] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1466.079232] device team_slave_1 left promiscuous mode 03:27:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1466.178332] XFS (loop2): Invalid superblock magic number 03:27:37 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1466.311403] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, 0x0) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1466.437620] XFS (loop2): Invalid superblock magic number 03:27:37 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1466.526613] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1466.600635] device team0 left promiscuous mode [ 1466.605429] device team_slave_0 left promiscuous mode [ 1466.612882] device team_slave_1 left promiscuous mode 03:27:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="766661747f", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:37 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1466.803935] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 1466.948021] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1466.985069] XFS (loop2): Invalid superblock magic number [ 1466.994423] device team0 entered promiscuous mode [ 1466.999406] device team_slave_0 entered promiscuous mode [ 1467.005073] device team_slave_1 entered promiscuous mode [ 1467.012036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1467.021745] device team0 entered promiscuous mode [ 1467.026643] device team_slave_0 entered promiscuous mode [ 1467.054174] device team_slave_1 entered promiscuous mode [ 1467.068274] 8021q: adding VLAN 0 to HW filter on device team0 03:27:40 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x8005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xcc, "02b4d0accfa48afd68f011ab66f34abc130fe03c363009a38fe523d7a7c8b071d21e881b73441b267bed2bf96e7e1f3bd9f47fbfb8071744cb082fc7646274a04bdce6ccfee63cc9b4f5deb1d7be39ab8f8cf8d61b14bcaced4603fb552752e677a1247e76aee89eb16fed487e9deb8d26435ec9b207f15d25581b8f300f526e1526577a2c10f6cafc55700f8d9528cf42b2ac6ed64a5ff0185893a591c47b21b92ae14ec09a5164863e7130b5f21067b83154cb8d2051897dd46d92ec7eaba9f1f1f079d29e3de09e873502"}, &(0x7f0000000140)=0xd4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x3, 0x1, 0xa18, 0x546, 0x100000000}, &(0x7f0000000200)=0x14) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:40 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:27:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:40 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:40 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 03:27:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1469.702680] device team0 left promiscuous mode [ 1469.707495] device team_slave_0 left promiscuous mode [ 1469.707661] device team_slave_1 left promiscuous mode [ 1469.726060] FAT-fs (loop3): bogus number of reserved sectors [ 1469.736285] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1469.738830] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:40 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)) syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1469.813408] XFS (loop2): Invalid superblock magic number [ 1469.872693] FAT-fs (loop3): bogus number of reserved sectors [ 1469.882260] FAT-fs (loop3): Can't find a valid FAT filesystem 03:27:41 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673d6", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1469.976331] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:41 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\a', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1470.214606] device team0 left promiscuous mode [ 1470.219563] device team_slave_0 left promiscuous mode [ 1470.233242] device team_slave_1 left promiscuous mode 03:27:41 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1470.417071] XFS (loop2): Invalid superblock magic number 03:27:41 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1470.682838] XFS (loop2): Invalid superblock magic number 03:27:41 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1470.775023] device team0 entered promiscuous mode [ 1470.780141] device team_slave_0 entered promiscuous mode [ 1470.785765] device team_slave_1 entered promiscuous mode [ 1470.792848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1470.803231] device team0 entered promiscuous mode [ 1470.808157] device team_slave_0 entered promiscuous mode [ 1470.813893] device team_slave_1 entered promiscuous mode [ 1470.822227] 8021q: adding VLAN 0 to HW filter on device team0 03:27:43 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xed) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x500, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) r2 = gettid() timer_create(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000000)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r3 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) r4 = msgget$private(0x0, 0x40) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000a00)=""/4096) 03:27:43 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:27:43 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r3 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r4, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r5, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r6 = eventfd2(0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r7, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) ppoll(&(0x7f0000000200)=[{r7}, {r6, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) ioctl$BLKPG(r0, 0x40480923, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 03:27:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:43 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1473.038479] FAT-fs (loop3): bogus number of reserved sectors [ 1473.044367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1473.096133] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1473.106638] device team0 left promiscuous mode [ 1473.111658] device team_slave_0 left promiscuous mode [ 1473.118021] device team_slave_1 left promiscuous mode [ 1473.285999] XFS (loop2): Invalid superblock magic number 03:27:44 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:44 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1473.828627] device team0 left promiscuous mode [ 1473.833354] device team_slave_0 left promiscuous mode [ 1473.838902] device team_slave_1 left promiscuous mode [ 1474.061184] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1474.101651] device team0 entered promiscuous mode [ 1474.108910] device team_slave_0 entered promiscuous mode [ 1474.122375] device team_slave_1 entered promiscuous mode [ 1474.139483] 8021q: adding VLAN 0 to HW filter on device team0 03:27:45 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:27:45 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="7866731c", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1474.159352] device team0 entered promiscuous mode [ 1474.164541] device team_slave_0 entered promiscuous mode [ 1474.182541] device team_slave_1 entered promiscuous mode [ 1474.201518] 8021q: adding VLAN 0 to HW filter on device team0 03:27:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1474.443145] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1474.501343] device team0 left promiscuous mode [ 1474.506334] device team_slave_0 left promiscuous mode [ 1474.512700] device team_slave_1 left promiscuous mode [ 1474.596621] FAT-fs (loop3): bogus number of reserved sectors [ 1474.604671] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1474.717695] FAT-fs (loop3): bogus number of reserved sectors [ 1474.733641] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1474.859208] device team0 entered promiscuous mode [ 1474.868504] device team_slave_0 entered promiscuous mode [ 1474.881145] device team_slave_1 entered promiscuous mode [ 1474.893338] 8021q: adding VLAN 0 to HW filter on device team0 03:27:47 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x14}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x2) socketpair(0x9, 0xa, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) syz_open_procfs(r1, &(0x7f0000000000)='net/rt6_stats\x00') tkill(r1, 0x401004000000016) 03:27:47 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) ppoll(&(0x7f0000000200)=[{}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:27:47 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031628571") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:47 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1476.187613] XFS (loop2): Invalid superblock magic number [ 1476.266910] FAT-fs (loop3): bogus number of reserved sectors [ 1476.274849] device team0 left promiscuous mode [ 1476.279675] device team_slave_0 left promiscuous mode [ 1476.285807] device team_slave_1 left promiscuous mode [ 1476.325913] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1476.489836] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:48 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031628571") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1477.013472] device team0 left promiscuous mode [ 1477.018123] device team_slave_0 left promiscuous mode [ 1477.023598] device team_slave_1 left promiscuous mode [ 1477.184926] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1477.272233] device team0 entered promiscuous mode [ 1477.276567] XFS (loop2): Invalid superblock magic number [ 1477.277188] device team_slave_0 entered promiscuous mode [ 1477.308625] device team_slave_1 entered promiscuous mode [ 1477.315870] 8021q: adding VLAN 0 to HW filter on device team0 03:27:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:48 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1477.339168] device team0 entered promiscuous mode [ 1477.344055] device team_slave_0 entered promiscuous mode [ 1477.344222] device team_slave_1 entered promiscuous mode [ 1477.360341] 8021q: adding VLAN 0 to HW filter on device team0 03:27:48 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:27:48 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d024031628571") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1477.465300] FAT-fs (loop3): bogus number of reserved sectors [ 1477.501315] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1477.600664] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1477.731314] device team0 left promiscuous mode [ 1477.736192] device team_slave_0 left promiscuous mode [ 1477.742966] device team_slave_1 left promiscuous mode [ 1478.726689] device team0 left promiscuous mode [ 1478.731660] device team_slave_0 left promiscuous mode [ 1478.738121] device team_slave_1 left promiscuous mode [ 1478.878117] FAT-fs (loop3): bogus number of reserved sectors [ 1478.935438] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1479.235427] device team0 entered promiscuous mode [ 1479.240549] device team_slave_0 entered promiscuous mode [ 1479.257557] device team_slave_1 entered promiscuous mode [ 1479.280118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.287111] device team0 entered promiscuous mode [ 1479.292104] device team_slave_0 entered promiscuous mode [ 1479.297714] device team_slave_1 entered promiscuous mode [ 1479.304674] 8021q: adding VLAN 0 to HW filter on device team0 03:27:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000080)={{r3, r4+10000000}, {r5, r6+30000000}}, &(0x7f00000000c0)) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:52 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02403162857170") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat`', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:52 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) 03:27:52 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940), 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1481.237528] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1481.312461] device team0 left promiscuous mode [ 1481.319773] device team_slave_0 left promiscuous mode [ 1481.333410] device team_slave_1 left promiscuous mode [ 1481.373028] XFS (loop2): Invalid superblock magic number 03:27:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02403162857170") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:52 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="7866738c", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:52 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667301", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1481.612414] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:27:52 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1481.857312] device team0 left promiscuous mode [ 1481.862299] device team_slave_0 left promiscuous mode [ 1481.868998] device team_slave_1 left promiscuous mode 03:27:53 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:53 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940), 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1482.137632] device team0 entered promiscuous mode [ 1482.142638] device team_slave_0 entered promiscuous mode [ 1482.148285] device team_slave_1 entered promiscuous mode [ 1482.155301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.168686] device team0 entered promiscuous mode [ 1482.173881] device team_slave_0 entered promiscuous mode [ 1482.217704] device team_slave_1 entered promiscuous mode [ 1482.269575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.270201] XFS (loop2): Invalid superblock magic number [ 1482.422057] device team0 left promiscuous mode [ 1482.437086] device team_slave_0 left promiscuous mode [ 1482.459974] device team_slave_1 left promiscuous mode [ 1482.896651] device team0 entered promiscuous mode [ 1482.901931] device team_slave_0 entered promiscuous mode [ 1482.909147] device team_slave_1 entered promiscuous mode [ 1482.927778] 8021q: adding VLAN 0 to HW filter on device team0 03:27:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000380)={"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"}) tkill(r1, 0x200022) 03:27:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d02403162857170") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:55 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfato', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:55 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) 03:27:55 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:55 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940), 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1484.596967] QAT: Invalid ioctl [ 1484.608706] QAT: Invalid ioctl [ 1484.625442] QAT: Invalid ioctl [ 1484.638520] QAT: Invalid ioctl [ 1484.706764] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1484.779786] device team0 left promiscuous mode [ 1484.784613] device team_slave_0 left promiscuous mode [ 1484.791212] device team_slave_1 left promiscuous mode [ 1485.820343] device team0 left promiscuous mode [ 1485.825147] device team_slave_0 left promiscuous mode [ 1485.831859] device team_slave_1 left promiscuous mode [ 1486.973612] device team0 entered promiscuous mode [ 1486.978868] device team_slave_0 entered promiscuous mode [ 1486.985528] device team_slave_1 entered promiscuous mode [ 1487.003163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.019175] device team0 entered promiscuous mode [ 1487.024295] device team_slave_0 entered promiscuous mode [ 1487.033626] device team_slave_1 entered promiscuous mode [ 1487.053381] 8021q: adding VLAN 0 to HW filter on device team0 03:27:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(0x0, &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:27:58 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) process_vm_readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/161, 0xa1}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:27:58 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) 03:27:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:27:58 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:58 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1487.422887] device team0 left promiscuous mode [ 1487.427835] device team_slave_0 left promiscuous mode [ 1487.435235] device team_slave_1 left promiscuous mode 03:27:58 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(0x0, &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1487.647316] FAT-fs (loop3): bogus number of reserved sectors [ 1487.677431] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1488.154033] device team0 entered promiscuous mode [ 1488.160818] device team_slave_0 entered promiscuous mode [ 1488.175720] FAT-fs (loop3): bogus number of reserved sectors [ 1488.188553] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1488.207141] device team_slave_1 entered promiscuous mode [ 1488.215468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.230361] device team0 left promiscuous mode [ 1488.235294] XFS (loop2): Invalid superblock magic number [ 1488.236315] device team_slave_0 left promiscuous mode 03:27:59 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1488.266686] device team_slave_1 left promiscuous mode 03:27:59 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:59 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:27:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(0x0, &(0x7f0000002640)='./file0\x00', 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1488.795005] XFS (loop2): Invalid superblock magic number [ 1488.810806] device team0 entered promiscuous mode [ 1488.824757] device team_slave_0 entered promiscuous mode [ 1488.845809] device team_slave_1 entered promiscuous mode [ 1488.863051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.902730] device team0 left promiscuous mode [ 1488.907524] device team_slave_0 left promiscuous mode [ 1488.914263] device team_slave_1 left promiscuous mode 03:28:00 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:00 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1489.375438] device team0 entered promiscuous mode [ 1489.399520] device team_slave_0 entered promiscuous mode [ 1489.418202] device team_slave_1 entered promiscuous mode [ 1489.426222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1489.438770] device team0 left promiscuous mode [ 1489.443814] device team_slave_0 left promiscuous mode [ 1489.455815] device team_slave_1 left promiscuous mode [ 1489.690144] XFS (loop2): Invalid superblock magic number [ 1490.090836] device team0 entered promiscuous mode [ 1490.095782] device team_slave_0 entered promiscuous mode [ 1490.107169] device team_slave_1 entered promiscuous mode [ 1490.122230] 8021q: adding VLAN 0 to HW filter on device team0 03:28:02 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="49b01dec901181337a7fc400296c0f878daf644f7f0155e57a7e92080c0b270d4065814473aa5ea293abaf451dc861cffc96f30f68059e77118fa586b9d04a8a22844436f57e3c55343284d7816f63bab9612aa9067bf63181b97e08944302477fe782ef8f7d52174523e4cc3acdfb6b96557c3dcfc3931b5022", @ANYPTR64], 0xfffffffffffffff2) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x1000, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000080)="44bdae4c1ec82b9427d87cf71a8e51a1486c365d5172bbbc885e67a9093966c7ee36d1b70ac8c7f57a06", 0x2a, 0x4}, {&(0x7f00000000c0)="d6a4a217baf51d70fd96aa8ca9e982154b940ed7b460a331d7740926bb9890669d4a44d53c2526e6a191950a7cc9461e177ff0012fed3b7b3495253f94218909e83015ccd3b8e8013133bfd6477952c00c415a3b78cf8627de5fc09c590302cbe08784d7c1353c4e30d94453fe48", 0x6e, 0x1}, {&(0x7f0000000140), 0x0, 0xb842}, {&(0x7f0000000200)="2971d8f3621f50e0e8226aa52b6b1c78b7efcb137535dd0c8a863121a0a15ed07c2644e5dc4552ca99cbb2876012e4c20bb43d30388a412e16e6205c8c1ea587c40f985dbd874cee7082d896e9f0dee99222084cfbecbb9332181b0b933f983a482922ca61944ed583c5ca81f856d3bcc093994a217d8cad7ce0f4f07e1f67478de7ee5832add290990a51dd42c5cae4e8f6cecfce40eda4b135e8e0ecc603692fc767d961a8a7371336f72b32aa21c626013cd0a55c7549aaefcc85cc86e68651bc", 0xc2, 0x401}, {&(0x7f0000000180)="e1dd684762e310512cd1bad6ed00fd6e602d08a0fc03a97f1adc9229b463e8ccf51efeb234bd7fa95558ab667a761c91", 0x30, 0x8}, {&(0x7f0000000380)="916d29060fde851f0d7121a65cedb395fc43adf1de3445c830973ce47a77750f1153fd1d5896bd9ffc312fed81a3252fb9c0f53388", 0x35, 0x7}], 0x100000, &(0x7f0000000540)={[{@allocsize={'allocsize', 0x3d, [0x31, 0x33, 0x74, 0x39, 0x33]}}, {@nolazytime='nolazytime'}], [{@obj_type={'obj_type', 0x3d, '/dev/input/event#\x00'}}, {@uid_gt={'uid>', r2}}]}) tkill(r1, 0x401004000000016) 03:28:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:02 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', 0x0, 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:28:02 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:02 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1491.861205] FAT-fs (loop3): bogus number of reserved sectors [ 1491.867074] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1491.942631] device team0 left promiscuous mode [ 1491.950503] device team_slave_0 left promiscuous mode [ 1491.967630] device team_slave_1 left promiscuous mode [ 1492.000540] XFS (loop2): Invalid superblock magic number 03:28:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', 0x0, 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:28:03 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000280)=0x8) tkill(r1, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000200)={0xfff, 0x6, 0x3, 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) [ 1492.320619] XFS (loop2): Invalid superblock magic number [ 1492.347798] device team0 left promiscuous mode [ 1492.352909] device team_slave_0 left promiscuous mode [ 1492.360728] device team_slave_1 left promiscuous mode 03:28:03 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:03 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1492.746520] device team0 entered promiscuous mode [ 1492.751570] device team_slave_0 entered promiscuous mode [ 1492.757192] device team_slave_1 entered promiscuous mode [ 1492.764255] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.779010] device team0 entered promiscuous mode [ 1492.784580] device team_slave_0 entered promiscuous mode 03:28:03 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', 0x0, 0x2, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) [ 1492.801416] device team_slave_1 entered promiscuous mode [ 1492.836777] 8021q: adding VLAN 0 to HW filter on device team0 03:28:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:04 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1492.871168] XFS (loop2): Invalid superblock magic number [ 1493.024683] device team0 left promiscuous mode [ 1493.030143] device team_slave_0 left promiscuous mode [ 1493.037104] device team_slave_1 left promiscuous mode 03:28:04 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1493.276907] FAT-fs (loop3): bogus number of reserved sectors [ 1494.145470] device team0 left promiscuous mode [ 1494.146033] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1494.150294] device team_slave_0 left promiscuous mode [ 1494.164417] device team_slave_1 left promiscuous mode 03:28:05 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x4, &(0x7f0000002840)=[{&(0x7f0000002680)="cc52ed10edbd8a2de1648d6c5e5309bd3bf5da3217602101269cc31dee30de4f3e348a7100c1d002732a0b58", 0x2c, 0xfffffffffffffffd}, {&(0x7f00000026c0)="91ff41fc7a43199e258030b7db81e48746a729ff57e5e194cf82d24d5c284ab73768ea13af2b0decc64c0de89b63db0a8cd9251dbdf138aa033297244fbabca534b4bf15ade6e372805c86397ca8c5b13ea49ce26beb0a1cb0e0f084bfeef4fbbf206a422efec8883a4ef87ac7ee6bc1ed9da6559224787d5f5a31f3454788456feac2db535f18087ac81e689000857f755d094ed7b6752567c7699a8a0e041000b013a53903eb27dc560ee5579db7735c4c1863dcadaf9728c51a5c070a82c679012d5378c723540fc7d9546b167124a6af8eba1b19e979e7b58ebf5dd2279f28a55a9b3d3851baf2a0f5bb0650f23a9aaf1e38", 0xf4, 0xa3}, {&(0x7f00000027c0)="b631206dbe6a085965fa8bfed7", 0xd, 0x1}, {&(0x7f0000002800)="da2fa330c19ac914db7f3151d9a278e758f881e1be", 0x15, 0x7f}], 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:28:05 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1494.590523] device team0 entered promiscuous mode [ 1494.595749] device team_slave_0 entered promiscuous mode [ 1494.601501] XFS (loop2): Invalid superblock magic number [ 1494.638784] device team_slave_1 entered promiscuous mode [ 1494.668730] 8021q: adding VLAN 0 to HW filter on device team0 03:28:05 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1494.697033] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:28:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:06 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1495.113817] device team0 left promiscuous mode [ 1495.113924] device team_slave_0 left promiscuous mode [ 1495.125637] device team_slave_1 left promiscuous mode [ 1495.169433] FAT-fs (loop3): bogus number of reserved sectors [ 1495.199243] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1495.244992] XFS (loop2): Invalid superblock magic number [ 1495.837074] FAT-fs (loop3): bogus number of reserved sectors [ 1495.844242] device team0 entered promiscuous mode [ 1495.849422] device team_slave_0 entered promiscuous mode [ 1495.864081] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1495.870299] device team_slave_1 entered promiscuous mode [ 1495.877552] 8021q: adding VLAN 0 to HW filter on device team0 03:28:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x4, 0x0, [], [{0x5, 0x8001, 0x8ae, 0x9, 0x0, 0x7ff}, {0xfff, 0x9, 0xfffffffffffffe01, 0x7f, 0xfffffffffffffc01, 0x4}], [[], [], [], []]}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xffff, 0x10100) write$P9_RSYMLINK(r2, &(0x7f0000000100)={0x14, 0x11, 0x1, {0x20, 0x4}}, 0x14) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xaf151bd1d133f84e) mq_notify(r3, &(0x7f0000000080)={0x0, 0x24, 0x4, @tid=r1}) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x29, 0x400) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000a00)={0x0, 0x0, 0x2080}) tkill(r1, 0x401004000000016) 03:28:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0xa, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:28:08 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:08 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617404", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1497.572536] XFS (loop2): Invalid superblock magic number [ 1497.605617] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1497.701898] device team0 left promiscuous mode [ 1497.706781] device team_slave_0 left promiscuous mode [ 1497.717157] device team_slave_1 left promiscuous mode 03:28:08 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:28:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673f2", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1497.900766] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value 03:28:09 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1498.200480] XFS (loop2): Invalid superblock magic number [ 1498.202137] device team0 entered promiscuous mode [ 1498.211152] device team_slave_0 entered promiscuous mode [ 1498.218861] device team_slave_1 entered promiscuous mode [ 1498.241670] 8021q: adding VLAN 0 to HW filter on device team0 03:28:09 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)={[{@nodots='nodots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}], [{@subj_user={'subj_user', 0x3d, '^'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/cec#\x00'}}]}) 03:28:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:09 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1498.378164] FAT-fs (loop4): Unrecognized mount option "subj_user=^" or missing value [ 1498.552812] FAT-fs (loop3): bogus number of reserved sectors [ 1498.578232] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1498.596324] device team0 left promiscuous mode [ 1498.601311] device team_slave_0 left promiscuous mode [ 1498.608042] device team_slave_1 left promiscuous mode [ 1499.338441] device team0 entered promiscuous mode [ 1499.343517] device team_slave_0 entered promiscuous mode [ 1499.360703] device team_slave_1 entered promiscuous mode [ 1499.370940] 8021q: adding VLAN 0 to HW filter on device team0 03:28:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x280000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="468de16f8361a5d5c61abf02cda9a9318c3c28131cf1b65ab2a92dc28de90d31c89a28f0d8aca26be288a71315253c720fa36a5e5c27c47991efdd7c87094429660f2705dbec66886287463d9de1f815177d7b1622b6a7089e98eeaf7c9c9d1dba", 0x61) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000180)={@dev, @broadcast, @remote}, &(0x7f0000000200)=0xc) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000040)=0x9, 0x8) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:28:12 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) socket(0x10, 0x802, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:12 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673c0", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:12 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfath', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:12 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1501.324766] device team0 left promiscuous mode [ 1501.334856] device team_slave_0 left promiscuous mode [ 1501.357205] device team_slave_1 left promiscuous mode [ 1501.381411] FAT-fs (loop4): bogus number of reserved sectors [ 1501.389961] FAT-fs (loop4): Can't find a valid FAT filesystem 03:28:12 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1501.572776] XFS (loop2): Invalid superblock magic number 03:28:12 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1501.663353] FAT-fs (loop4): bogus number of reserved sectors [ 1501.686649] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1501.819178] XFS (loop2): Invalid superblock magic number [ 1501.847847] device team0 entered promiscuous mode [ 1501.853339] device team_slave_0 entered promiscuous mode [ 1501.861258] device team_slave_1 entered promiscuous mode 03:28:13 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1501.883948] 8021q: adding VLAN 0 to HW filter on device team0 03:28:13 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:13 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1501.999116] FAT-fs (loop3): bogus number of reserved sectors [ 1502.004982] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1502.190979] device team0 left promiscuous mode [ 1502.201388] device team_slave_0 left promiscuous mode [ 1502.214862] device team_slave_1 left promiscuous mode [ 1502.403491] FAT-fs (loop3): bogus number of reserved sectors [ 1502.418520] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1502.685975] device team0 entered promiscuous mode [ 1502.697863] device team_slave_0 entered promiscuous mode [ 1502.717216] device team_slave_1 entered promiscuous mode [ 1502.742090] 8021q: adding VLAN 0 to HW filter on device team0 03:28:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)={0x3, 0x7fffffff, 0x9}) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x11}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r3 = dup3(r0, r1, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) tkill(r2, 0x401004000000016) sched_getscheduler(r2) 03:28:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") syz_mount_image$msdos(&(0x7f0000002600)='msdos\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:15 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:15 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617404", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:15 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940), 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:15 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1504.623814] FAT-fs (loop4): bogus number of reserved sectors [ 1504.638476] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1504.690133] device team0 left promiscuous mode [ 1504.694775] device team_slave_0 left promiscuous mode [ 1504.711812] device team_slave_1 left promiscuous mode 03:28:15 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:16 executing program 4: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000045c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x1d}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="dd", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 03:28:16 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs ', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:16 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1505.252652] device team0 entered promiscuous mode [ 1505.257876] device team_slave_0 entered promiscuous mode [ 1505.264568] device team_slave_1 entered promiscuous mode [ 1505.285414] 8021q: adding VLAN 0 to HW filter on device team0 03:28:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617402", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:16 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1505.386401] XFS (loop2): Invalid superblock magic number 03:28:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040), 0x4) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000080)=""/13) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) dup3(r0, r0, 0x80000) 03:28:18 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:18 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:18 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') pread64(r0, 0x0, 0x35e, 0x0) 03:28:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="76666174fd", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:18 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:18 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) socketpair(0x0, 0x6, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2a2, 0x10400003) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000040)='./bus\x00', 0x6, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000440)={0x68c, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0000, 0x4) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) socket(0x200000000000011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 1507.879229] XFS (loop2): Invalid superblock magic number [ 1508.025862] device team0 left promiscuous mode [ 1508.035998] device team_slave_0 left promiscuous mode [ 1508.086693] device team_slave_1 left promiscuous mode 03:28:19 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1508.366169] XFS (loop2): Invalid superblock magic number 03:28:19 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:19 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:19 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1508.836578] device team0 entered promiscuous mode [ 1508.841692] device team_slave_0 entered promiscuous mode [ 1508.841844] device team_slave_1 entered promiscuous mode [ 1508.854241] 8021q: adding VLAN 0 to HW filter on device team0 03:28:20 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1509.168265] device team0 left promiscuous mode [ 1509.173224] device team_slave_0 left promiscuous mode [ 1509.184432] device team_slave_1 left promiscuous mode [ 1509.270471] XFS (loop2): Invalid superblock magic number [ 1509.660093] device team0 entered promiscuous mode [ 1509.665117] device team_slave_0 entered promiscuous mode [ 1509.673054] device team_slave_1 entered promiscuous mode [ 1509.694985] 8021q: adding VLAN 0 to HW filter on device team0 03:28:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = dup2(r0, r0) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x80000000003f) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x7, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)={0x1f, 0x7, 0x1, {{0x12, '/dev/input/event#\x00'}, 0x3}}, 0x1f) tkill(r1, 0x401004000000014) 03:28:22 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) socketpair(0x0, 0x6, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2a2, 0x10400003) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000040)='./bus\x00', 0x6, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000440)={0x68c, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0000, 0x4) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) socket(0x200000000000011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 03:28:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:22 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:22 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:22 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1511.691761] FAT-fs (loop3): bogus number of reserved sectors [ 1511.702619] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1511.714209] device team0 left promiscuous mode [ 1511.719076] device team_slave_0 left promiscuous mode [ 1511.726807] device team_slave_1 left promiscuous mode [ 1511.977192] FAT-fs (loop3): bogus number of reserved sectors [ 1511.994779] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1512.028942] XFS (loop2): Invalid superblock magic number 03:28:23 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:23 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1512.415986] device team0 entered promiscuous mode [ 1512.421264] device team_slave_0 entered promiscuous mode [ 1512.448747] device team_slave_1 entered promiscuous mode [ 1512.457288] 8021q: adding VLAN 0 to HW filter on device team0 03:28:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1512.482197] XFS (loop2): Invalid superblock magic number 03:28:23 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:23 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) socketpair(0x0, 0x6, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2a2, 0x10400003) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000040)='./bus\x00', 0x6, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000440)={0x68c, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0000, 0x4) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) socket(0x200000000000011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 03:28:23 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1512.720495] FAT-fs (loop3): bogus number of reserved sectors [ 1512.748942] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1512.933823] device team0 left promiscuous mode [ 1512.950385] device team_slave_0 left promiscuous mode [ 1512.983783] FAT-fs (loop3): bogus number of reserved sectors [ 1512.999548] device team_slave_1 left promiscuous mode [ 1513.021386] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1513.139221] XFS (loop2): Invalid superblock magic number [ 1513.583715] device team0 entered promiscuous mode [ 1513.588744] device team_slave_0 entered promiscuous mode [ 1513.594390] device team_slave_1 entered promiscuous mode [ 1513.601506] 8021q: adding VLAN 0 to HW filter on device team0 03:28:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xc66, 0x2, 0x2, 0x80000001, 0x0, 0x1, 0x10000, 0x4, 0x8001, 0x4, 0xfffffffffffffffc, 0x10000, 0x9, 0x4, 0x4, 0xff, 0x4, 0x7ff, 0x7, 0x5, 0x8, 0xfffffffffffffbff, 0x8, 0x8e, 0x1, 0x0, 0x800, 0x7, 0x3, 0x2, 0x5, 0x0, 0x80000000, 0x100000000, 0x5, 0x7, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x200}, 0x80, 0x40, 0x5887, 0x7, 0x3, 0x8, 0x9}, r1, 0xf, r2, 0x8) tkill(r1, 0x401004000000016) 03:28:26 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673f9", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:26 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:26 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:26 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) socketpair(0x0, 0x6, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000100), 0x2a2, 0x10400003) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000040)='./bus\x00', 0x6, 0x0) socketpair(0x0, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000440)={0x68c, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0000, 0x4) lchown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000500)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) socket(0x200000000000011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 1515.744465] device team0 left promiscuous mode [ 1515.764909] device team_slave_0 left promiscuous mode [ 1515.810055] device team_slave_1 left promiscuous mode [ 1515.983267] FAT-fs (loop3): bogus number of reserved sectors [ 1515.990154] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs0', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1516.047698] FAT-fs (loop3): bogus number of reserved sectors [ 1516.081049] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:27 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1516.579330] device team0 entered promiscuous mode [ 1516.590150] device team_slave_0 entered promiscuous mode [ 1516.597531] XFS (loop2): Invalid superblock magic number [ 1516.611397] device team_slave_1 entered promiscuous mode [ 1516.626366] 8021q: adding VLAN 0 to HW filter on device team0 03:28:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:27 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1516.803457] FAT-fs (loop3): bogus number of reserved sectors [ 1516.818506] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1516.889135] FAT-fs (loop3): bogus number of reserved sectors [ 1516.899604] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x863, 0x200000000000005) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:28:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667301", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:30 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:30 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:30 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000440)="10000000f0ffbfffff00000018855da0", 0x10}]) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r4 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet6_dccp_int(r4, 0x21, 0x17, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200000, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) mq_notify(r5, &(0x7f0000000180)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000200)="1efaaea63d5cb371e0dac57650ca642e3f7635f4090a8001f65e21af153ae32842581ea813663649ad68ec9e7797bca77390686827a1ce81c478983bb3f7d7cf69e42d0ac719a273fc961798009417dc964919ccb777d240baa1906f505db5d53e7e1fa91d3948725215b1e58e8742dfe99499dbd8af0cc1610549b9e4c77eaba0b0cbe62a8569a92c86ac35f0d2a66d7f95b68ae2d34e98bd77f315c68a70aad2", &(0x7f00000003c0)="1bbc2bafe4dadd53b2c4d9b1c28fb68837c7765079838cb62500774c7f3e50f53d24b7697019181d7bfb601e862e5dbeec6d0930d109520f08578e33b541e8df3a82e8767e65b59904a0"}}) tkill(r1, 0x401004000000014) r6 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x800) ioctl$VIDIOC_G_AUDOUT(r6, 0x80345631, &(0x7f00000002c0)) write$P9_RSTATFS(r6, &(0x7f0000000040)={0x43, 0x9, 0x1, {0x200, 0x40, 0x7, 0x7fff, 0x1, 0x7fffffff, 0x5, 0x8001, 0x870}}, 0x43) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, r7, r8) [ 1519.296665] device team0 left promiscuous mode [ 1519.301558] device team_slave_0 left promiscuous mode [ 1519.307885] device team_slave_1 left promiscuous mode [ 1519.319278] FAT-fs (loop3): bogus number of reserved sectors 03:28:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667397", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1519.388549] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:31 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1520.060896] device team0 entered promiscuous mode [ 1520.066092] device team_slave_0 entered promiscuous mode [ 1520.087718] device team_slave_1 entered promiscuous mode 03:28:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat ', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1520.129096] 8021q: adding VLAN 0 to HW filter on device team0 03:28:31 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:31 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:31 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673f2", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617403", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:31 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1520.712873] device team0 left promiscuous mode [ 1520.717710] device team_slave_0 left promiscuous mode [ 1520.725312] device team_slave_1 left promiscuous mode 03:28:32 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:32 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:32 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfsh', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:34 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:34 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:34 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:34 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:34 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xfffffffffffffffe, 0xc240) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x7ee, 0x400040) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) setreuid(r3, r4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040), 0x4) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/227) 03:28:34 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80000) connect$nfc_llcp(r2, &(0x7f00000000c0)={0x27, 0x0, 0x2, 0x0, 0x1ff, 0xc8, "7a8866b92ca8db9b6230b3af21a0a6c7d76471b5403982d44ef2b7655f57e2063a92b0100d530285809cfb631aaa60bd5fa23c41100aa70af4f3a0c7e35821", 0x35}, 0x60) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x3f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x3f, 0xffff, 0x10000}) [ 1523.885884] FAT-fs (loop3): bogus number of reserved sectors [ 1523.893091] device team0 entered promiscuous mode [ 1523.898092] device team_slave_0 entered promiscuous mode [ 1523.904162] device team_slave_1 entered promiscuous mode [ 1523.904330] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1523.924521] 8021q: adding VLAN 0 to HW filter on device team0 03:28:35 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1524.043889] FAT-fs (loop3): bogus number of reserved sectors [ 1524.054234] XFS (loop2): Invalid superblock magic number [ 1524.062569] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:35 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:35 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:35 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1524.430440] FAT-fs (loop3): bogus number of reserved sectors [ 1524.470850] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:35 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:35 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:35 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:35 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:36 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1525.112056] FAT-fs (loop3): bogus number of reserved sectors [ 1525.122119] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1525.139363] device team0 left promiscuous mode [ 1525.144159] device team_slave_0 left promiscuous mode [ 1525.151135] device team_slave_1 left promiscuous mode 03:28:36 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667305", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1525.770992] FAT-fs (loop3): bogus number of reserved sectors [ 1525.791657] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1525.863848] device team0 entered promiscuous mode [ 1525.869064] device team_slave_0 entered promiscuous mode [ 1525.897902] device team_slave_1 entered promiscuous mode [ 1525.905075] 8021q: adding VLAN 0 to HW filter on device team0 03:28:38 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x101000) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000040)=0x3) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:28:38 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:38 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:38 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617405", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:38 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:38 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 1527.965999] device team0 left promiscuous mode [ 1527.980006] device team_slave_0 left promiscuous mode [ 1527.996122] device team_slave_1 left promiscuous mode 03:28:39 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 1528.079290] XFS (loop2): Invalid superblock magic number 03:28:39 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1528.370074] XFS (loop2): Invalid superblock magic number 03:28:39 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1528.599807] device team0 entered promiscuous mode [ 1528.605047] device team_slave_0 entered promiscuous mode [ 1528.613310] device team_slave_1 entered promiscuous mode [ 1528.633672] 8021q: adding VLAN 0 to HW filter on device team0 03:28:39 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617401", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:39 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs"', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1528.942848] device team0 left promiscuous mode [ 1528.947849] device team_slave_0 left promiscuous mode [ 1528.956096] device team_slave_1 left promiscuous mode [ 1529.675775] device team0 entered promiscuous mode [ 1529.681092] device team_slave_0 entered promiscuous mode [ 1529.703447] device team_slave_1 entered promiscuous mode [ 1529.725549] 8021q: adding VLAN 0 to HW filter on device team0 03:28:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x800, 0x2000) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x1}) ioctl$TIOCCBRK(r2, 0x5428) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) tkill(r1, 0x401004000000016) 03:28:42 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:42 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 03:28:42 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667380", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:42 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={0x0, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1531.802620] FAT-fs (loop3): bogus number of reserved sectors [ 1531.818581] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1531.835498] device team0 left promiscuous mode [ 1531.840405] device team_slave_0 left promiscuous mode [ 1531.848192] device team_slave_1 left promiscuous mode 03:28:43 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:43 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1532.617209] device team0 entered promiscuous mode [ 1532.622862] device team_slave_0 entered promiscuous mode [ 1532.655327] device team_slave_1 entered promiscuous mode 03:28:43 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:43 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1532.663514] 8021q: adding VLAN 0 to HW filter on device team0 03:28:43 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1532.874445] FAT-fs (loop3): bogus number of reserved sectors [ 1532.897500] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1532.965060] XFS (loop2): Invalid superblock magic number [ 1533.186068] FAT-fs (loop3): bogus number of reserved sectors [ 1533.200757] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) tkill(r1, 0x401004000000016) 03:28:46 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:46 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:46 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="766661740e", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:46 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:46 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:46 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1535.510107] XFS (loop2): Invalid superblock magic number 03:28:46 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:46 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1535.829236] device team0 left promiscuous mode [ 1535.839118] device team_slave_0 left promiscuous mode [ 1535.862571] device team_slave_1 left promiscuous mode [ 1535.893986] XFS (loop2): Invalid superblock magic number [ 1535.950780] FAT-fs (loop3): bogus number of reserved sectors [ 1535.959103] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:47 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1536.191538] XFS (loop2): Invalid superblock magic number [ 1536.499830] device team0 entered promiscuous mode [ 1536.504757] device team_slave_0 entered promiscuous mode [ 1536.510963] device team_slave_1 entered promiscuous mode [ 1536.518042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1536.539073] FAT-fs (loop3): bogus number of reserved sectors [ 1536.550751] FAT-fs (loop3): Can't find a valid FAT filesystem 03:28:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x200, 0x440800) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x401004000000016) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) 03:28:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:49 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:49 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:49 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat*', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1538.521653] XFS (loop2): Invalid superblock magic number [ 1538.620674] device team0 left promiscuous mode [ 1538.641204] device team_slave_0 left promiscuous mode [ 1538.658825] device team_slave_1 left promiscuous mode 03:28:49 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:50 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:50 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1539.221594] XFS (loop2): Invalid superblock magic number [ 1539.258170] device team0 entered promiscuous mode [ 1539.263238] device team_slave_0 entered promiscuous mode 03:28:50 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1539.268968] device team_slave_1 entered promiscuous mode [ 1539.275975] 8021q: adding VLAN 0 to HW filter on device team0 03:28:50 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667301", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1539.473310] FAT-fs (loop3): bogus number of reserved sectors [ 1539.483704] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1539.681659] device team0 left promiscuous mode [ 1539.763896] device team_slave_0 left promiscuous mode [ 1539.774956] device team_slave_1 left promiscuous mode [ 1539.785903] FAT-fs (loop3): bogus number of reserved sectors [ 1539.804208] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1540.118772] device team0 entered promiscuous mode [ 1540.123848] device team_slave_0 entered promiscuous mode [ 1540.130827] device team_slave_1 entered promiscuous mode [ 1540.150966] 8021q: adding VLAN 0 to HW filter on device team0 03:28:53 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) sendmsg(r1, &(0x7f0000000140)={&(0x7f0000000080)=@l2={0x1f, 0x6, {0x47192334, 0x7, 0x5, 0x2, 0x1, 0x8}, 0x385, 0x7fffffff}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="2359fdecf4a768fa88a00e52877d46f3dac131cef9938461c5b632236ba5ddec5d10e14640b12fd9a01576ae55cb63bf472eca2289b7c76aa8b0d943e51c5da77173b0515f521e7a1c18d67530a8de2e4e2d52f7cf448578e191b06d366272ab897e498f85fb11f021d33b064af78ce4a56cf3c8bdc67f4d14ce65d4e5380834cc4aee407c62599f78f409daba89f0f017dc5d55353c976c570c76b7eb1b97f7f919b66b3b110762ce45539bf8c4f25e0bbecfb194fff16da85dd57854745de75de8c3765d0a6f3600d57c96b8d051a5b11b0d1f4dce241b67e92ad505185f20876f2e", 0xe3}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x380, 0x80}, 0x4000) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/mixer\x00', 0xfffffffffffffffc, 0x0) r4 = semget$private(0x0, 0x7, 0x2) semctl$SEM_INFO(r4, 0x1, 0x13, &(0x7f0000001a80)=""/44) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value, &(0x7f0000000980)=0x8) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000780)={0x9, 0x108, 0xfa00, {r5, 0x1f, "951206", "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"}}, 0x110) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0x0) clock_gettime(0x0, &(0x7f0000000940)) timer_settime(0x0, 0x1, &(0x7f0000000900)={{0x77359400}, {0x0, 0x989680}}, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000a00)=""/4096) times(&(0x7f00000001c0)) tkill(r2, 0x401004000000016) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x0) getdents(r3, &(0x7f0000001a00)=""/46, 0x2e) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000180)={0x3, r3}) 03:28:53 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:53 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:53 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:53 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1542.106776] FAT-fs (loop3): bogus number of reserved sectors [ 1542.116480] device team0 left promiscuous mode [ 1542.118494] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1542.121327] device team_slave_0 left promiscuous mode [ 1542.134158] device team_slave_1 left promiscuous mode [ 1542.289358] XFS (loop2): Invalid superblock magic number 03:28:54 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:54 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1542.943454] device team0 entered promiscuous mode [ 1542.948622] device team_slave_0 entered promiscuous mode [ 1542.976537] device team_slave_1 entered promiscuous mode 03:28:54 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:54 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1542.989872] 8021q: adding VLAN 0 to HW filter on device team0 03:28:54 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1543.249751] XFS (loop2): Invalid superblock magic number [ 1543.280206] FAT-fs (loop3): bogus number of reserved sectors [ 1543.289956] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1543.349109] device team0 left promiscuous mode [ 1543.353875] device team_slave_0 left promiscuous mode [ 1543.360829] device team_slave_1 left promiscuous mode 03:28:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1544.087339] device team0 entered promiscuous mode [ 1544.093424] device team_slave_0 entered promiscuous mode [ 1544.115964] device team_slave_1 entered promiscuous mode [ 1544.133684] 8021q: adding VLAN 0 to HW filter on device team0 03:28:57 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:28:57 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:57 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:57 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:28:57 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1546.210732] device team0 left promiscuous mode [ 1546.215570] device team_slave_0 left promiscuous mode [ 1546.222077] device team_slave_1 left promiscuous mode [ 1546.228764] FAT-fs (loop3): bogus number of reserved sectors [ 1546.235970] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1546.351024] XFS (loop2): Invalid superblock magic number 03:28:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1546.972918] device team0 entered promiscuous mode [ 1546.977949] device team_slave_0 entered promiscuous mode [ 1547.009117] device team_slave_1 entered promiscuous mode 03:28:58 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:58 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:28:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1547.022643] 8021q: adding VLAN 0 to HW filter on device team0 03:28:58 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:28:58 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1547.197189] FAT-fs (loop3): bogus number of reserved sectors [ 1547.218367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1547.249120] XFS (loop2): Invalid superblock magic number [ 1547.440878] device team0 left promiscuous mode [ 1547.442643] FAT-fs (loop3): bogus number of reserved sectors [ 1547.445818] device team_slave_0 left promiscuous mode [ 1547.459365] device team_slave_1 left promiscuous mode [ 1547.495481] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1548.162570] device team0 entered promiscuous mode [ 1548.167582] device team_slave_0 entered promiscuous mode [ 1548.185278] device team_slave_1 entered promiscuous mode [ 1548.200162] 8021q: adding VLAN 0 to HW filter on device team0 03:29:01 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000000c0)={0x3, 0x3f}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)={0x1, 0x8, [@dev={[], 0x20}, @remote, @local, @broadcast, @broadcast, @dev={[], 0xf}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast]}) 03:29:01 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="7866737f", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:01 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:29:01 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:01 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:01 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1550.082498] FAT-fs (loop3): bogus number of reserved sectors [ 1550.102628] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1550.167365] device team0 left promiscuous mode [ 1550.172623] device team_slave_0 left promiscuous mode [ 1550.179663] device team_slave_1 left promiscuous mode 03:29:01 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:29:01 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667380", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:01 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) 03:29:01 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:01 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, r0) [ 1550.895890] device team0 entered promiscuous mode [ 1550.903725] device team_slave_0 entered promiscuous mode [ 1550.930042] device team_slave_1 entered promiscuous mode [ 1550.951277] XFS (loop2): Invalid superblock magic number [ 1550.961984] 8021q: adding VLAN 0 to HW filter on device team0 03:29:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x4bd48b60a132c882, 0x400, 0x102, 0x1, {0x7fff, 0x2ada0271, 0x8, 0x9}}) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) 03:29:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="76666174fb", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:04 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:04 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:04 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 1553.476863] XFS (loop2): Invalid superblock magic number [ 1553.569816] device team0 left promiscuous mode [ 1553.584944] device team_slave_0 left promiscuous mode [ 1553.606122] device team_slave_1 left promiscuous mode 03:29:04 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:05 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) [ 1553.945921] XFS (loop2): Invalid superblock magic number 03:29:05 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:05 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673bc", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1554.343224] device team0 entered promiscuous mode [ 1554.358544] device team_slave_0 entered promiscuous mode [ 1554.374705] device team_slave_1 entered promiscuous mode 03:29:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1554.411260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.651135] FAT-fs (loop3): bogus number of reserved sectors [ 1554.668756] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1554.718286] FAT-fs (loop3): bogus number of reserved sectors [ 1554.728035] FAT-fs (loop3): Can't find a valid FAT filesystem 03:29:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xb, 0x100) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)=0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x2, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x200) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x77359400}}, 0x0) tkill(r1, 0x401004000000016) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x0) capset(&(0x7f0000000100)={0x39980732, r1}, &(0x7f0000000140)={0x3f, 0x7, 0x0, 0x401, 0x9, 0x7}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0xd3, 0x4) 03:29:07 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:07 executing program 4: clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) socket$key(0xf, 0x3, 0x2) pkey_mprotect(&(0x7f000024a000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) 03:29:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:07 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667304", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1556.902594] device team0 left promiscuous mode [ 1556.910411] device team_slave_0 left promiscuous mode [ 1556.921675] device team_slave_1 left promiscuous mode 03:29:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667380", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1557.003238] FAT-fs (loop3): bogus number of reserved sectors [ 1557.011170] FAT-fs (loop3): Can't find a valid FAT filesystem 03:29:08 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) [ 1557.089380] FAT-fs (loop3): bogus number of reserved sectors [ 1557.102648] FAT-fs (loop3): Can't find a valid FAT filesystem 03:29:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1557.386584] XFS (loop2): Invalid superblock magic number 03:29:08 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:08 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 03:29:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="76666174ff", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1557.532972] device team0 entered promiscuous mode [ 1557.537998] device team_slave_0 entered promiscuous mode [ 1557.545285] device team_slave_1 entered promiscuous mode [ 1557.566797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.652917] XFS (loop2): Invalid superblock magic number 03:29:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)={'exec ', '/dev/input/event#\x00'}, 0x17) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401004000000016) 03:29:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:11 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:11 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001540)='pids.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd9f, &(0x7f0000000100), 0x0, &(0x7f0000001580), 0xfcdb}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 03:29:11 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="7666617404", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1559.933680] device team0 left promiscuous mode [ 1559.938641] device team_slave_0 left promiscuous mode [ 1559.945287] device team_slave_1 left promiscuous mode [ 1560.593774] XFS (loop2): Invalid superblock magic number 03:29:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:11 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) dup2(r1, r0) [ 1560.834669] device team0 entered promiscuous mode [ 1560.850170] device team_slave_0 entered promiscuous mode [ 1560.874507] device team_slave_1 entered promiscuous mode 03:29:12 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:12 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1560.890134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1561.102706] audit: type=1326 audit(1544066952.224:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11414 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 1561.361988] device team0 left promiscuous mode [ 1561.368098] FAT-fs (loop3): bogus number of reserved sectors [ 1561.376703] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1561.389480] device team_slave_0 left promiscuous mode [ 1561.408862] device team_slave_1 left promiscuous mode [ 1561.443240] XFS (loop2): Invalid superblock magic number [ 1561.450764] FAT-fs (loop3): bogus number of reserved sectors [ 1561.466912] FAT-fs (loop3): Can't find a valid FAT filesystem 03:29:12 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1561.720234] audit: type=1326 audit(1544066952.844:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11414 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 [ 1561.793002] XFS (loop2): Invalid superblock magic number [ 1562.146510] device team0 entered promiscuous mode [ 1562.151681] device team_slave_0 entered promiscuous mode [ 1562.157820] device team_slave_1 entered promiscuous mode [ 1562.165943] 8021q: adding VLAN 0 to HW filter on device team0 03:29:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7, 0x40000) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_create(0x4, &(0x7f00000000c0)={0x0, 0x17, 0x0, @tid=r1}, &(0x7f0000000100)) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:29:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000080)=""/206, 0xce}], 0x2, 0x0) 03:29:23 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:23 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:23 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:23 executing program 4: [ 1572.255856] device team0 left promiscuous mode [ 1572.268464] device team_slave_0 left promiscuous mode [ 1572.273882] device team_slave_1 left promiscuous mode [ 1572.304321] FAT-fs (loop3): bogus number of reserved sectors [ 1572.317362] FAT-fs (loop3): Can't find a valid FAT filesystem 03:29:23 executing program 4: 03:29:23 executing program 4: [ 1572.410251] XFS (loop2): Invalid superblock magic number [ 1572.433832] FAT-fs (loop3): bogus number of reserved sectors [ 1572.457125] FAT-fs (loop3): Can't find a valid FAT filesystem 03:29:23 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:23 executing program 4: 03:29:23 executing program 4: [ 1572.643832] XFS (loop2): Invalid superblock magic number [ 1572.904928] device team0 entered promiscuous mode [ 1572.910278] device team_slave_0 entered promiscuous mode [ 1572.916390] device team_slave_1 entered promiscuous mode [ 1572.924233] 8021q: adding VLAN 0 to HW filter on device team0 03:29:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x80000001, 0x280) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcpd_unit_file_t:s0\x00', 0x27, 0x1) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) gettid() tkill(r1, 0x401004000000016) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100), 0x4) 03:29:26 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:26 executing program 4: 03:29:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:26 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfat#', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:26 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r2, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r4 = eventfd2(0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) ppoll(&(0x7f0000000200)=[{r5}, {r4, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:26 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000200)}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x9, 0x20, 0x80, 0x6}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair(0x80000000001, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)='0\x00') [ 1575.210232] device team0 left promiscuous mode [ 1575.214984] device team_slave_0 left promiscuous mode [ 1575.222734] device team_slave_1 left promiscuous mode 03:29:26 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x401004000000016) [ 1575.418963] XFS (loop2): Invalid superblock magic number 03:29:26 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\r', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673bc", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 1576.134171] device team0 entered promiscuous mode [ 1576.139435] device team_slave_0 entered promiscuous mode [ 1576.164612] device team_slave_1 entered promiscuous mode [ 1576.187624] 8021q: adding VLAN 0 to HW filter on device team0 03:29:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)="766661740e", &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) 03:29:27 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673c4", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x85a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000440)) [ 1576.526748] device team0 left promiscuous mode [ 1576.532323] device team_slave_0 left promiscuous mode [ 1576.537737] device team_slave_1 left promiscuous mode 03:29:27 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000a00)=""/157, 0x0}) memfd_create(&(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000400)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) 03:29:27 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) io_setup(0x100002000000105, 0x0) io_submit(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 1576.787796] device team0 entered promiscuous mode [ 1576.796430] device team_slave_0 entered promiscuous mode [ 1576.819455] device team_slave_1 entered promiscuous mode [ 1576.827277] 8021q: adding VLAN 0 to HW filter on device team0 03:29:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfatp', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1576.938151] XFS (loop2): Invalid superblock magic number 03:29:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = gettid() r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000380)={{0x6, 0x6, 0xec1f, 0xc9, '\x00', 0x100000001}, 0x1, [0xfffffffffffffeff, 0x40, 0x7, 0x7fff, 0x9, 0x2, 0x0, 0x5, 0x230, 0x78effc0f, 0x5, 0x62a, 0x0, 0x4, 0x1, 0x419, 0x0, 0x6, 0xfffffffffffffffc, 0x800, 0x7ff, 0xab, 0x0, 0x8, 0x2, 0x8c, 0xaa5, 0xa8, 0x2, 0x8, 0x100, 0x4, 0x9, 0x40, 0x0, 0x5689, 0x40, 0x81, 0x4, 0x0, 0x0, 0x3, 0x2, 0xff, 0x0, 0x4, 0x83c, 0x6, 0x2800000, 0x1, 0x9, 0x5, 0x401, 0x8, 0x5, 0x6, 0x0, 0x1, 0x80000000, 0x6, 0xfffffffffffffffd, 0x6, 0x1, 0x8, 0x2, 0x4, 0xc4, 0x41, 0x7, 0xfffffffffffff90d, 0xff, 0x2d6, 0x3ff, 0x5, 0x7, 0x7, 0x5, 0x2, 0x7, 0x0, 0x5, 0x401, 0x5, 0x80, 0x3f, 0xb12e, 0xf0cb0cd80000000, 0x6, 0x40, 0x0, 0x100000001, 0x4, 0x8, 0x6c9, 0x4, 0x3, 0x9, 0x3, 0x101, 0xe4eb, 0x1, 0x2, 0xa1a, 0x9, 0x8c, 0x9, 0xffffffff, 0x6, 0x80000001, 0x4, 0x4, 0x8, 0x1, 0xfd, 0x9, 0x584, 0x2, 0x2, 0xffffffffffffffff, 0x5, 0x10000, 0x75, 0x73, 0x162, 0xd721, 0x2, 0x0, 0x3f], {0x77359400}}) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x401004000000016) 03:29:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:30 executing program 0: openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x129000, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000900), &(0x7f0000000a00)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r2 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000980)=@sack_info={r3, 0x800, 0xe86}, &(0x7f00000009c0)=0xc) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000540)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0xd90, @dev, 0x6a}}}, 0x38) pipe2$9p(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r5 = eventfd2(0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r6, 0x0) ppoll(&(0x7f0000000200)=[{r6}, {r5, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) 03:29:30 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="ab3195aa172b56a5ba4a2e56eedf6c1fa09e28987722520c0ed51c584fe7d5fe443f00eb37001ca5722cb4b036e31271ce370889ceb4ca40dac3dae8a57a17b3b21699c11bf419a7ebe49a45c72e387e8d492ccee425f2087d404e29063f408bace4df32e6e12925219ec0f7cb52f65b0fbf81bdd0ecb1d47379dbf37ff14caaf5b121eb2f5e0a13b6a5ae7811dd429cc8ef24edf736cdf47a07134525b41a7ff1c29be792d38c389d1fdd7b313999a2"], 0xb0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000140), 0x4) mlockall(0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000400)) lseek(r1, 0x0, 0x2) sendfile(0xffffffffffffffff, r1, &(0x7f0000002780), 0x8000fffffffe) ftruncate(r0, 0x0) gettid() r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x10) fallocate(r3, 0x4, 0x7, 0x7ff) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff491, 0x1f, 0xeaa}) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 03:29:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673c0", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000040)='vfatq', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='nfs']) [ 1579.457016] device team0 left promiscuous mode [ 1579.470495] device team_slave_0 left promiscuous mode [ 1579.482887] device team_slave_1 left promiscuous mode 03:29:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667303", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:30 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="78667302", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:31 executing program 2: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) syz_mount_image$xfs(&(0x7f00000000c0)="786673ab", &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:29:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000080)=0x8) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ppoll(&(0x7f0000000200)=[{}, {0xffffffffffffffff, 0x481}], 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280), 0x8) [ 1580.212586] ------------[ cut here ]------------ [ 1580.217699] DEBUG_LOCKS_WARN_ON(depth <= 0) [ 1580.217855] WARNING: CPU: 1 PID: 11642 at kernel/locking/lockdep.c:3595 lock_release+0x740/0xa10 [ 1580.231093] Kernel panic - not syncing: panic_on_warn set ... [ 1580.236995] CPU: 1 PID: 11642 Comm: syz-executor5 Not tainted 4.20.0-rc1-next-20181109+ #110 [ 1580.245571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1580.254934] Call Trace: [ 1580.257542] dump_stack+0x244/0x39d [ 1580.261194] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1580.266404] panic+0x2ad/0x55c [ 1580.269603] ? add_taint.cold.5+0x16/0x16 [ 1580.273755] ? __warn.cold.8+0x5/0x45 [ 1580.277567] ? lock_release+0x740/0xa10 [ 1580.281544] __warn.cold.8+0x20/0x45 [ 1580.285278] ? lock_release+0x740/0xa10 [ 1580.289257] report_bug+0x254/0x2d0 [ 1580.292886] do_error_trap+0x11b/0x200 [ 1580.296774] do_invalid_op+0x36/0x40 [ 1580.300490] ? lock_release+0x740/0xa10 [ 1580.304468] invalid_op+0x14/0x20 [ 1580.307927] RIP: 0010:lock_release+0x740/0xa10 [ 1580.312517] Code: 03 38 d0 7c 08 84 d2 0f 85 da 02 00 00 8b 35 a7 95 b3 08 85 f6 75 15 48 c7 c6 20 66 2b 88 48 c7 c7 c0 33 2b 88 e8 10 36 e7 ff <0f> 0b 48 8b 95 e8 fe ff ff 4c 89 f7 48 8b b5 f0 fe ff ff e8 e8 58 [ 1580.331424] RSP: 0018:ffff880182847868 EFLAGS: 00010086 [ 1580.336790] RAX: 0000000000000000 RBX: 1ffff10030508f12 RCX: ffffc9000fe69000 [ 1580.344062] RDX: 0000000000005b35 RSI: ffffffff8165ba15 RDI: 0000000000000006 [ 1580.351340] RBP: ffff880182847998 R08: ffff880181c38580 R09: fffffbfff12b2254 [ 1580.358611] R10: fffffbfff12b2254 R11: ffffffff895912a3 R12: ffffffff8b0e27a0 [ 1580.366002] R13: ffff880182847970 R14: ffff880181c38580 R15: ffff8801828478b0 [ 1580.373293] ? vprintk_func+0x85/0x181 [ 1580.377202] ? lock_release+0x740/0xa10 [ 1580.381183] ? loop_control_ioctl+0xf5/0x4e0 [ 1580.385590] ? lock_downgrade+0x900/0x900 [ 1580.389740] ? __radix_tree_lookup+0x3a7/0x500 [ 1580.394324] ? radix_tree_insert+0x870/0x870 [ 1580.398743] ? find_held_lock+0x36/0x1c0 [ 1580.402809] __mutex_unlock_slowpath+0x102/0x8c0 [ 1580.407568] ? __fget+0x4aa/0x740 [ 1580.411027] ? wait_for_completion+0x8a0/0x8a0 [ 1580.415610] ? check_preemption_disabled+0x48/0x280 [ 1580.420626] ? radix_tree_lookup+0x21/0x30 [ 1580.424866] ? idr_find+0x44/0x50 [ 1580.428570] ? loop_lookup+0x105/0x230 [ 1580.432447] ? loop_exit_cb+0x20/0x20 [ 1580.436250] mutex_unlock+0xd/0x10 [ 1580.439778] loop_control_ioctl+0xf5/0x4e0 [ 1580.444000] ? loop_add+0xa20/0xa20 [ 1580.447619] ? __might_fault+0x12b/0x1e0 [ 1580.451674] ? lock_downgrade+0x900/0x900 [ 1580.455812] ? lock_release+0xa10/0xa10 [ 1580.459773] ? perf_trace_sched_process_exec+0x860/0x860 [ 1580.465213] ? loop_add+0xa20/0xa20 [ 1580.468829] do_vfs_ioctl+0x1de/0x1790 [ 1580.472704] ? ioctl_preallocate+0x300/0x300 [ 1580.477099] ? __fget_light+0x2e9/0x430 [ 1580.481061] ? fget_raw+0x20/0x20 [ 1580.484502] ? _copy_to_user+0xc8/0x110 [ 1580.488465] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1580.493991] ? put_timespec64+0x10f/0x1b0 [ 1580.498126] ? nsecs_to_jiffies+0x30/0x30 [ 1580.502265] ? do_syscall_64+0x9a/0x820 [ 1580.506225] ? do_syscall_64+0x9a/0x820 [ 1580.510189] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1580.514760] ? security_file_ioctl+0x94/0xc0 [ 1580.519164] ksys_ioctl+0xa9/0xd0 [ 1580.522613] __x64_sys_ioctl+0x73/0xb0 [ 1580.526489] do_syscall_64+0x1b9/0x820 [ 1580.530369] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1580.535721] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1580.540637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1580.545474] ? trace_hardirqs_on_caller+0x310/0x310 [ 1580.550478] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1580.555485] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1580.560492] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1580.565514] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1580.570792] RIP: 0033:0x457569 [ 1580.573974] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1580.592859] RSP: 002b:00007fa1f5603c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1580.600557] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 1580.607813] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000004 [ 1580.615066] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1580.622422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1f56046d4 [ 1580.629679] R13: 00000000004c06f1 R14: 00000000004d1028 R15: 00000000ffffffff [ 1580.638267] Kernel Offset: disabled [ 1580.641908] Rebooting in 86400 seconds..