0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:55 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gre0\x00'}) [ 2138.178118][T32459] dccp_invalid_packet: P.Data Offset(0) too small [ 2138.209379][T32460] dccp_invalid_packet: P.Data Offset(0) too small 06:54:55 executing program 0: timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x10400, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x49, 0x4) getpeername(r0, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$inet_udplite(0x2, 0x2, 0x88) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r5, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x3}], 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:54:55 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8864, 0x2d9, 0x3]}) 06:54:55 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:55 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) 06:54:55 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x80000001}, 0x28, 0x1) 06:54:55 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:55 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8906, 0x2d9, 0x3]}) 06:54:56 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4000, 0x0, &(0x7f0000000340)) 06:54:56 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 0: timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r4, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x3}], 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r4) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:54:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xae02, 0x2d9, 0x3]}) 06:54:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) 06:54:56 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240202, 0x1) 06:54:56 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x543, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xba02, 0x2d9, 0x3]}) 06:54:56 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 06:54:56 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:56 executing program 0: timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r4, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x3}], 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x1, 0x100000001, 0x7, 0xfff, 0x0, 0x5, 0x2, 0x3, 0x7, 0x3ff, 0x9, 0x100, 0x7, 0x52f, 0x7fffffff, 0x7, 0x9, 0x1, 0x9, 0x10000, 0x4, 0x5, 0x2, 0x0, 0x4, 0x1, 0x93, 0xffff, 0xffffffff, 0x0, 0x6, 0xfff, 0x8, 0x4, 0x7f, 0x1a, 0x0, 0x1ff, 0x5, @perf_config_ext={0x2, 0x200}, 0x508, 0x7, 0x1, 0x6, 0x9, 0x200, 0x7}, 0x0, 0xd, 0xffffffffffffff9c, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:54:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xdc02, 0x2d9, 0x3]}) 06:54:56 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) socketpair(0x0, 0x0, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0xfffffffffffffdc8) 06:54:57 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 06:54:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x608, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xe000, 0x2d9, 0x3]}) 06:54:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xf000, 0x2d9, 0x3]}) 06:54:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x689, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, 0x0) 06:54:57 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) recvmmsg(0xffffffffffffff9c, &(0x7f0000000640)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) 06:54:57 executing program 0: timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r4, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:54:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xff00, 0x2d9, 0x3]}) 06:54:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 0: timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r0, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r4, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x3}], 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CLR_FD(r4, 0x4c01) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:54:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xf0ff7f, 0x2d9, 0x3]}) 06:54:57 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:54:57 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs(0x0, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x0) 06:54:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xf0ffff, 0x2d9, 0x3]}) 06:54:58 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 06:54:58 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x1000000, 0x2d9, 0x3]}) 06:54:58 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept(0xffffffffffffffff, 0x0, 0x0) syz_open_pts(r0, 0x0) 06:54:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/30, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)=""/4096, 0x1000}, {0x0}], 0x100000000000000c, 0x0, 0x1a}, 0x0) shutdown(r2, 0x0) 06:54:58 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2000000, 0x2d9, 0x3]}) 06:54:58 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x7e}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) readv(r3, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000080)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}], 0x5) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) r5 = dup(r4) poll(0x0, 0x0, 0xce) shutdown(r5, 0x0) shutdown(r1, 0x0) 06:54:58 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/55, 0x37}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/49, 0x31}], 0x1) wait4(0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) shutdown(r2, 0x0) 06:54:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x3000000, 0x2d9, 0x3]}) 06:54:59 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x3580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000001540)=[{&(0x7f0000000080)=""/77, 0x4d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r2, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) 06:54:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4000000, 0x2d9, 0x3]}) 06:54:59 executing program 1: r0 = socket(0x2, 0x80002, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x5c) recvmsg(r0, &(0x7f000000b600)={0x0, 0x0, 0x0}, 0x40002000) 06:54:59 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x3a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x5000000, 0x2d9, 0x3]}) 06:54:59 executing program 4: poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x80}, {}], 0x2, 0x4d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xd66, 0x0, 0x0, 0x800e003c6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000200)=""/50, 0x32}, {0x0}, {0x0}], 0x3}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000040)=""/20, 0x14}, {0x0}], 0x2}, 0x2) recvfrom$inet(0xffffffffffffffff, 0x0, 0x8164, 0x0, 0x0, 0x800e00547) shutdown(0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) shutdown(r1, 0x0) 06:54:59 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, 0x0, 0x0) 06:54:59 executing program 1: dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/88, 0x58}, {0x0}], 0x2}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) r3 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r3, &(0x7f0000001780)=[{&(0x7f0000000040)=""/114, 0x72}, {0x0}, {0x0}], 0x3) shutdown(r2, 0x0) 06:54:59 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x6000000, 0x2d9, 0x3]}) 06:54:59 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:54:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/77, 0x4d}, {0x0}, {0x0}], 0x1000000000000208) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x2}, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) readv(r2, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r5, 0x0) shutdown(r3, 0x0) 06:54:59 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7000000, 0x2d9, 0x3]}) 06:54:59 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4788, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:00 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x18a, &(0x7f0000000100)=[{&(0x7f0000000040)=""/4, 0x4}, {0x0}, {0x0}], 0x1000000000000095}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) poll(0x0, 0x0, 0x4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) ppoll(0x0, 0x0, &(0x7f0000000080)={0x5}, 0x0, 0x0) shutdown(r3, 0x0) shutdown(r2, 0x0) 06:55:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8000000, 0x2d9, 0x3]}) 06:55:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000040)={0x0, 0xe113}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x50, &(0x7f0000000440)={0x8001, {{0xf583469a3a6b9f0e, 0x1c, 0xffffffffffffffff}}}, 0x5) recvfrom$inet(r0, 0x0, 0xfc85, 0x2, 0x0, 0x800e0068e) shutdown(r0, 0x0) 06:55:00 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) recvfrom$inet(r0, 0x0, 0xfc85, 0x2, 0x0, 0x800e0068e) shutdown(r0, 0x0) 06:55:00 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:00 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:00 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8060000, 0x2d9, 0x3]}) 06:55:00 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x6488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r6, &(0x7f0000001780)=[{&(0x7f0000000040)=""/114, 0x72}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x0) shutdown(r2, 0x0) 06:55:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:01 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) accept$inet(r1, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x60a6, 0x2, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x9000000, 0x2d9, 0x3]}) 06:55:01 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x800e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:01 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)=""/4, 0x4}, {0x0}, {0x0}], 0x3}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) poll(0x0, 0x0, 0x4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) shutdown(r2, 0x0) 06:55:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:01 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xa000000, 0x2d9, 0x3]}) 06:55:01 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8035, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/55, 0x37}, {0x0, 0x15e}, {0x0}, {0x0, 0x221}, {0x0, 0xffffff93}, {0x0, 0x69}], 0x2, 0x0, 0xfffffffffffffe9f}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x50, &(0x7f0000000200)={0x0, {{0x10, 0x2}}}, 0x90) recvfrom$inet(r2, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 06:55:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000240)=0x7fe, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0), 0x10) dup2(r0, r1) 06:55:02 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 4: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xb000000, 0x2d9, 0x3]}) 06:55:02 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfd000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xc000000, 0x2d9, 0x3]}) 06:55:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x0, 0x0) 06:55:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 06:55:02 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) 06:55:02 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xd000000, 0x2d9, 0x3]}) 06:55:02 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x20000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x480401, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000200)="e5a2c82c07f6e2763f21fdcb5721bf8e", 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0xeb6}, 0x1c) r3 = socket(0x0, 0x6, 0x0) write(r3, &(0x7f0000000200)="2400000021002551071c0165ff0ffc020200", 0x12) connect$inet6(r2, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) ioctl(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x0, @remote}, {0x2, 0x400000, @multicast1}}) ioctl$EVIOCGSND(r2, 0x8040451a, 0x0) close(r1) r4 = socket(0x1a, 0x800, 0x8001) sendto$inet6(r3, &(0x7f00000002c0)="f6a8c714ecfe", 0x6, 0x4000810, 0x0, 0x0) lstat(0x0, &(0x7f00000019c0)) geteuid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) getpgrp(r5) getuid() gettid() getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000001dc0)) stat(0x0, &(0x7f0000001e40)) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001f40), &(0x7f0000001f80)=0xc) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000540)=ANY=[]}], 0x1}, 0x20000000) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) stat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440)) ftruncate(r6, 0x88001) sendfile(r1, r6, 0x0, 0x800000000024) 06:55:02 executing program 1: open$dir(0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) tkill(0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid\x00') socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0xffffffffffffffb7) tkill(r1, 0x2001000000000016) 06:55:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x13000000, 0x2d9, 0x3]}) 06:55:02 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:02 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2145.956764][ T26] audit: type=1400 audit(1562050502.942:114): avc: denied { setopt } for pid=3294 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000340)="030400000300600000000000fff5", 0xe, 0x0, 0x0, 0x0) 06:55:03 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8906, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2146.078955][ T26] audit: type=1400 audit(1562050503.072:115): avc: denied { ioctl } for pid=3294 comm="syz-executor.4" path="socket:[250273]" dev="sockfs" ino=250273 ioctlcmd=0x8904 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:55:03 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x7530}, 0x10) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000a80)) bind$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, [], 0x2a}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000001c0)=""/108, 0x0) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200000, 0x2) write$cgroup_type(r3, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r3, 0x0, 0x5e00, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) fallocate(r2, 0x11, 0x2000, 0x9000000) fcntl$setstatus(r1, 0x4, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r5) r6 = open(&(0x7f0000000280)='./file0\x00', 0x110000145042, 0x0) sendfile(r0, r6, 0x0, 0x88000fbfffffc) 06:55:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x14000000, 0x2d9, 0x3]}) 06:55:03 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:03 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:03 executing program 1: dup(0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) sysfs$3(0x3) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000380)=ANY=[@ANYRES32], 0x4) [ 2146.529492][ T3645] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2146.576016][ T26] audit: type=1800 audit(1562050503.572:116): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17692 res=0 06:55:03 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x20000000, 0x2d9, 0x3]}) 06:55:03 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:03 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2146.662567][ T26] audit: type=1800 audit(1562050503.572:117): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17693 res=0 [ 2146.687797][ T26] audit: type=1800 audit(1562050503.652:118): pid=3645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=17693 res=0 06:55:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x21000000, 0x2d9, 0x3]}) 06:55:03 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000001180)='threaded\x00', 0xfc9a) write$P9_RGETLOCK(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='3'], 0x1) 06:55:03 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:03 executing program 0: 06:55:03 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x3f000000, 0x2d9, 0x3]}) 06:55:04 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2147.072347][ T26] audit: type=1800 audit(1562050504.072:119): pid=3881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=18053 res=0 06:55:04 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 0: 06:55:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x40000000, 0x2d9, 0x3]}) 06:55:04 executing program 0: 06:55:04 executing program 1: 06:55:04 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:04 executing program 0: 06:55:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x40010000, 0x2d9, 0x3]}) 06:55:04 executing program 1: 06:55:04 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 0: 06:55:04 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 1: 06:55:04 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) 06:55:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x43050000, 0x2d9, 0x3]}) 06:55:04 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:04 executing program 0: 06:55:05 executing program 1: 06:55:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) 06:55:05 executing program 0: 06:55:05 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x48000000, 0x2d9, 0x3]}) 06:55:05 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:05 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) 06:55:05 executing program 0: 06:55:05 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:05 executing program 1: 06:55:05 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4c000000, 0x2d9, 0x3]}) 06:55:05 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:05 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:05 executing program 0: 06:55:05 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:05 executing program 1: 06:55:05 executing program 4: r0 = add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:05 executing program 0: 06:55:05 executing program 1: 06:55:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x60000000, 0x2d9, 0x3]}) 06:55:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:06 executing program 0: 06:55:06 executing program 4: r0 = add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:06 executing program 1: 06:55:06 executing program 0: 06:55:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x68000000, 0x2d9, 0x3]}) 06:55:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:06 executing program 1: 06:55:06 executing program 0: 06:55:06 executing program 4: r0 = add_key$user(0x0, &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x6c000000, 0x2d9, 0x3]}) 06:55:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:06 executing program 0: 06:55:06 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:06 executing program 1: 06:55:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x74000000, 0x2d9, 0x3]}) 06:55:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 0: 06:55:07 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:07 executing program 1: 06:55:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7a000000, 0x2d9, 0x3]}) 06:55:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 0: 06:55:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8060000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 1: 06:55:07 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', 0x0, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7f000000, 0x2d9, 0x3]}) 06:55:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 1: 06:55:07 executing program 0: 06:55:07 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7ffff000, 0x2d9, 0x3]}) 06:55:07 executing program 1: 06:55:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 0: 06:55:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x3a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:07 executing program 1: 06:55:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x800e0000, 0x2d9, 0x3]}) 06:55:08 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:08 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:08 executing program 0: 06:55:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x80350000, 0x2d9, 0x3]}) 06:55:08 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:08 executing program 1: 06:55:08 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:08 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:08 executing program 1: 06:55:08 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x43050000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:08 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:08 executing program 0: 06:55:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x81000000, 0x2d9, 0x3]}) 06:55:08 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:08 executing program 1: 06:55:08 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x86ddffff, 0x2d9, 0x3]}) 06:55:08 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x800e0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:08 executing program 0: 06:55:08 executing program 1: 06:55:08 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) 06:55:09 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x80350000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 0: 06:55:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88470000, 0x2d9, 0x3]}) 06:55:09 executing program 1: 06:55:09 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) 06:55:09 executing program 0: 06:55:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88480000, 0x2d9, 0x3]}) 06:55:09 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 1: 06:55:09 executing program 4: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) 06:55:09 executing program 0: 06:55:09 executing program 1: 06:55:09 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x86ddffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88640000, 0x2d9, 0x3]}) 06:55:09 executing program 4: 06:55:09 executing program 0: 06:55:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88a8ffff, 0x2d9, 0x3]}) 06:55:09 executing program 1: 06:55:09 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88470000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:09 executing program 4: 06:55:10 executing program 0: 06:55:10 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88480000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 1: 06:55:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88caffff, 0x2d9, 0x3]}) 06:55:10 executing program 4: 06:55:10 executing program 0: 06:55:10 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88640000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 4: 06:55:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x89060000, 0x2d9, 0x3]}) 06:55:10 executing program 1: 06:55:10 executing program 4: 06:55:10 executing program 0: 06:55:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xae020000, 0x2d9, 0x3]}) 06:55:10 executing program 1: 06:55:10 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88a8ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 4: 06:55:10 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xba020000, 0x2d9, 0x3]}) 06:55:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x8}}, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:10 executing program 0: poll(&(0x7f0000000080)=[{}], 0x1, 0x4d) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xd66, 0x0, 0x0, 0x800e003c6) r1 = dup(r0) dup(0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0x1c, 0x10000000005, 0x84) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) shutdown(r1, 0x0) 06:55:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:10 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88caffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:10 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xdc020000, 0x2d9, 0x3]}) 06:55:11 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x89060000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000000)={{}, {0x8}}, 0x0) recvfrom$inet(r0, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r0, 0x0) 06:55:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xe0000000, 0x2d9, 0x3]}) 06:55:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000040)) recvfrom$inet(r0, 0x0, 0xfc85, 0x2, 0x0, 0x800e0068e) shutdown(r0, 0x0) 06:55:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/18, 0x12}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/88, 0x58}, {0x0}, {0x0}], 0x3}, 0x2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r6, &(0x7f0000001780)=[{&(0x7f0000000040)=""/114, 0x72}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x0) shutdown(r2, 0x0) 06:55:11 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xff000000, 0x2d9, 0x3]}) 06:55:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000240)=""/115, 0x73}, {0x0}, {0x0}], 0x3}, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r3, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/96, 0x60}], 0x1) shutdown(r4, 0x0) shutdown(r1, 0x0) 06:55:11 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8280, 0x0) poll(&(0x7f0000000080)=[{}, {}, {r0}, {}], 0x4, 0x8020000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) shutdown(r1, 0x0) 06:55:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xffffa888, 0x2d9, 0x3]}) 06:55:11 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:11 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/12, 0xc}, {0x0}, {0x0}], 0x100000000000000e}, 0x40042) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005ae) shutdown(r0, 0x0) shutdown(r1, 0x0) 06:55:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xffffca88, 0x2d9, 0x3]}) 06:55:12 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8280, 0x0) poll(&(0x7f0000000080)=[{r0}, {r0}], 0x2, 0x8020000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e004de) recvfrom$inet(r1, 0x0, 0x75b189e5, 0x0, 0x0, 0x800e007c8) shutdown(r1, 0x0) 06:55:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xffffdd86, 0x2d9, 0x3]}) 06:55:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/55, 0x37}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 06:55:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:12 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xffffa888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xfffff000, 0x2d9, 0x3]}) 06:55:12 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x8000000000049) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x24f, 0x0, 0x0, 0x800e00845) ppoll(&(0x7f0000000040), 0x5, 0x0, 0x0, 0x1e4) shutdown(r1, 0x0) 06:55:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/12, 0xc}, {0x0}, {0x0}], 0x100000000000000e}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xffffff2e, 0x0, 0x0, 0x800e005ae) shutdown(r0, 0x0) shutdown(r1, 0x0) 06:55:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2000000000, 0x2d9, 0x3]}) 06:55:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)=""/4, 0x4}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) shutdown(r1, 0x0) poll(0x0, 0x0, 0x4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) shutdown(r3, 0x0) shutdown(r2, 0x0) 06:55:12 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xffffca88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/55, 0x37}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0x26ba, 0x0, 0x0, 0x800e00517) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) wait4(0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748acb4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) shutdown(r2, 0x0) 06:55:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0x9}}, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:13 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xffffdd86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2155.974581][ T5617] net_ratelimit: 16 callbacks suppressed [ 2155.974591][ T5617] dccp_invalid_packet: P.Data Offset(0) too small [ 2156.107818][ T5628] dccp_invalid_packet: P.Data Offset(0) too small 06:55:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xf0ff7f00000000, 0x2d9, 0x3]}) 06:55:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/77, 0x4d}, {0x0}, {0x0}], 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) readv(r2, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) shutdown(r5, 0x0) shutdown(r3, 0x0) 06:55:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/243, 0xf3}], 0x1, 0x0, 0xfffffe0a}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0xa9}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) readv(r2, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8) shutdown(r5, 0x0) shutdown(r3, 0x0) [ 2156.311488][ T5839] dccp_invalid_packet: P.Data Offset(0) too small [ 2156.362428][ T5840] dccp_invalid_packet: P.Data Offset(0) too small 06:55:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00869) 06:55:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xf0ffffffffffff, 0x2d9, 0x3]}) 06:55:13 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/58, 0x3a}, {0x0}, {0x0}], 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00519) shutdown(r0, 0x0) setitimer(0x0, &(0x7f0000000000)={{}, {0x8}}, 0x0) recvfrom$inet(r1, 0x0, 0xd0d4, 0x0, 0x0, 0x800e0050e) shutdown(r1, 0x0) 06:55:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/88, 0x58}, {0x0}, {0x0}], 0x3}, 0x0) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x1de, 0x0, 0x0, 0x800e0050e) shutdown(r4, 0x0) r6 = socket$inet6_sctp(0x1c, 0x3, 0x84) readv(r6, &(0x7f0000001780)=[{&(0x7f0000000040)=""/114, 0x72}, {0x0}, {0x0}], 0x3) shutdown(r5, 0x0) shutdown(r2, 0x0) 06:55:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x100000000000000, 0x2d9, 0x3]}) 06:55:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/77, 0x4d}, {0x0}, {0x0}], 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/4096, 0x1000}, {0x0}], 0x2}, 0x2) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r4, 0x0) readv(r2, &(0x7f0000001780)=[{&(0x7f00000000c0)=""/37, 0x25}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) shutdown(r5, 0x0) shutdown(r3, 0x0) 06:55:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000400)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2000002102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmsg$inet6(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) [ 2157.045214][ T6280] dccp_invalid_packet: P.Data Offset(0) too small [ 2157.053835][ T6281] dccp_invalid_packet: P.Data Offset(0) too small 06:55:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00\xc9\xe4\xa8[H\x18\xdd\xe1 \xc3\xb6\xc0F\xe9\x95\x80\xa0\x1c\xaex\x1a\xc9yp;\xfa&\x84\xdah\xbf\xc5\v$\x9a\xb7L?`?q\by\x9b\xb2\xd8<\x15<[TPa\xcf!]O0\xb7/\x80\x0e\xfa\xd3\xb4\x855c\\=\x92\x84\xd8\xcf\xaa T\x14\"i\xa79\x80H\xafctR/x\xc4\t\xc3\"\b\xb6\xbd\x8b\x00\xa2~\x01aF\x82\x8c\x0e\xf7\xde\x88*\x15\x1f\x10\xca\xa7yO\xa0\xc8\xdc\xfe\x81\xe3\xf6E\xffi\xd7\xb4\xf1') preadv(r0, &(0x7f0000002600)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/129, 0x81}], 0x2, 0x0) 06:55:14 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x200000000000000, 0x2d9, 0x3]}) 06:55:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) r2 = dup(r1) r3 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) ftruncate(r3, 0x10099ba) sendfile(r2, r3, 0x0, 0x1000000000000fe) dup2(r2, r0) 06:55:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 06:55:14 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2157.746999][ T6409] dccp_invalid_packet: P.Data Offset(0) too small 06:55:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2157.812104][ T6446] dccp_invalid_packet: P.Data Offset(0) too small 06:55:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002680)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @initdev}]}, 0x30}}, 0x0) 06:55:14 executing program 4: perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:55:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x300000000000000, 0x2d9, 0x3]}) 06:55:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 1: 06:55:15 executing program 0: [ 2158.129607][ T6628] dccp_invalid_packet: P.Data Offset(0) too small 06:55:15 executing program 4: [ 2158.176679][ T6633] dccp_invalid_packet: P.Data Offset(0) too small 06:55:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x400000000000000, 0x2d9, 0x3]}) 06:55:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 0: 06:55:15 executing program 1: 06:55:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x20000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x480401, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000200)="e5a2c82c07f6e2763f21fdcb5721bf8e", 0x8) r4 = socket(0xa, 0x1, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0xeb6}, 0x1c) r6 = socket(0x0, 0x6, 0x0) write(r6, &(0x7f0000000200)="2400000021002551071c0165ff0ffc0202000000fd100f000ee1000c08000a0000001800", 0x24) connect$inet6(r3, 0x0, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x0, @remote}, {0x2, 0x400000, @multicast1}}) ioctl$EVIOCGSND(r3, 0x8040451a, 0x0) close(r2) r7 = socket(0x1a, 0x800, 0x8001) sendto$inet6(r6, &(0x7f00000002c0)="f6a8c714ecfe649a1e", 0x9, 0x4000810, 0x0, 0x0) bind(r1, &(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1ff, @rand_addr="4ee8aee593d4134e45a0d24136d422bd", 0x2}}, 0x4c) lstat(&(0x7f0000001980)='./bus\x00', &(0x7f00000019c0)) geteuid() ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) getpgrp(r8) getuid() gettid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001d80)={0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xc) stat(&(0x7f0000001e00)='./bus\x00', &(0x7f0000001e40)) gettid() fstat(r5, &(0x7f0000001ec0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001f40), &(0x7f0000001f80)=0xc) sendmsg$netlink(r7, &(0x7f0000000040)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xbaeb3c29f9c426be, &(0x7f0000001d00)=[{&(0x7f0000000540)=ANY=[]}], 0x100000000000014e, 0x0, 0x14d, 0x90}, 0x20000000) r10 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) stat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440)) setgid(r9) ftruncate(r10, 0x88001) sendfile(r2, r10, 0x0, 0x800000000024) 06:55:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x500000000000000, 0x2d9, 0x3]}) 06:55:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 1: 06:55:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x600000000000000, 0x2d9, 0x3]}) 06:55:15 executing program 0: 06:55:15 executing program 1: 06:55:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:15 executing program 0: 06:55:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x700000000000000, 0x2d9, 0x3]}) 06:55:16 executing program 4: 06:55:16 executing program 0: 06:55:16 executing program 1: 06:55:16 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x800000000000000, 0x2d9, 0x3]}) 06:55:16 executing program 1: 06:55:16 executing program 0: 06:55:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x806000000000000, 0x2d9, 0x3]}) 06:55:16 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:16 executing program 4: 06:55:16 executing program 0: 06:55:16 executing program 1: 06:55:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:16 executing program 4: 06:55:16 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x900000000000000, 0x2d9, 0x3]}) 06:55:16 executing program 0: 06:55:16 executing program 1: 06:55:16 executing program 4: 06:55:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 0: 06:55:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xa00000000000000, 0x2d9, 0x3]}) 06:55:17 executing program 1: 06:55:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 4: 06:55:17 executing program 0: 06:55:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 1: 06:55:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xb00000000000000, 0x2d9, 0x3]}) 06:55:17 executing program 4: 06:55:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 0: 06:55:17 executing program 1: 06:55:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x806000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 0: 06:55:17 executing program 4: 06:55:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xc00000000000000, 0x2d9, 0x3]}) 06:55:17 executing program 1: 06:55:17 executing program 0: 06:55:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xd00000000000000, 0x2d9, 0x3]}) 06:55:18 executing program 4: 06:55:18 executing program 1: 06:55:18 executing program 0: 06:55:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2161.121393][ T6806] net_ratelimit: 20 callbacks suppressed [ 2161.121413][ T6806] dccp_invalid_packet: P.Data Offset(0) too small 06:55:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x2800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:18 executing program 4: [ 2161.235937][ T6813] dccp_invalid_packet: P.Data Offset(0) too small 06:55:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x1300000000000000, 0x2d9, 0x3]}) 06:55:18 executing program 1: 06:55:18 executing program 0: 06:55:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x3a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:18 executing program 4: [ 2161.517213][ T6827] dccp_invalid_packet: P.Data Offset(0) too small 06:55:18 executing program 1: 06:55:18 executing program 0: [ 2161.596733][ T6834] dccp_invalid_packet: P.Data Offset(0) too small 06:55:18 executing program 4: 06:55:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x1400000000000000, 0x2d9, 0x3]}) 06:55:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:18 executing program 0: 06:55:18 executing program 1: 06:55:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x4305000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2161.890698][ T6847] dccp_invalid_packet: P.Data Offset(0) too small [ 2161.924806][ T6851] dccp_invalid_packet: P.Data Offset(0) too small 06:55:18 executing program 4: 06:55:19 executing program 0: 06:55:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2000000000000000, 0x2d9, 0x3]}) 06:55:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:19 executing program 1: 06:55:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x800e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2162.171509][ T6863] dccp_invalid_packet: P.Data Offset(0) too small 06:55:19 executing program 0: [ 2162.242948][ T6869] dccp_invalid_packet: P.Data Offset(0) too small 06:55:19 executing program 4: 06:55:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x2100000000000000, 0x2d9, 0x3]}) 06:55:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:19 executing program 0: 06:55:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8035000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:19 executing program 1: 06:55:19 executing program 4: 06:55:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2162.577621][ T6880] dccp_invalid_packet: P.Data Offset(0) too small [ 2162.609884][ T6888] dccp_invalid_packet: P.Data Offset(0) too small 06:55:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:19 executing program 0: 06:55:19 executing program 1: 06:55:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x3f00000000000000, 0x2d9, 0x3]}) 06:55:19 executing program 4: 06:55:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:19 executing program 0: 06:55:19 executing program 1: 06:55:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4000000000000000, 0x2d9, 0x3]}) 06:55:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x86ddffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 4: 06:55:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 0: 06:55:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4001000000000000, 0x2d9, 0x3]}) 06:55:20 executing program 1: 06:55:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8847000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 4: 06:55:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 0: 06:55:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4305000000000000, 0x2d9, 0x3]}) 06:55:20 executing program 1: 06:55:20 executing program 4: 06:55:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8848000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 0: 06:55:20 executing program 1: 06:55:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8864000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4800000000000000, 0x2d9, 0x3]}) 06:55:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:20 executing program 4: 06:55:20 executing program 0: 06:55:21 executing program 1: 06:55:21 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88a8ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x4c00000000000000, 0x2d9, 0x3]}) 06:55:21 executing program 4: 06:55:21 executing program 0: 06:55:21 executing program 1: 06:55:21 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x88caffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 0: 06:55:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x6000000000000000, 0x2d9, 0x3]}) 06:55:21 executing program 1: 06:55:21 executing program 4: 06:55:21 executing program 1: 06:55:21 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8906000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x6800000000000000, 0x2d9, 0x3]}) 06:55:21 executing program 0: 06:55:21 executing program 1: 06:55:21 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 4: 06:55:21 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8dffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:21 executing program 0: 06:55:21 executing program 1: 06:55:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x6c00000000000000, 0x2d9, 0x3]}) 06:55:22 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 1: 06:55:22 executing program 0: 06:55:22 executing program 4: 06:55:22 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7400000000000000, 0x2d9, 0x3]}) 06:55:22 executing program 0: 06:55:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008c80)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000003a40)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4, 0x9}]}}}], 0x30}}], 0x1, 0x0) 06:55:22 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) sendmmsg$inet_sctp(r0, &(0x7f0000005080)=[{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast2, 0xe06}, 0x1c, 0x0}], 0x1, 0x0) 06:55:22 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7a00000000000000, 0x2d9, 0x3]}) 06:55:22 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 0: getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) fallocate(r0, 0x11, 0x0, 0x9000000) 06:55:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008c80)=[{{&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000003a40)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0) 06:55:22 executing program 1: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x8848000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2165.706809][ T26] audit: type=1800 audit(1562050522.702:120): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=18176 res=0 06:55:22 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 0: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:22 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x7f00000000000000, 0x2d9, 0x3]}) 06:55:22 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x608, 0x2d9, 0x3]}) 06:55:23 executing program 1: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x800e000000000000, 0x2d9, 0x3]}) 06:55:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2166.129424][ T7190] net_ratelimit: 24 callbacks suppressed [ 2166.129433][ T7190] dccp_invalid_packet: P.Data Offset(0) too small 06:55:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 0: timer_create(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r1, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000ac0)="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") r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r5, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x3}], 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000008c0)=0xc) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() r10 = getuid() stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getpid() stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() r15 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000680)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000780)=0xe8) r17 = getegid() sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)={0x9c, 0x42, 0x400, 0x70bd25, 0x25dfdbfb, "", [@nested={0x8c, 0x3e, [@typed={0x8, 0x9, @ipv4=@multicast1}, @generic="a15fdc0397a4cb7f4d6a1e23cd5b69f6c6a17d61e8149ad3ae2a80cf66991a73253d76818e21f238502dad55ec9b4f62af0994c4fe64cd2e25f190cc66d44433d3139dbbed6889e8823e2f40481aac7d49af43e461a5342cc3cdd3351d3302794d910a7184b9e04af5dfb8c5971a7c33c83e354ebae3afa3", @typed={0x8, 0x89, @fd=r5}]}]}, 0x9c}], 0x1, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x1c, 0x1, 0x1, [r4, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0xb8, 0x800}, 0x4) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 06:55:23 executing program 4: timer_create(0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'irlan0\x00', 0x0}) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000300)={&(0x7f0000ffd000/0x1000)=nil, 0x8, 0x4, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4}) connect$packet(r1, &(0x7f0000000140)={0x11, 0x2, r2, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x12) getpeername(r0, &(0x7f0000001540)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000015c0)=0x80) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") socket$l2tp(0x18, 0x1, 0x1) r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) write$evdev(r6, &(0x7f0000000080)=[{{0x77359400}, 0x17, 0x3}], 0x18) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) clone(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [], 0x0, r6}, 0x3c) [ 2166.263445][ T7197] dccp_invalid_packet: P.Data Offset(0) too small [ 2166.306861][ T7201] dccp_invalid_packet: P.Data Offset(0) too small 06:55:23 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x6c00, 0x3, [0x0, 0x2d9, 0x3]}) 06:55:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8035000000000000, 0x2d9, 0x3]}) 06:55:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 1 (fault-call:1 fault-nth:0): r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) [ 2166.582335][ T7231] dccp_invalid_packet: P.Data Offset(0) too small [ 2166.613599][ T7232] dccp_invalid_packet: P.Data Offset(0) too small 06:55:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8100000000000000, 0x2d9, 0x3]}) 06:55:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:23 executing program 0 (fault-call:0 fault-nth:0): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2166.789867][ T7330] dccp_invalid_packet: P.Data Offset(0) too small 06:55:23 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:23 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2166.847564][ T7334] dccp_invalid_packet: P.Data Offset(0) too small [ 2166.898263][ T7337] FAULT_INJECTION: forcing a failure. [ 2166.898263][ T7337] name failslab, interval 1, probability 0, space 0, times 0 [ 2166.944015][ T7337] CPU: 0 PID: 7337 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2166.952057][ T7337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2166.962363][ T7337] Call Trace: [ 2166.965686][ T7337] dump_stack+0x172/0x1f0 [ 2166.970182][ T7337] should_fail.cold+0xa/0x15 [ 2166.975177][ T7337] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2166.981176][ T7337] ? ___might_sleep+0x163/0x280 [ 2166.986063][ T7337] __should_failslab+0x121/0x190 [ 2166.991270][ T7337] should_failslab+0x9/0x14 [ 2166.995800][ T7337] __kmalloc+0x2d9/0x740 [ 2167.000281][ T7337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2167.006775][ T7337] ? fput_many+0x12c/0x1a0 [ 2167.006791][ T7337] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2167.006806][ T7337] ? strnlen_user+0x1ed/0x280 [ 2167.006820][ T7337] ? __x64_sys_memfd_create+0x13c/0x470 [ 2167.006838][ T7337] __x64_sys_memfd_create+0x13c/0x470 [ 2167.006853][ T7337] ? memfd_fcntl+0x1820/0x1820 [ 2167.006868][ T7337] ? do_syscall_64+0x26/0x680 [ 2167.006890][ T7337] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2167.044119][ T7337] ? trace_hardirqs_on+0x67/0x220 [ 2167.044139][ T7337] do_syscall_64+0xfd/0x680 [ 2167.044159][ T7337] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2167.044170][ T7337] RIP: 0033:0x4597c9 [ 2167.044185][ T7337] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:55:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x86ddffff00000000, 0x2d9, 0x3]}) 06:55:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2167.044193][ T7337] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2167.090041][ T7337] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 [ 2167.090051][ T7337] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc [ 2167.090058][ T7337] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2167.090066][ T7337] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 [ 2167.090074][ T7337] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:24 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x2, r0, 0x0, 0x0) 06:55:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:24 executing program 0 (fault-call:0 fault-nth:1): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2167.180412][ T7349] dccp_invalid_packet: P.Data Offset(0) too small [ 2167.204161][ T7351] dccp_invalid_packet: P.Data Offset(0) too small 06:55:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8847000000000000, 0x2d9, 0x3]}) 06:55:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:24 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x3, r0, 0x0, 0x0) 06:55:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2167.476196][ T7367] FAULT_INJECTION: forcing a failure. [ 2167.476196][ T7367] name failslab, interval 1, probability 0, space 0, times 0 06:55:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2167.540525][ T7372] dccp_invalid_packet: P.Data Offset(0) too small [ 2167.548072][ T7367] CPU: 1 PID: 7367 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2167.555909][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2167.555915][ T7367] Call Trace: [ 2167.555942][ T7367] dump_stack+0x172/0x1f0 [ 2167.555967][ T7367] should_fail.cold+0xa/0x15 [ 2167.578472][ T7367] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2167.584312][ T7367] ? ___might_sleep+0x163/0x280 [ 2167.589198][ T7367] __should_failslab+0x121/0x190 [ 2167.594338][ T7367] ? shmem_destroy_inode+0x80/0x80 [ 2167.599777][ T7367] should_failslab+0x9/0x14 [ 2167.599792][ T7367] kmem_cache_alloc+0x2af/0x6f0 [ 2167.599807][ T7367] ? find_held_lock+0x35/0x130 [ 2167.599821][ T7367] ? __alloc_fd+0x44d/0x560 [ 2167.599840][ T7367] ? shmem_destroy_inode+0x80/0x80 [ 2167.599855][ T7367] shmem_alloc_inode+0x1c/0x50 [ 2167.599877][ T7367] alloc_inode+0x68/0x1e0 [ 2167.634829][ T7367] new_inode_pseudo+0x19/0xf0 [ 2167.639538][ T7367] new_inode+0x1f/0x40 [ 2167.643798][ T7367] shmem_get_inode+0x84/0x7e0 [ 2167.648603][ T7367] __shmem_file_setup.part.0+0x7e/0x2b0 [ 2167.654352][ T7367] shmem_file_setup+0x66/0x90 [ 2167.659063][ T7367] __x64_sys_memfd_create+0x2a2/0x470 [ 2167.664636][ T7367] ? memfd_fcntl+0x1820/0x1820 [ 2167.669459][ T7367] ? do_syscall_64+0x26/0x680 [ 2167.674455][ T7367] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2167.679856][ T7367] ? trace_hardirqs_on+0x67/0x220 [ 2167.684906][ T7367] do_syscall_64+0xfd/0x680 [ 2167.689439][ T7367] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2167.695385][ T7367] RIP: 0033:0x4597c9 [ 2167.699339][ T7367] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2167.719289][ T7367] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2167.727897][ T7367] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 06:55:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2167.736465][ T7367] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc [ 2167.744455][ T7367] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2167.752447][ T7367] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 [ 2167.760442][ T7367] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:24 executing program 0 (fault-call:0 fault-nth:2): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0x200005bc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8848000000000000, 0x2d9, 0x3]}) 06:55:24 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x4, r0, 0x0, 0x0) 06:55:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:25 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:25 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x5, r0, 0x0, 0x0) 06:55:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8864000000000000, 0x2d9, 0x3]}) [ 2168.230772][ T7409] FAULT_INJECTION: forcing a failure. [ 2168.230772][ T7409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2168.244026][ T7409] CPU: 1 PID: 7409 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2168.251827][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.251834][ T7409] Call Trace: [ 2168.251861][ T7409] dump_stack+0x172/0x1f0 [ 2168.251884][ T7409] should_fail.cold+0xa/0x15 [ 2168.274315][ T7409] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2168.280151][ T7409] ? mark_held_locks+0xf0/0xf0 [ 2168.284943][ T7409] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 2168.290510][ T7409] should_fail_alloc_page+0x50/0x60 [ 2168.290526][ T7409] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2168.290542][ T7409] ? rcu_read_unlock+0x16/0x60 [ 2168.290565][ T7409] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2168.311708][ T7409] cache_grow_begin+0x9d/0x650 [ 2168.316510][ T7409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2168.322770][ T7409] kmem_cache_alloc+0x62a/0x6f0 [ 2168.322786][ T7409] ? find_held_lock+0x35/0x130 [ 2168.322800][ T7409] ? __alloc_fd+0x44d/0x560 [ 2168.322817][ T7409] ? shmem_destroy_inode+0x80/0x80 [ 2168.322831][ T7409] shmem_alloc_inode+0x1c/0x50 [ 2168.322846][ T7409] alloc_inode+0x68/0x1e0 [ 2168.322863][ T7409] new_inode_pseudo+0x19/0xf0 [ 2168.322883][ T7409] new_inode+0x1f/0x40 [ 2168.332493][ T7409] shmem_get_inode+0x84/0x7e0 [ 2168.332516][ T7409] __shmem_file_setup.part.0+0x7e/0x2b0 [ 2168.332535][ T7409] shmem_file_setup+0x66/0x90 [ 2168.332554][ T7409] __x64_sys_memfd_create+0x2a2/0x470 [ 2168.332570][ T7409] ? memfd_fcntl+0x1820/0x1820 [ 2168.332585][ T7409] ? do_syscall_64+0x26/0x680 [ 2168.332607][ T7409] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2168.394870][ T7409] ? trace_hardirqs_on+0x67/0x220 [ 2168.399904][ T7409] do_syscall_64+0xfd/0x680 [ 2168.404440][ T7409] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2168.410331][ T7409] RIP: 0033:0x4597c9 [ 2168.414234][ T7409] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2168.433838][ T7409] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2168.433853][ T7409] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 [ 2168.433860][ T7409] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc [ 2168.433869][ T7409] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2168.433877][ T7409] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 06:55:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88a8ffff00000000, 0x2d9, 0x3]}) 06:55:25 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x6, r0, 0x0, 0x0) 06:55:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0x7ffff000}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2168.433885][ T7409] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:25 executing program 0 (fault-call:0 fault-nth:3): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x88caffff00000000, 0x2d9, 0x3]}) 06:55:25 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:25 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x7, r0, 0x0, 0x0) 06:55:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x2) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x8906000000000000, 0x2d9, 0x3]}) 06:55:25 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x8, r0, 0x0, 0x0) 06:55:25 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2168.899790][ T7448] FAULT_INJECTION: forcing a failure. [ 2168.899790][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.980641][ T7448] CPU: 0 PID: 7448 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2168.988494][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2168.998568][ T7448] Call Trace: [ 2169.001885][ T7448] dump_stack+0x172/0x1f0 [ 2169.006517][ T7448] should_fail.cold+0xa/0x15 [ 2169.011142][ T7448] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2169.016981][ T7448] ? ___might_sleep+0x163/0x280 [ 2169.021851][ T7448] __should_failslab+0x121/0x190 [ 2169.026815][ T7448] should_failslab+0x9/0x14 [ 2169.031338][ T7448] kmem_cache_alloc+0x2af/0x6f0 [ 2169.036216][ T7448] ? current_time+0x6b/0x140 [ 2169.040832][ T7448] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 2169.046754][ T7448] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2169.052063][ T7448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2169.058332][ T7448] ? timespec64_trunc+0xf0/0x180 [ 2169.063296][ T7448] __d_alloc+0x2e/0x8c0 [ 2169.067652][ T7448] d_alloc_pseudo+0x1e/0x70 [ 2169.072183][ T7448] alloc_file_pseudo+0xe2/0x280 [ 2169.077050][ T7448] ? alloc_file+0x4d0/0x4d0 [ 2169.081581][ T7448] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2169.087855][ T7448] __shmem_file_setup.part.0+0x108/0x2b0 [ 2169.093551][ T7448] shmem_file_setup+0x66/0x90 [ 2169.098260][ T7448] __x64_sys_memfd_create+0x2a2/0x470 [ 2169.103662][ T7448] ? memfd_fcntl+0x1820/0x1820 [ 2169.108451][ T7448] ? do_syscall_64+0x26/0x680 [ 2169.113159][ T7448] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2169.118471][ T7448] ? trace_hardirqs_on+0x67/0x220 [ 2169.123557][ T7448] do_syscall_64+0xfd/0x680 [ 2169.128385][ T7448] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2169.134288][ T7448] RIP: 0033:0x4597c9 [ 2169.138195][ T7448] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.158263][ T7448] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2169.166881][ T7448] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 06:55:26 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x9, r0, 0x0, 0x0) 06:55:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2169.174878][ T7448] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc [ 2169.182980][ T7448] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2169.190970][ T7448] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 [ 2169.198977][ T7448] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:26 executing program 0 (fault-call:0 fault-nth:4): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xae02000000000000, 0x2d9, 0x3]}) 06:55:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xba02000000000000, 0x2d9, 0x3]}) 06:55:26 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xa, r0, 0x0, 0x0) 06:55:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2169.518162][ T7484] FAULT_INJECTION: forcing a failure. [ 2169.518162][ T7484] name failslab, interval 1, probability 0, space 0, times 0 06:55:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2169.612130][ T7484] CPU: 0 PID: 7484 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2169.619980][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2169.630746][ T7484] Call Trace: [ 2169.635617][ T7484] dump_stack+0x172/0x1f0 [ 2169.639983][ T7484] should_fail.cold+0xa/0x15 [ 2169.644882][ T7484] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2169.650728][ T7484] ? ___might_sleep+0x163/0x280 [ 2169.655604][ T7484] __should_failslab+0x121/0x190 [ 2169.660570][ T7484] should_failslab+0x9/0x14 [ 2169.665097][ T7484] kmem_cache_alloc+0x2af/0x6f0 [ 2169.669973][ T7484] __alloc_file+0x27/0x300 [ 2169.674411][ T7484] alloc_empty_file+0x72/0x170 [ 2169.679217][ T7484] alloc_file+0x5e/0x4d0 [ 2169.683475][ T7484] alloc_file_pseudo+0x189/0x280 [ 2169.688422][ T7484] ? alloc_file+0x4d0/0x4d0 [ 2169.692945][ T7484] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2169.699203][ T7484] __shmem_file_setup.part.0+0x108/0x2b0 [ 2169.704849][ T7484] shmem_file_setup+0x66/0x90 [ 2169.709542][ T7484] __x64_sys_memfd_create+0x2a2/0x470 [ 2169.714923][ T7484] ? memfd_fcntl+0x1820/0x1820 [ 2169.719700][ T7484] ? do_syscall_64+0x26/0x680 [ 2169.724398][ T7484] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2169.729715][ T7484] ? trace_hardirqs_on+0x67/0x220 [ 2169.734757][ T7484] do_syscall_64+0xfd/0x680 [ 2169.739280][ T7484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2169.745269][ T7484] RIP: 0033:0x4597c9 [ 2169.749175][ T7484] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2169.769414][ T7484] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2169.777834][ T7484] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 [ 2169.785810][ T7484] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc [ 2169.793790][ T7484] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2169.801773][ T7484] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 06:55:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xdc02000000000000, 0x2d9, 0x3]}) 06:55:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2169.809747][ T7484] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:26 executing program 0 (fault-call:0 fault-nth:5): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:26 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xc, r0, 0x0, 0x0) 06:55:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xe000000000000000, 0x2d9, 0x3]}) 06:55:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x500) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:27 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:27 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xd, r0, 0x0, 0x0) 06:55:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xff00000000000000, 0x2d9, 0x3]}) 06:55:27 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:27 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xe, r0, 0x0, 0x0) [ 2170.095538][ T7526] FAULT_INJECTION: forcing a failure. [ 2170.095538][ T7526] name failslab, interval 1, probability 0, space 0, times 0 [ 2170.151627][ T7526] CPU: 0 PID: 7526 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2170.159469][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.169528][ T7526] Call Trace: [ 2170.172835][ T7526] dump_stack+0x172/0x1f0 [ 2170.177183][ T7526] should_fail.cold+0xa/0x15 [ 2170.181789][ T7526] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2170.187605][ T7526] ? ___might_sleep+0x163/0x280 [ 2170.192472][ T7526] __should_failslab+0x121/0x190 [ 2170.197417][ T7526] should_failslab+0x9/0x14 [ 2170.201933][ T7526] kmem_cache_alloc+0x2af/0x6f0 [ 2170.206794][ T7526] __alloc_file+0x27/0x300 [ 2170.211219][ T7526] alloc_empty_file+0x72/0x170 [ 2170.216005][ T7526] alloc_file+0x5e/0x4d0 [ 2170.220263][ T7526] alloc_file_pseudo+0x189/0x280 [ 2170.225205][ T7526] ? alloc_file+0x4d0/0x4d0 [ 2170.229729][ T7526] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2170.236000][ T7526] __shmem_file_setup.part.0+0x108/0x2b0 [ 2170.241648][ T7526] shmem_file_setup+0x66/0x90 [ 2170.246339][ T7526] __x64_sys_memfd_create+0x2a2/0x470 [ 2170.251724][ T7526] ? memfd_fcntl+0x1820/0x1820 [ 2170.256491][ T7526] ? do_syscall_64+0x26/0x680 [ 2170.261173][ T7526] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2170.266464][ T7526] ? trace_hardirqs_on+0x67/0x220 [ 2170.271497][ T7526] do_syscall_64+0xfd/0x680 [ 2170.276010][ T7526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2170.281901][ T7526] RIP: 0033:0x4597c9 06:55:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xffffffff00000000, 0x2d9, 0x3]}) 06:55:27 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x543, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2170.285806][ T7526] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2170.305503][ T7526] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2170.313924][ T7526] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 [ 2170.321906][ T7526] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc [ 2170.329884][ T7526] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2170.337861][ T7526] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 [ 2170.345833][ T7526] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:27 executing program 0 (fault-call:0 fault-nth:6): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x35}, 0xb) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x805) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x5, 0x2000) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000300)) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, 0x0, 0xfffffe9c) socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, &(0x7f00000000c0), &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd35456924", 0x7a, 0xfffffffffffffffd) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00'}, 0x18) ioctl$FS_IOC_GETFLAGS(r5, 0x80046601, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) sync() clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r7, 0x1000000000016) 06:55:27 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:27 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xf, r0, 0x0, 0x0) 06:55:27 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xfffffffffffff000, 0x2d9, 0x3]}) 06:55:27 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2170.651661][ T7558] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 0, id = 0 [ 2170.669346][ T7561] FAULT_INJECTION: forcing a failure. [ 2170.669346][ T7561] name failslab, interval 1, probability 0, space 0, times 0 06:55:27 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x10, r0, 0x0, 0x0) [ 2170.780284][ T7561] CPU: 0 PID: 7561 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2170.788128][ T7561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2170.798201][ T7561] Call Trace: [ 2170.801518][ T7561] dump_stack+0x172/0x1f0 [ 2170.805867][ T7561] should_fail.cold+0xa/0x15 [ 2170.810479][ T7561] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2170.816297][ T7561] ? ___might_sleep+0x163/0x280 [ 2170.821161][ T7561] __should_failslab+0x121/0x190 [ 2170.826110][ T7561] should_failslab+0x9/0x14 [ 2170.830621][ T7561] kmem_cache_alloc+0x2af/0x6f0 [ 2170.835478][ T7561] ? rcu_read_lock_sched_held+0x110/0x130 [ 2170.841202][ T7561] ? kmem_cache_alloc+0x32b/0x6f0 [ 2170.846267][ T7561] security_file_alloc+0x39/0x170 [ 2170.851309][ T7561] __alloc_file+0xac/0x300 [ 2170.855826][ T7561] alloc_empty_file+0x72/0x170 [ 2170.860603][ T7561] alloc_file+0x5e/0x4d0 [ 2170.864859][ T7561] alloc_file_pseudo+0x189/0x280 [ 2170.869797][ T7561] ? alloc_file+0x4d0/0x4d0 [ 2170.874307][ T7561] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 2170.880559][ T7561] __shmem_file_setup.part.0+0x108/0x2b0 [ 2170.886205][ T7561] shmem_file_setup+0x66/0x90 [ 2170.890898][ T7561] __x64_sys_memfd_create+0x2a2/0x470 [ 2170.896278][ T7561] ? memfd_fcntl+0x1820/0x1820 [ 2170.901061][ T7561] ? do_syscall_64+0x26/0x680 [ 2170.905758][ T7561] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2170.911050][ T7561] ? trace_hardirqs_on+0x67/0x220 [ 2170.916091][ T7561] do_syscall_64+0xfd/0x680 [ 2170.920609][ T7561] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2170.926498][ T7561] RIP: 0033:0x4597c9 [ 2170.930396][ T7561] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2170.950008][ T7561] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 2170.958429][ T7561] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00000000004597c9 [ 2170.966405][ T7561] RDX: 0000000020000228 RSI: 0000000000000000 RDI: 00000000004be6cc 06:55:28 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0xffffffffffffffff, 0x2d9, 0x3]}) 06:55:28 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2170.974379][ T7561] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2170.982349][ T7561] R10: 0000000000010000 R11: 0000000000000246 R12: 00007f0795b276d4 [ 2170.990343][ T7561] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:28 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x11, r0, 0x0, 0x0) 06:55:28 executing program 0 (fault-call:0 fault-nth:7): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2171.243115][ T7589] FAULT_INJECTION: forcing a failure. [ 2171.243115][ T7589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2171.256652][ T7589] CPU: 0 PID: 7589 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2171.264461][ T7589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.274516][ T7589] Call Trace: [ 2171.277818][ T7589] dump_stack+0x172/0x1f0 [ 2171.282171][ T7589] should_fail.cold+0xa/0x15 [ 2171.286771][ T7589] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.292582][ T7589] ? is_bpf_text_address+0xac/0x170 [ 2171.297794][ T7589] should_fail_alloc_page+0x50/0x60 [ 2171.302999][ T7589] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2171.308376][ T7589] ? __lock_acquire+0x54f/0x5490 [ 2171.313322][ T7589] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2171.319047][ T7589] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.324865][ T7589] cache_grow_begin+0x9d/0x650 [ 2171.329635][ T7589] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2171.335885][ T7589] __kmalloc+0x67c/0x740 [ 2171.340139][ T7589] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2171.345866][ T7589] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2171.351407][ T7589] ? tomoyo_path_perm+0x1cb/0x430 [ 2171.351464][ T7589] tomoyo_path_perm+0x230/0x430 [ 2171.351476][ T7589] ? tomoyo_path_perm+0x1cb/0x430 [ 2171.351494][ T7589] ? tomoyo_check_open_permission+0x3f0/0x3f0 [ 2171.351508][ T7589] ? find_held_lock+0x35/0x130 [ 2171.351538][ T7589] ? lock_downgrade+0x880/0x880 [ 2171.382025][ T7589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.388305][ T7589] tomoyo_path_truncate+0x1d/0x30 [ 2171.393338][ T7589] security_path_truncate+0xf2/0x150 [ 2171.398635][ T7589] do_sys_ftruncate+0x3d9/0x550 [ 2171.403496][ T7589] __x64_sys_ftruncate+0x59/0x80 [ 2171.408454][ T7589] do_syscall_64+0xfd/0x680 [ 2171.412969][ T7589] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2171.418862][ T7589] RIP: 0033:0x459797 [ 2171.422756][ T7589] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2171.442396][ T7589] RSP: 002b:00007f0795b26a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 2171.450818][ T7589] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000459797 [ 2171.458795][ T7589] RDX: 0000000020000228 RSI: 0000000000020000 RDI: 0000000000000004 [ 2171.466775][ T7589] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2171.474752][ T7589] R10: 0000000000010000 R11: 0000000000000217 R12: 0000000000000004 [ 2171.482725][ T7589] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r5, 0x3, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x200, @rand_addr="e5890b5ab466ae0795c586638807501f", 0x9}, @in6={0xa, 0x4e23, 0x1, @local, 0x7}}}, 0x118) prctl$PR_SET_PDEATHSIG(0x1, 0x39) 06:55:28 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x689, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2dc, 0x3]}) 06:55:28 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:28 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x12, r0, 0x0, 0x0) 06:55:28 executing program 0 (fault-call:0 fault-nth:8): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2171.772663][ T7608] FAULT_INJECTION: forcing a failure. [ 2171.772663][ T7608] name failslab, interval 1, probability 0, space 0, times 0 06:55:28 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:28 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2171.812999][ T7609] net_ratelimit: 23 callbacks suppressed [ 2171.813008][ T7609] dccp_invalid_packet: P.Data Offset(0) too small [ 2171.840242][ T7608] CPU: 0 PID: 7608 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2171.848070][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2171.858129][ T7608] Call Trace: [ 2171.861437][ T7608] dump_stack+0x172/0x1f0 [ 2171.865793][ T7608] should_fail.cold+0xa/0x15 [ 2171.870402][ T7608] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2171.876234][ T7608] ? ___might_sleep+0x163/0x280 [ 2171.881099][ T7608] __should_failslab+0x121/0x190 [ 2171.886049][ T7608] should_failslab+0x9/0x14 [ 2171.890558][ T7608] __kmalloc+0x2d9/0x740 [ 2171.894812][ T7608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.901054][ T7608] ? simple_dname+0xd1/0x1f0 [ 2171.905748][ T7608] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2171.905987][ T7615] dccp_invalid_packet: P.Data Offset(0) too small [ 2171.911150][ T7608] tomoyo_encode2.part.0+0xf5/0x400 [ 2171.911169][ T7608] tomoyo_encode+0x2b/0x50 [ 2171.911189][ T7608] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2171.932799][ T7608] ? tomoyo_path_perm+0x1cb/0x430 [ 2171.937838][ T7608] tomoyo_path_perm+0x230/0x430 [ 2171.942688][ T7608] ? tomoyo_path_perm+0x1cb/0x430 [ 2171.947723][ T7608] ? tomoyo_check_open_permission+0x3f0/0x3f0 [ 2171.953799][ T7608] ? find_held_lock+0x35/0x130 [ 2171.958582][ T7608] ? lock_downgrade+0x880/0x880 [ 2171.963441][ T7608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2171.969745][ T7608] tomoyo_path_truncate+0x1d/0x30 [ 2171.974780][ T7608] security_path_truncate+0xf2/0x150 [ 2171.980102][ T7608] do_sys_ftruncate+0x3d9/0x550 [ 2171.984960][ T7608] __x64_sys_ftruncate+0x59/0x80 [ 2171.989905][ T7608] do_syscall_64+0xfd/0x680 [ 2171.994425][ T7608] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2172.000318][ T7608] RIP: 0033:0x459797 06:55:28 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x13, r0, 0x0, 0x0) 06:55:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x3259, 0x3]}) [ 2172.004220][ T7608] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2172.024104][ T7608] RSP: 002b:00007f0795b26a88 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 2172.032528][ T7608] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 0000000000459797 [ 2172.040508][ T7608] RDX: 0000000020000228 RSI: 0000000000020000 RDI: 0000000000000004 [ 2172.048482][ T7608] RBP: 000000000075bf20 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2172.056461][ T7608] R10: 0000000000010000 R11: 0000000000000217 R12: 0000000000000004 06:55:29 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:29 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2172.064439][ T7608] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2172.099325][ T7608] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:29 executing program 4: r0 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000380)={{0x3, @netrom}, [@bcast, @null, @netrom, @null, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000000400)=0x48) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) execveat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='-\x00'], &(0x7f0000000340)=[&(0x7f0000000200)='@cgroupeth1*\x00', &(0x7f0000000240)='/dev/snd/controlC#\x00', &(0x7f0000000280)='%\x00', &(0x7f00000002c0)='/dev/snd/controlC#\x00', &(0x7f0000000300)='/dev/snd/controlC#\x00'], 0x500) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key(&(0x7f00000005c0)='id_resolver\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r5) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000440)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 06:55:29 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x200002d9, 0x3]}) 06:55:29 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x14, r0, 0x0, 0x0) 06:55:29 executing program 0 (fault-call:0 fault-nth:9): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:29 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2172.809186][ T7646] FAULT_INJECTION: forcing a failure. [ 2172.809186][ T7646] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.822231][ T7646] CPU: 1 PID: 7646 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2172.830039][ T7646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2172.840103][ T7646] Call Trace: [ 2172.843408][ T7646] dump_stack+0x172/0x1f0 [ 2172.847761][ T7646] should_fail.cold+0xa/0x15 [ 2172.852361][ T7646] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2172.858265][ T7646] ? __lock_acquire+0x54f/0x5490 [ 2172.863213][ T7646] __should_failslab+0x121/0x190 [ 2172.868163][ T7646] should_failslab+0x9/0x14 [ 2172.872688][ T7646] kmem_cache_alloc+0x47/0x6f0 [ 2172.877476][ T7646] xas_alloc+0x346/0x460 [ 2172.881721][ T7646] xas_create+0x2cd/0x1040 [ 2172.886178][ T7646] xas_create_range+0x198/0x5d0 [ 2172.891049][ T7646] shmem_add_to_page_cache+0x6a4/0x1130 [ 2172.896608][ T7646] ? shmem_writepage+0xe90/0xe90 [ 2172.901566][ T7646] shmem_getpage_gfp+0x6db/0x2500 [ 2172.906614][ T7646] ? shmem_unuse_inode+0x1010/0x1010 [ 2172.911909][ T7646] ? current_time+0x6b/0x140 [ 2172.916505][ T7646] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 2172.922326][ T7646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2172.928577][ T7646] ? iov_iter_fault_in_readable+0x22c/0x450 [ 2172.934666][ T7646] shmem_write_begin+0x105/0x1e0 [ 2172.939614][ T7646] generic_perform_write+0x22a/0x520 [ 2172.944919][ T7646] ? page_endio+0x780/0x780 [ 2172.949436][ T7646] ? current_time+0x140/0x140 [ 2172.954124][ T7646] ? lock_acquire+0x16f/0x3f0 [ 2172.958806][ T7646] __generic_file_write_iter+0x25e/0x630 [ 2172.964448][ T7646] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2172.970182][ T7646] generic_file_write_iter+0x360/0x610 [ 2172.975646][ T7646] ? __generic_file_write_iter+0x630/0x630 [ 2172.975665][ T7646] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2172.975686][ T7646] ? iov_iter_init+0xee/0x220 [ 2172.992380][ T7646] new_sync_write+0x4d3/0x770 [ 2172.992398][ T7646] ? new_sync_read+0x800/0x800 [ 2172.992434][ T7646] __vfs_write+0xe1/0x110 [ 2172.992451][ T7646] vfs_write+0x20c/0x580 [ 2172.992470][ T7646] ksys_pwrite64+0x183/0x1c0 [ 2173.015020][ T7646] ? __ia32_sys_pread64+0xf0/0xf0 [ 2173.020055][ T7646] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2173.025524][ T7646] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2173.031018][ T7646] ? do_syscall_64+0x26/0x680 [ 2173.035701][ T7646] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.041776][ T7646] ? do_syscall_64+0x26/0x680 [ 2173.046473][ T7646] __x64_sys_pwrite64+0x97/0xf0 [ 2173.051337][ T7646] do_syscall_64+0xfd/0x680 06:55:29 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x15, r0, 0x0, 0x0) 06:55:29 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x16, r0, 0x0, 0x0) 06:55:30 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x17, r0, 0x0, 0x0) [ 2173.055855][ T7646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.061750][ T7646] RIP: 0033:0x413717 [ 2173.065644][ T7646] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2173.085276][ T7646] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2173.085291][ T7646] RAX: ffffffffffffffda RBX: 0000000020000210 RCX: 0000000000413717 [ 2173.085299][ T7646] RDX: 0000000000000048 RSI: 00000000200008c0 RDI: 0000000000000004 06:55:30 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:30 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2173.085307][ T7646] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2173.085315][ T7646] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 [ 2173.085323][ T7646] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x7ffff000, 0x3]}) 06:55:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) vmsplice(r2, &(0x7f0000000680)=[{&(0x7f0000000140)="f1c8129ced8a1e9f5c20ef4e1d6f342464c31228fb28348692573c7c97684469af8ba402684ce0239d5d29b32835a7f65989d9b9d344ba62cfbde69fdfaf46b97d36a8561e0f6987277ca7c6b1c5d239a108b587bf5002d05ab86ff6caab55aede389143f63dd9b2fd8701e5f76bf00b32fd27eeb8b43c5674a402ed8d1ce4fd82f7", 0x82}, {&(0x7f0000000200)="d7f2477d07548143dc210806b86e2cf20cd751784676cc0fe3a121b5c14a07a3ed8e87c5d634a33d25cf37fedd9f9cf45a82eef5f91ab15f82564dd8cb2b7f1899dafb2a", 0x44}, {&(0x7f0000000280)="34ff2d029d30eadfb6781b0e6a58b3613181834a175941a5da1c0c44e01e1a368d6efe2d8a143c9586bf0ad0cf85aa84c79a24ba1acdceba4a5be9bc4aa9ef2a208477c978220a49e224f095aa5e229f20dd4476db35f348d894552c1c0e74", 0x5f}, {&(0x7f0000000300)="17e3ae141732ac2beb9701f70907c1fda88d1bce8dd11fdaef6e8142ec32bdbc1b770af97f8b8d73f035b9d9c83d8954fd9cb89df56d075382d5f8f4005580d60509148d4027087ca161ba4da64cce8851e6d4373d4f9c0c7bccf0c2c386a551d5fa7299d4f899fb4296d2fbc384ea4c239ca79eb8a1cabff9055421288c323be78e186d39a115cd7e11005ca0", 0x8d}, {&(0x7f00000003c0)="57ee44c519bcee352dc6b8acfabbad7ac377d80fafd86494bcba236699627d3f67c8f690098af47134dd24b0034db13f9f4eb15d1d77b28f72edac46f776f481596c594b2f1fe47daf5c15899cff0da9748134aa453525b05ad310f7f579e2593bea679dce32463413a4ed67c4b3a837dd32856ec334169c4481024a41fa3e56bb41b9d2f2b9b166ff57718b1a4bbf6a16e9c6022893be2c257d765fc4aadcc03e0c3f1c966d15ab124d56a827e6adbd78625fcbc6f1953bd9152d357097bec43fb495b890a973e9a03ebfe401ce81757faa6faef01093566e4a8ad662a235eb0b53301aeff30703836a127ac17549bd85c4a45c2677", 0xf6}, {&(0x7f00000005c0)="54bec417f23788e9c5c7aab12fdfee807b980142988f270189eb6bb3d2702b8ca26bba9988d89277456ee67ef3af57db3ac178e7dd3e9f476e8165bcfb97ccc2ac249b7c133152615410fb64c164411637c4e1ea349cc3b8574af8e7237a666ba555303afc8164f64c4c60295dcfffac851c295729780f5cd91a527d84ab61427efca1c9f5342c82f48bc7149e5022e0", 0x90}], 0x6, 0x3) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:30 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:30 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x18, r0, 0x0, 0x0) 06:55:30 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:30 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x2]}) 06:55:30 executing program 0 (fault-call:0 fault-nth:10): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2173.746862][ T7685] FAULT_INJECTION: forcing a failure. [ 2173.746862][ T7685] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.759494][ T7685] CPU: 1 PID: 7685 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2173.768794][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2173.778856][ T7685] Call Trace: [ 2173.782160][ T7685] dump_stack+0x172/0x1f0 [ 2173.786501][ T7685] should_fail.cold+0xa/0x15 [ 2173.791104][ T7685] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2173.796920][ T7685] ? __lock_acquire+0x54f/0x5490 [ 2173.801867][ T7685] __should_failslab+0x121/0x190 [ 2173.806814][ T7685] should_failslab+0x9/0x14 [ 2173.811320][ T7685] kmem_cache_alloc+0x47/0x6f0 [ 2173.816089][ T7685] xas_alloc+0x346/0x460 [ 2173.816105][ T7685] xas_create+0x2cd/0x1040 [ 2173.816128][ T7685] xas_create_range+0x198/0x5d0 [ 2173.816155][ T7685] shmem_add_to_page_cache+0x6a4/0x1130 [ 2173.816177][ T7685] ? shmem_writepage+0xe90/0xe90 [ 2173.840179][ T7685] shmem_getpage_gfp+0x6db/0x2500 [ 2173.845231][ T7685] ? shmem_unuse_inode+0x1010/0x1010 [ 2173.850531][ T7685] ? current_time+0x6b/0x140 [ 2173.855138][ T7685] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 2173.861019][ T7685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2173.867278][ T7685] ? iov_iter_fault_in_readable+0x22c/0x450 [ 2173.873196][ T7685] shmem_write_begin+0x105/0x1e0 [ 2173.878150][ T7685] generic_perform_write+0x22a/0x520 [ 2173.883456][ T7685] ? page_endio+0x780/0x780 [ 2173.883474][ T7685] ? current_time+0x140/0x140 [ 2173.883493][ T7685] ? lock_acquire+0x16f/0x3f0 [ 2173.883513][ T7685] __generic_file_write_iter+0x25e/0x630 [ 2173.883528][ T7685] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2173.883545][ T7685] generic_file_write_iter+0x360/0x610 [ 2173.883563][ T7685] ? __generic_file_write_iter+0x630/0x630 [ 2173.883585][ T7685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2173.897431][ T7685] ? iov_iter_init+0xee/0x220 [ 2173.897451][ T7685] new_sync_write+0x4d3/0x770 [ 2173.897467][ T7685] ? new_sync_read+0x800/0x800 [ 2173.897499][ T7685] __vfs_write+0xe1/0x110 06:55:30 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x19, r0, 0x0, 0x0) 06:55:30 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2173.940418][ T7685] vfs_write+0x20c/0x580 [ 2173.940439][ T7685] ksys_pwrite64+0x183/0x1c0 [ 2173.940454][ T7685] ? __ia32_sys_pread64+0xf0/0xf0 [ 2173.940477][ T7685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2173.964143][ T7685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2173.969616][ T7685] ? do_syscall_64+0x26/0x680 [ 2173.974305][ T7685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.980384][ T7685] ? do_syscall_64+0x26/0x680 [ 2173.985072][ T7685] __x64_sys_pwrite64+0x97/0xf0 [ 2173.985092][ T7685] do_syscall_64+0xfd/0x680 [ 2173.985113][ T7685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2173.985124][ T7685] RIP: 0033:0x413717 [ 2173.985141][ T7685] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2173.985148][ T7685] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2173.985161][ T7685] RAX: ffffffffffffffda RBX: 0000000020000210 RCX: 0000000000413717 06:55:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x4]}) [ 2173.985169][ T7685] RDX: 0000000000000048 RSI: 00000000200008c0 RDI: 0000000000000004 [ 2173.985177][ T7685] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2173.985186][ T7685] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 [ 2173.985194][ T7685] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:31 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:31 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x1b, r0, 0x0, 0x0) 06:55:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = dup(r2) write$P9_RAUTH(r4, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x0, 0x1, 0x4}}, 0x14) 06:55:31 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2174.125645][ T7701] dccp_invalid_packet: P.Data Offset(0) too small [ 2174.163691][ T7704] dccp_invalid_packet: P.Data Offset(0) too small 06:55:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x5]}) 06:55:31 executing program 0 (fault-call:0 fault-nth:11): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:31 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x1c, r0, 0x0, 0x0) 06:55:31 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2174.421703][ T7722] FAULT_INJECTION: forcing a failure. [ 2174.421703][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 2174.434340][ T7722] CPU: 0 PID: 7722 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2174.442182][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2174.452259][ T7722] Call Trace: [ 2174.455568][ T7722] dump_stack+0x172/0x1f0 [ 2174.459933][ T7722] should_fail.cold+0xa/0x15 [ 2174.464549][ T7722] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2174.470374][ T7722] ? __lock_acquire+0x54f/0x5490 [ 2174.475355][ T7722] __should_failslab+0x121/0x190 [ 2174.480301][ T7722] should_failslab+0x9/0x14 [ 2174.484815][ T7722] kmem_cache_alloc+0x47/0x6f0 [ 2174.489599][ T7722] xas_alloc+0x346/0x460 [ 2174.493853][ T7722] xas_create+0x2cd/0x1040 [ 2174.498290][ T7722] xas_create_range+0x198/0x5d0 [ 2174.503163][ T7722] shmem_add_to_page_cache+0x6a4/0x1130 [ 2174.508741][ T7722] ? shmem_writepage+0xe90/0xe90 [ 2174.513704][ T7722] shmem_getpage_gfp+0x6db/0x2500 [ 2174.518750][ T7722] ? shmem_unuse_inode+0x1010/0x1010 [ 2174.524047][ T7722] ? current_time+0x6b/0x140 [ 2174.528644][ T7722] ? ktime_get_coarse_real_ts64+0xf0/0x2b0 [ 2174.534463][ T7722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2174.540714][ T7722] ? iov_iter_fault_in_readable+0x22c/0x450 [ 2174.546625][ T7722] shmem_write_begin+0x105/0x1e0 [ 2174.551574][ T7722] generic_perform_write+0x22a/0x520 [ 2174.556876][ T7722] ? page_endio+0x780/0x780 [ 2174.561414][ T7722] ? current_time+0x140/0x140 [ 2174.566105][ T7722] ? lock_acquire+0x16f/0x3f0 [ 2174.570798][ T7722] __generic_file_write_iter+0x25e/0x630 [ 2174.576444][ T7722] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2174.582181][ T7722] generic_file_write_iter+0x360/0x610 [ 2174.587659][ T7722] ? __generic_file_write_iter+0x630/0x630 [ 2174.593484][ T7722] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2174.599739][ T7722] ? iov_iter_init+0xee/0x220 [ 2174.604441][ T7722] new_sync_write+0x4d3/0x770 [ 2174.609129][ T7722] ? new_sync_read+0x800/0x800 [ 2174.613922][ T7722] __vfs_write+0xe1/0x110 [ 2174.618268][ T7722] vfs_write+0x20c/0x580 [ 2174.622523][ T7722] ksys_pwrite64+0x183/0x1c0 [ 2174.627118][ T7722] ? __ia32_sys_pread64+0xf0/0xf0 [ 2174.632151][ T7722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2174.637816][ T7722] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2174.649369][ T7722] ? do_syscall_64+0x26/0x680 [ 2174.654053][ T7722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2174.660123][ T7722] ? do_syscall_64+0x26/0x680 [ 2174.664828][ T7722] __x64_sys_pwrite64+0x97/0xf0 [ 2174.669690][ T7722] do_syscall_64+0xfd/0x680 [ 2174.674206][ T7722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2174.680108][ T7722] RIP: 0033:0x413717 [ 2174.684010][ T7722] Code: 12 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a1 18 00 00 c3 48 83 ec 08 e8 a7 f9 ff ff 48 89 04 24 49 89 ca b8 12 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 ed f9 ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2174.703622][ T7722] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000012 [ 2174.712159][ T7722] RAX: ffffffffffffffda RBX: 0000000020000210 RCX: 0000000000413717 06:55:31 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:31 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:31 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:31 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:31 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4788, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:31 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2174.720143][ T7722] RDX: 0000000000000048 RSI: 00000000200008c0 RDI: 0000000000000004 [ 2174.728120][ T7722] RBP: 0000000000000000 R08: fe03f80fe03f80ff R09: 00000000fbad8001 [ 2174.736125][ T7722] R10: 0000000000010000 R11: 0000000000000293 R12: 0000000000000004 [ 2174.744128][ T7722] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2174.759889][ T7739] dccp_invalid_packet: P.Data Offset(0) too small 06:55:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl(r2, 0x7f, &(0x7f00000005c0)="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") r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)=0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = syz_open_procfs(r3, &(0x7f0000000180)='net/dev_snmp6\x00') r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x108, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x24000000) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000140)) tkill(r3, 0x1000000000016) 06:55:31 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2174.804781][ T7743] dccp_invalid_packet: P.Data Offset(0) too small 06:55:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x6]}) 06:55:32 executing program 0 (fault-call:0 fault-nth:12): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:32 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0x1d, r0, 0x0, 0x0) 06:55:32 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:32 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:32 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2175.129463][ T7771] FAULT_INJECTION: forcing a failure. [ 2175.129463][ T7771] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.133318][ T7768] dccp_invalid_packet: P.Data Offset(0) too small [ 2175.161594][ T7771] CPU: 0 PID: 7771 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2175.169427][ T7771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.179487][ T7771] Call Trace: [ 2175.182822][ T7771] dump_stack+0x172/0x1f0 [ 2175.182848][ T7771] should_fail.cold+0xa/0x15 [ 2175.182870][ T7771] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2175.182895][ T7771] ? ___might_sleep+0x163/0x280 [ 2175.202490][ T7771] __should_failslab+0x121/0x190 [ 2175.207449][ T7771] should_failslab+0x9/0x14 [ 2175.211963][ T7771] kmem_cache_alloc+0x2af/0x6f0 [ 2175.216829][ T7771] ? lock_downgrade+0x880/0x880 [ 2175.221694][ T7771] getname_flags+0xd6/0x5b0 [ 2175.226248][ T7771] getname+0x1a/0x20 [ 2175.230155][ T7771] do_sys_open+0x2c9/0x5d0 [ 2175.234591][ T7771] ? filp_open+0x80/0x80 [ 2175.238846][ T7771] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2175.244310][ T7771] ? do_syscall_64+0x26/0x680 [ 2175.248998][ T7771] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2175.255072][ T7771] ? do_syscall_64+0x26/0x680 [ 2175.259770][ T7771] __x64_sys_open+0x7e/0xc0 [ 2175.264284][ T7771] do_syscall_64+0xfd/0x680 [ 2175.268804][ T7771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2175.274702][ T7771] RIP: 0033:0x4136b1 06:55:32 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:32 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x800e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:32 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x2) [ 2175.278598][ T7771] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2175.298234][ T7771] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2175.298249][ T7771] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 [ 2175.298256][ T7771] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 06:55:32 executing program 0 (fault-call:0 fault-nth:13): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2175.298262][ T7771] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2175.298270][ T7771] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2175.298277][ T7771] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2175.351034][ T7779] dccp_invalid_packet: P.Data Offset(0) too small [ 2175.436765][ T7785] FAULT_INJECTION: forcing a failure. [ 2175.436765][ T7785] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.487031][ T7785] CPU: 1 PID: 7785 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2175.494872][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2175.504933][ T7785] Call Trace: [ 2175.508257][ T7785] dump_stack+0x172/0x1f0 [ 2175.512609][ T7785] should_fail.cold+0xa/0x15 [ 2175.517217][ T7785] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2175.523040][ T7785] ? ___might_sleep+0x163/0x280 [ 2175.527902][ T7785] __should_failslab+0x121/0x190 [ 2175.532858][ T7785] should_failslab+0x9/0x14 [ 2175.537365][ T7785] kmem_cache_alloc+0x2af/0x6f0 [ 2175.542225][ T7785] ? rcu_read_lock_sched_held+0x110/0x130 [ 2175.547964][ T7785] ? kmem_cache_alloc+0x32b/0x6f0 [ 2175.552995][ T7785] security_file_alloc+0x39/0x170 [ 2175.558028][ T7785] __alloc_file+0xac/0x300 [ 2175.562455][ T7785] alloc_empty_file+0x72/0x170 [ 2175.567232][ T7785] path_openat+0xef/0x46d0 [ 2175.571658][ T7785] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2175.577481][ T7785] ? __lock_acquire+0x54f/0x5490 [ 2175.582426][ T7785] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2175.588506][ T7785] ? mark_held_locks+0xf0/0xf0 [ 2175.593285][ T7785] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2175.598672][ T7785] ? cache_grow_end+0xa4/0x190 [ 2175.603444][ T7785] ? __alloc_fd+0x44d/0x560 [ 2175.607975][ T7785] do_filp_open+0x1a1/0x280 [ 2175.612489][ T7785] ? may_open_dev+0x100/0x100 [ 2175.617153][ T7785] ? lock_downgrade+0x880/0x880 [ 2175.621985][ T7785] ? kasan_check_read+0x11/0x20 [ 2175.626829][ T7785] ? do_raw_spin_unlock+0x57/0x270 [ 2175.632610][ T7785] ? _raw_spin_unlock+0x2d/0x50 [ 2175.637504][ T7785] ? __alloc_fd+0x44d/0x560 [ 2175.641998][ T7785] do_sys_open+0x3fe/0x5d0 [ 2175.646396][ T7785] ? filp_open+0x80/0x80 [ 2175.650625][ T7785] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2175.656065][ T7785] ? do_syscall_64+0x26/0x680 [ 2175.660729][ T7785] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2175.666795][ T7785] ? do_syscall_64+0x26/0x680 [ 2175.671467][ T7785] __x64_sys_open+0x7e/0xc0 [ 2175.675973][ T7785] do_syscall_64+0xfd/0x680 [ 2175.680466][ T7785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2175.686341][ T7785] RIP: 0033:0x4136b1 [ 2175.690219][ T7785] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2175.709823][ T7785] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2175.718919][ T7785] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 [ 2175.726897][ T7785] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 [ 2175.734858][ T7785] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2175.742965][ T7785] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2175.750943][ T7785] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000080)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:34 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8035, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:34 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xfeffff) 06:55:34 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x7]}) 06:55:34 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:34 executing program 0 (fault-call:0 fault-nth:14): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2177.897689][ T7797] dccp_invalid_packet: P.Data Offset(0) too small [ 2177.916775][ T7801] FAULT_INJECTION: forcing a failure. [ 2177.916775][ T7801] name failslab, interval 1, probability 0, space 0, times 0 [ 2177.958332][ T7804] dccp_invalid_packet: P.Data Offset(0) too small [ 2177.966803][ T7801] CPU: 1 PID: 7801 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2177.974624][ T7801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2177.984688][ T7801] Call Trace: [ 2177.988001][ T7801] dump_stack+0x172/0x1f0 [ 2177.992352][ T7801] should_fail.cold+0xa/0x15 [ 2177.996963][ T7801] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2178.002869][ T7801] ? ___might_sleep+0x163/0x280 [ 2178.007743][ T7801] __should_failslab+0x121/0x190 [ 2178.012701][ T7801] should_failslab+0x9/0x14 [ 2178.017222][ T7801] kmem_cache_alloc+0x2af/0x6f0 [ 2178.022086][ T7801] ? stack_trace_save+0xac/0xe0 [ 2178.026944][ T7801] ? stack_trace_consume_entry+0x190/0x190 [ 2178.032767][ T7801] __alloc_file+0x27/0x300 [ 2178.037195][ T7801] alloc_empty_file+0x72/0x170 [ 2178.041970][ T7801] path_openat+0xef/0x46d0 [ 2178.046397][ T7801] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2178.052220][ T7801] ? __lock_acquire+0x54f/0x5490 [ 2178.057165][ T7801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.063247][ T7801] ? mark_held_locks+0xf0/0xf0 [ 2178.068027][ T7801] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2178.073407][ T7801] ? cache_grow_end+0xa4/0x190 [ 2178.078182][ T7801] ? __alloc_fd+0x44d/0x560 [ 2178.082704][ T7801] do_filp_open+0x1a1/0x280 [ 2178.087222][ T7801] ? may_open_dev+0x100/0x100 [ 2178.091911][ T7801] ? lock_downgrade+0x880/0x880 [ 2178.096779][ T7801] ? kasan_check_read+0x11/0x20 [ 2178.101647][ T7801] ? do_raw_spin_unlock+0x57/0x270 [ 2178.106770][ T7801] ? _raw_spin_unlock+0x2d/0x50 [ 2178.111628][ T7801] ? __alloc_fd+0x44d/0x560 [ 2178.116153][ T7801] do_sys_open+0x3fe/0x5d0 [ 2178.120593][ T7801] ? filp_open+0x80/0x80 [ 2178.124850][ T7801] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2178.130318][ T7801] ? do_syscall_64+0x26/0x680 [ 2178.135008][ T7801] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.141089][ T7801] ? do_syscall_64+0x26/0x680 [ 2178.145787][ T7801] __x64_sys_open+0x7e/0xc0 [ 2178.150311][ T7801] do_syscall_64+0xfd/0x680 [ 2178.154833][ T7801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.160864][ T7801] RIP: 0033:0x4136b1 [ 2178.164769][ T7801] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2178.184380][ T7801] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2178.192807][ T7801] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 [ 2178.200791][ T7801] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 06:55:35 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:35 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x1000000) 06:55:35 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:35 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x2000000) 06:55:35 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:35 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2178.208770][ T7801] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2178.216751][ T7801] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2178.224739][ T7801] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x12, 0x2}, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000080)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$update(0x2, r4, &(0x7f0000000200)="e6a4d909", 0x4) 06:55:35 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xfffffe00) 06:55:35 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:35 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x8]}) 06:55:35 executing program 0 (fault-call:0 fault-nth:15): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:35 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:35 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:35 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xfeffff00000000) [ 2178.552681][ T7833] dccp_invalid_packet: P.Data Offset(0) too small [ 2178.570789][ T7839] FAULT_INJECTION: forcing a failure. [ 2178.570789][ T7839] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.590332][ T7837] dccp_invalid_packet: P.Data Offset(0) too small [ 2178.610823][ T7839] CPU: 0 PID: 7839 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2178.618657][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2178.628741][ T7839] Call Trace: [ 2178.632603][ T7839] dump_stack+0x172/0x1f0 [ 2178.637148][ T7839] should_fail.cold+0xa/0x15 [ 2178.649751][ T7839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2178.655573][ T7839] ? ___might_sleep+0x163/0x280 [ 2178.660442][ T7839] __should_failslab+0x121/0x190 [ 2178.665402][ T7839] should_failslab+0x9/0x14 [ 2178.669908][ T7839] __kmalloc+0x2d9/0x740 [ 2178.674176][ T7839] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2178.679919][ T7839] ? rcu_read_lock_sched_held+0x110/0x130 [ 2178.685640][ T7839] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2178.691373][ T7839] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2178.696927][ T7839] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2178.703189][ T7839] tomoyo_check_open_permission+0x2a8/0x3f0 [ 2178.709117][ T7839] ? tomoyo_path_number_perm+0x520/0x520 [ 2178.714774][ T7839] ? ___might_sleep+0x163/0x280 [ 2178.719652][ T7839] ? inode_has_perm+0x230/0x230 [ 2178.724521][ T7839] tomoyo_file_open+0xa9/0xd0 [ 2178.729234][ T7839] security_file_open+0x71/0x300 [ 2178.734208][ T7839] do_dentry_open+0x373/0x1250 [ 2178.738993][ T7839] ? kasan_check_read+0x11/0x20 [ 2178.743861][ T7839] ? chown_common+0x5c0/0x5c0 [ 2178.748580][ T7839] ? inode_permission+0xb4/0x560 [ 2178.753537][ T7839] vfs_open+0xa0/0xd0 [ 2178.757532][ T7839] path_openat+0x10e9/0x46d0 [ 2178.762131][ T7839] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2178.767960][ T7839] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2178.773350][ T7839] ? __alloc_fd+0x44d/0x560 [ 2178.777862][ T7839] do_filp_open+0x1a1/0x280 [ 2178.782377][ T7839] ? may_open_dev+0x100/0x100 [ 2178.787070][ T7839] ? kasan_check_read+0x11/0x20 [ 2178.791931][ T7839] ? do_raw_spin_unlock+0x57/0x270 [ 2178.797052][ T7839] ? _raw_spin_unlock+0x2d/0x50 [ 2178.801913][ T7839] ? __alloc_fd+0x44d/0x560 [ 2178.806442][ T7839] do_sys_open+0x3fe/0x5d0 06:55:35 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2178.810923][ T7839] ? filp_open+0x80/0x80 [ 2178.815184][ T7839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2178.820654][ T7839] ? do_syscall_64+0x26/0x680 [ 2178.825598][ T7839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.831672][ T7839] ? do_syscall_64+0x26/0x680 [ 2178.836361][ T7839] __x64_sys_open+0x7e/0xc0 [ 2178.840873][ T7839] do_syscall_64+0xfd/0x680 [ 2178.845389][ T7839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2178.851284][ T7839] RIP: 0033:0x4136b1 06:55:35 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2178.855186][ T7839] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2178.874811][ T7839] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2178.883247][ T7839] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 [ 2178.891235][ T7839] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 [ 2178.899225][ T7839] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:55:35 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x100000000000000) 06:55:35 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2178.907291][ T7839] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2178.915263][ T7839] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2178.990054][ T7839] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = socket(0x1b, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x8, @local, 0x80000001}}, 0x8, 0x7f, 0x7f, 0x7, 0x924}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={r5, 0x2}, &(0x7f0000000240)=0x8) tkill(r3, 0x1000000000016) 06:55:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x9]}) 06:55:38 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:38 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8906, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:38 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x200000000000000) 06:55:38 executing program 0 (fault-call:0 fault-nth:16): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2181.499905][ T7975] FAULT_INJECTION: forcing a failure. [ 2181.499905][ T7975] name failslab, interval 1, probability 0, space 0, times 0 [ 2181.513025][ T7974] dccp_invalid_packet: P.Data Offset(0) too small [ 2181.526953][ T7975] CPU: 0 PID: 7975 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2181.534812][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2181.545136][ T7975] Call Trace: 06:55:38 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2181.548550][ T7975] dump_stack+0x172/0x1f0 [ 2181.552896][ T7975] should_fail.cold+0xa/0x15 [ 2181.557500][ T7975] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2181.563316][ T7975] ? ___might_sleep+0x163/0x280 [ 2181.568178][ T7975] __should_failslab+0x121/0x190 [ 2181.573132][ T7975] should_failslab+0x9/0x14 [ 2181.577645][ T7975] __kmalloc+0x2d9/0x740 [ 2181.581892][ T7975] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2181.581924][ T7975] ? rcu_read_lock_sched_held+0x110/0x130 [ 2181.581937][ T7975] ? tomoyo_realpath_from_path+0xcd/0x7a0 06:55:38 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:38 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x17c) [ 2181.581955][ T7975] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2181.581978][ T7975] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2181.610870][ T7975] tomoyo_check_open_permission+0x2a8/0x3f0 [ 2181.616774][ T7975] ? tomoyo_path_number_perm+0x520/0x520 [ 2181.622522][ T7975] ? ___might_sleep+0x163/0x280 [ 2181.627399][ T7975] ? inode_has_perm+0x230/0x230 [ 2181.633744][ T7975] tomoyo_file_open+0xa9/0xd0 [ 2181.638428][ T7975] security_file_open+0x71/0x300 [ 2181.643486][ T7975] do_dentry_open+0x373/0x1250 [ 2181.643501][ T7975] ? kasan_check_read+0x11/0x20 [ 2181.643531][ T7975] ? chown_common+0x5c0/0x5c0 [ 2181.657796][ T7975] ? inode_permission+0xb4/0x560 [ 2181.662745][ T7975] vfs_open+0xa0/0xd0 [ 2181.662763][ T7975] path_openat+0x10e9/0x46d0 [ 2181.662778][ T7975] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2181.662811][ T7975] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2181.662833][ T7975] ? __alloc_fd+0x44d/0x560 [ 2181.662850][ T7975] do_filp_open+0x1a1/0x280 [ 2181.662874][ T7975] ? may_open_dev+0x100/0x100 [ 2181.687072][ T7975] ? kasan_check_read+0x11/0x20 [ 2181.687091][ T7975] ? do_raw_spin_unlock+0x57/0x270 [ 2181.687108][ T7975] ? _raw_spin_unlock+0x2d/0x50 [ 2181.687122][ T7975] ? __alloc_fd+0x44d/0x560 [ 2181.687150][ T7975] do_sys_open+0x3fe/0x5d0 [ 2181.711082][ T7975] ? filp_open+0x80/0x80 [ 2181.711103][ T7975] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2181.711124][ T7975] ? do_syscall_64+0x26/0x680 [ 2181.734465][ T7975] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2181.740543][ T7975] ? do_syscall_64+0x26/0x680 [ 2181.745248][ T7975] __x64_sys_open+0x7e/0xc0 [ 2181.749767][ T7975] do_syscall_64+0xfd/0x680 [ 2181.754283][ T7975] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2181.760179][ T7975] RIP: 0033:0x4136b1 [ 2181.764835][ T7975] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2181.784438][ T7975] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2181.792852][ T7975] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 06:55:38 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0xb4e0, 0x2) write$P9_ROPEN(r0, &(0x7f0000000280)={0x18, 0x71, 0x2, {{0x22, 0x2, 0x1}, 0x7ff}}, 0x18) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x2000) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000100)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x8001, {{0x2, 0x4e21, @multicast2}}}, 0x88) keyctl$read(0xb, r1, 0x0, 0x2c0) [ 2181.800827][ T7975] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 [ 2181.808803][ T7975] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2181.816777][ T7975] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2181.824750][ T7975] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:38 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0xa]}) 06:55:38 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2181.962130][ T7975] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2182.029150][ T8050] dccp_invalid_packet: P.Data Offset(0) too small [ 2182.067492][ T8099] dccp_invalid_packet: P.Data Offset(0) too small 06:55:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair(0xf, 0x0, 0x80000000000, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000140)=""/194, &(0x7f0000000240)=0xc2) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:39 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:39 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:39 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100)=0x20, &(0x7f0000000140)=0x2) 06:55:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x12]}) 06:55:39 executing program 0 (fault-call:0 fault-nth:17): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2182.702360][ T8116] dccp_invalid_packet: P.Data Offset(0) too small [ 2182.726586][ T8129] FAULT_INJECTION: forcing a failure. [ 2182.726586][ T8129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2182.739819][ T8129] CPU: 0 PID: 8129 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 06:55:39 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2182.747624][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2182.757685][ T8129] Call Trace: [ 2182.760995][ T8129] dump_stack+0x172/0x1f0 [ 2182.765435][ T8129] should_fail.cold+0xa/0x15 [ 2182.770047][ T8129] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2182.775864][ T8129] ? is_bpf_text_address+0xac/0x170 [ 2182.781067][ T8129] ? find_held_lock+0x35/0x130 [ 2182.785841][ T8129] should_fail_alloc_page+0x50/0x60 [ 2182.791043][ T8129] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2182.796419][ T8129] ? __lock_acquire+0x54f/0x5490 06:55:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3d]}) [ 2182.801365][ T8129] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2182.807099][ T8129] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2182.812941][ T8129] cache_grow_begin+0x9d/0x650 [ 2182.817717][ T8129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2182.823967][ T8129] __kmalloc+0x67c/0x740 [ 2182.828220][ T8129] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2182.833941][ T8129] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2182.839486][ T8129] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2182.845731][ T8129] tomoyo_check_open_permission+0x2a8/0x3f0 [ 2182.851643][ T8129] ? tomoyo_path_number_perm+0x520/0x520 [ 2182.857282][ T8129] ? ___might_sleep+0x163/0x280 [ 2182.862148][ T8129] ? inode_has_perm+0x230/0x230 [ 2182.867006][ T8129] tomoyo_file_open+0xa9/0xd0 [ 2182.871683][ T8129] security_file_open+0x71/0x300 [ 2182.876626][ T8129] do_dentry_open+0x373/0x1250 [ 2182.881401][ T8129] ? kasan_check_read+0x11/0x20 [ 2182.886260][ T8129] ? chown_common+0x5c0/0x5c0 [ 2182.890952][ T8129] ? inode_permission+0xb4/0x560 [ 2182.895906][ T8129] vfs_open+0xa0/0xd0 [ 2182.899896][ T8129] path_openat+0x10e9/0x46d0 [ 2182.904495][ T8129] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2182.910318][ T8129] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2182.915727][ T8129] ? __alloc_fd+0x44d/0x560 [ 2182.920247][ T8129] do_filp_open+0x1a1/0x280 [ 2182.924752][ T8129] ? may_open_dev+0x100/0x100 [ 2182.929436][ T8129] ? kasan_check_read+0x11/0x20 [ 2182.934286][ T8129] ? do_raw_spin_unlock+0x57/0x270 [ 2182.939396][ T8129] ? _raw_spin_unlock+0x2d/0x50 [ 2182.944243][ T8129] ? __alloc_fd+0x44d/0x560 [ 2182.948761][ T8129] do_sys_open+0x3fe/0x5d0 [ 2182.953184][ T8129] ? filp_open+0x80/0x80 [ 2182.957431][ T8129] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2182.962889][ T8129] ? do_syscall_64+0x26/0x680 [ 2182.967568][ T8129] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2182.973634][ T8129] ? do_syscall_64+0x26/0x680 [ 2182.978320][ T8129] __x64_sys_open+0x7e/0xc0 [ 2182.982828][ T8129] do_syscall_64+0xfd/0x680 [ 2182.987338][ T8129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2182.993251][ T8129] RIP: 0033:0x4136b1 [ 2182.997148][ T8129] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2183.016756][ T8129] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2183.025172][ T8129] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 [ 2183.033146][ T8129] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 [ 2183.041117][ T8129] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2183.049090][ T8129] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2183.057072][ T8129] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:40 executing program 1: r0 = request_key(&(0x7f0000003500)='asymmetric\x00', &(0x7f0000003540)={'syz', 0x3}, &(0x7f0000003580)='syz', 0xfffffffffffffff9) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000034c0)='\t', 0x28c, r0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003600)='/dev/autofs\x00', 0x8000, 0x0) keyctl$link(0x8, r0, r0) recvmsg$kcm(r2, &(0x7f0000003480)={&(0x7f0000000100)=@rc, 0x80, &(0x7f0000003340)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/130, 0x82}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003640)=""/216, 0xd8}], 0x5, &(0x7f00000033c0)=""/172, 0xac}, 0x40) keyctl$read(0xb, r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000003240)={0x4, 0x203, 0xa40b, 0xf7, r3}, &(0x7f0000003280)=0x10) 06:55:40 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2183.176320][ T8228] dccp_invalid_packet: P.Data Offset(0) too small 06:55:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2183.221683][ T8235] dccp_invalid_packet: P.Data Offset(0) too small 06:55:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x47]}) 06:55:40 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:40 executing program 0 (fault-call:0 fault-nth:18): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:40 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:40 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x4040) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x9, 0x2, 0xfff}) keyctl$read(0xb, r0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) [ 2183.451537][ T8350] dccp_invalid_packet: P.Data Offset(0) too small [ 2183.482019][ T8353] dccp_invalid_packet: P.Data Offset(0) too small 06:55:40 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x2f43]}) 06:55:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000140)={@null=' \x00', 0xd, 'bridge_slave_0\x00'}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:40 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pidfd_send_signal(r0, 0x5, &(0x7f00000000c0)={0x11, 0x7fff, 0x7}, 0x0) r1 = request_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0), 0xfffffffffffffffa) r2 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000300)="33033ee71dbbfa6f73341728470aaa898aca162e300c0a9386ebe35181e5d44389bb8668a07638b7dcc5459459fff145ff461ad7d32a08bf2c06397de4499d7555f9bf6702abaaae36109e3e3b57c8ad16", 0x1af, r1) creat(&(0x7f0000000140)='./file0\x00', 0x40) keyctl$read(0xb, r2, 0x0, 0x0) 06:55:40 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:40 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x200002dc]}) 06:55:40 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2183.866416][ T8453] FAULT_INJECTION: forcing a failure. [ 2183.866416][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.880255][ T8453] CPU: 1 PID: 8453 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2183.888082][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2183.898144][ T8453] Call Trace: [ 2183.901452][ T8453] dump_stack+0x172/0x1f0 [ 2183.905806][ T8453] should_fail.cold+0xa/0x15 [ 2183.910412][ T8453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2183.916243][ T8453] ? ___might_sleep+0x163/0x280 [ 2183.921115][ T8453] __should_failslab+0x121/0x190 [ 2183.926071][ T8453] should_failslab+0x9/0x14 [ 2183.930580][ T8453] __kmalloc+0x2d9/0x740 [ 2183.935097][ T8453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2183.941349][ T8453] ? d_absolute_path+0x11b/0x170 [ 2183.946292][ T8453] ? __d_path+0x140/0x140 [ 2183.950629][ T8453] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2183.956008][ T8453] tomoyo_encode2.part.0+0xf5/0x400 [ 2183.961214][ T8453] tomoyo_encode+0x2b/0x50 [ 2183.965634][ T8453] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2183.971276][ T8453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2183.977577][ T8453] tomoyo_check_open_permission+0x2a8/0x3f0 [ 2183.983483][ T8453] ? tomoyo_path_number_perm+0x520/0x520 [ 2183.989135][ T8453] ? ___might_sleep+0x163/0x280 [ 2183.994009][ T8453] ? inode_has_perm+0x230/0x230 [ 2183.998880][ T8453] tomoyo_file_open+0xa9/0xd0 [ 2184.003568][ T8453] security_file_open+0x71/0x300 [ 2184.008542][ T8453] do_dentry_open+0x373/0x1250 [ 2184.013310][ T8453] ? kasan_check_read+0x11/0x20 [ 2184.018172][ T8453] ? chown_common+0x5c0/0x5c0 [ 2184.022856][ T8453] ? inode_permission+0xb4/0x560 [ 2184.027806][ T8453] vfs_open+0xa0/0xd0 [ 2184.031799][ T8453] path_openat+0x10e9/0x46d0 [ 2184.036398][ T8453] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2184.042229][ T8453] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 2184.047624][ T8453] ? __alloc_fd+0x44d/0x560 [ 2184.052139][ T8453] do_filp_open+0x1a1/0x280 [ 2184.056645][ T8453] ? may_open_dev+0x100/0x100 [ 2184.061332][ T8453] ? kasan_check_read+0x11/0x20 06:55:40 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:40 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2184.066228][ T8453] ? do_raw_spin_unlock+0x57/0x270 [ 2184.071348][ T8453] ? _raw_spin_unlock+0x2d/0x50 [ 2184.076200][ T8453] ? __alloc_fd+0x44d/0x560 [ 2184.080720][ T8453] do_sys_open+0x3fe/0x5d0 [ 2184.085154][ T8453] ? filp_open+0x80/0x80 [ 2184.089408][ T8453] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2184.094957][ T8453] ? do_syscall_64+0x26/0x680 [ 2184.094974][ T8453] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2184.094988][ T8453] ? do_syscall_64+0x26/0x680 [ 2184.095010][ T8453] __x64_sys_open+0x7e/0xc0 [ 2184.114884][ T8453] do_syscall_64+0xfd/0x680 [ 2184.114904][ T8453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2184.114916][ T8453] RIP: 0033:0x4136b1 [ 2184.114936][ T8453] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2184.148839][ T8453] RSP: 002b:00007f0795b26a80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 2184.148854][ T8453] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 00000000004136b1 [ 2184.148862][ T8453] RDX: 00007f0795b26b0a RSI: 0000000000000002 RDI: 00007f0795b26b00 [ 2184.148869][ T8453] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2184.148877][ T8453] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 2184.148885][ T8453] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2184.153607][ T8453] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:41 executing program 0 (fault-call:0 fault-nth:19): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:41 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:41 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x7fffed27]}) 06:55:41 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0xfffffffffffff000, 0x2a3f0ad1e2cfdb0a) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"3df107a7b66914e9ee0d3604601f3305bc3cd5690bef4655b7539eb44a62ba634aa032c4c7a6ef4db5528edbb6e245996be9375332d6b869d95a5ba7f1c602fff1407b06f8c8b8256fb232314562afd23ed7d2de25bf5832d88c34ba625a5e74fd32d3a57cac40eb6e5344c13ba109227a04178b9042a07593ce611e79c56b77ebe511d8f259507903c537967b0d4bcb7ef10e5b5d9a97596c90bd2e51123cb1290a13ed0d9f396448446601350b3a782aa6035d88b4482248ea87b189369bc2cc958b8b7acdce181c72efc9c463ae670d3e4c4fcf91a27393d301acd947411b5b21cdcc62265560ec96abd96c83c86cd9e2a61fc3a123f129aece716ad27b8b419ed340e7c592d12e7cc027bff1e93875962edb24311f9497bddd735e5567e77d91b1a128674b0c090e4b2de67eb080765faa65f12c53ac3cf279d4ae10d4c912964cf32933c94a43e02911d70ac454f567f56fa8c984afa9b8bcbe564912bfcb6f9b47cf1f2e67197615d2a07a6f4ebd42b43b7d789b35906bfb2a9df8a372f04a4f4a8ece2abd318d3ed55291eeb281956f9ca2088781850e58bd825f5eccb052349817e40238d0a4489af396a695b11a50123427770d8e510492086f891ec1c71c5956471b4bcdf298bec12875d7199442a204d9e3012ca88f8f1d237421754c9503e742a81a68bbea15f39595b3f6f713e9f4e29697e8ecc9c3b25aafb3d21f2359218cb90c70adb0ad5e4d1a7d6efc34517c43d82ced24a3de88bf979f51cdacdc17602b5c6cdef1cb0b2f9565a711fe84d3a7b88bd134d94dc0b6d6f96db34f06c3ac6306ff848a8a69a7ac84016bca42f53143e2a194f0717cb6820246fc0fabd9bcb273bddfbc1cde8a4ecffba1d9a6371674e5bab72a60345bddb9eeef077be26dc651881e47b10ce2920e5b289e8221463803188c352f9c5591dff2fd9b67655b2ef733b73f9e2031329da383305a576f16dbc4045faaf4520aa3c885bfccbe7412e660d2133f3311910423d953ac9cf6bcaf1a2e1112842ca060bd2b6c34fb5552e6c6633f0b9d68eff21284a7f39d7f9c14ab26ea3b273047bebe09e520882e47dfdc4eedfecfecd2d95ad57cac0d6aaf02f7f75f3ae3fa0fe712fa88ae1f4b5bf59edded68413627a5de9e1c7b6eb9d3bf2f6e8acb124c4bf08674de60aa2908a5227c0d46d18822afdb14d213a7e79d8db5cef5f55ce533ee22d5abb1088703715e62bcb06365eff89975d833ddf8504a319a521a724571cc61ac43010e82227df305e410dee5db54199855f9a83619024402f3f5c2e1aca5a4a81bc7b6ea917be4419e0d3a61aa8647e86c4430e90bd7afef7696e733f1fd0d3fca007986d62f51dad6ff2563a0c7e67cc13d455aaaa2525cfcb038d684824e7223e17ac6b4ee3c580464a472df21f62cc70f3d83d6d7f51f21c16bfc35a0"}) keyctl$read(0xb, r2, 0x0, 0x0) exit(0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r3, 0x1, 0x0, 0x0) [ 2184.494073][ T8607] FAULT_INJECTION: forcing a failure. [ 2184.494073][ T8607] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.510263][ T8607] CPU: 1 PID: 8607 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2184.518080][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2184.528136][ T8607] Call Trace: [ 2184.528163][ T8607] dump_stack+0x172/0x1f0 [ 2184.528201][ T8607] should_fail.cold+0xa/0x15 [ 2184.528226][ T8607] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2184.528250][ T8607] ? ___might_sleep+0x163/0x280 [ 2184.546216][ T8607] __should_failslab+0x121/0x190 [ 2184.546236][ T8607] should_failslab+0x9/0x14 [ 2184.546248][ T8607] __kmalloc+0x2d9/0x740 [ 2184.546265][ T8607] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2184.546279][ T8607] ? d_absolute_path+0x11b/0x170 [ 2184.546292][ T8607] ? __d_path+0x140/0x140 [ 2184.546307][ T8607] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2184.546326][ T8607] tomoyo_encode2.part.0+0xf5/0x400 [ 2184.556102][ T8607] tomoyo_encode+0x2b/0x50 [ 2184.556118][ T8607] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2184.556141][ T8607] tomoyo_path_number_perm+0x1dd/0x520 [ 2184.556154][ T8607] ? tomoyo_path_number_perm+0x193/0x520 [ 2184.556173][ T8607] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2184.624783][ T8607] ? debug_check_no_obj_freed+0x200/0x464 [ 2184.630491][ T8607] ? ___might_sleep+0x163/0x280 [ 2184.635338][ T8607] ? selinux_file_mprotect+0x620/0x620 [ 2184.640784][ T8607] ? __fget+0x381/0x550 [ 2184.644949][ T8607] ? ksys_dup3+0x3e0/0x3e0 [ 2184.649370][ T8607] ? do_sys_open+0x31d/0x5d0 [ 2184.653954][ T8607] tomoyo_file_ioctl+0x23/0x30 [ 2184.658699][ T8607] security_file_ioctl+0x77/0xc0 [ 2184.663642][ T8607] ksys_ioctl+0x57/0xd0 [ 2184.667815][ T8607] __x64_sys_ioctl+0x73/0xb0 [ 2184.672411][ T8607] do_syscall_64+0xfd/0x680 [ 2184.676991][ T8607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2184.682862][ T8607] RIP: 0033:0x459637 [ 2184.686742][ T8607] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2184.706331][ T8607] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2184.714725][ T8607] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2184.722674][ T8607] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2184.730623][ T8607] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:55:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000005c0)) fstat(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000880)=0xe8) getresuid(&(0x7f00000008c0), &(0x7f0000000900)=0x0, &(0x7f0000000940)) syz_open_dev$mice(&(0x7f0000000d00)='/dev/input/mice\x00', 0x0, 0x8300) r13 = getgid() getgroups(0x3, &(0x7f0000000980)=[0x0, 0xee00, 0xee01]) fstat(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a40), &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, &(0x7f0000000c00)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {0x1, 0x6}, [{0x2, 0x1, r3}, {0x2, 0x6, r4}, {0x2, 0x7, r5}, {0x2, 0x6, r6}, {0x2, 0x4, r7}, {0x2, 0x4, r8}, {0x2, 0x5, r9}, {0x2, 0x3, r10}, {0x2, 0x7, r11}, {0x2, 0x6, r12}], {0x4, 0x4}, [{0x8, 0x1, r13}, {0x8, 0x0, r14}, {0x8, 0x4, r15}, {0x8, 0x2, r16}, {0x8, 0x1, r17}, {0x8, 0x6, r18}], {0x10, 0x4}, {0x20, 0x3}}, 0xa4, 0x0) r19 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r19, 0x1000000000016) 06:55:41 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2]}) 06:55:41 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2184.738575][ T8607] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2184.746532][ T8607] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2184.755618][ T8607] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:41 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2184.847175][ T8620] dccp_invalid_packet: P.Data Offset(0) too small 06:55:41 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:41 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x3]}) [ 2184.919433][ T8625] dccp_invalid_packet: P.Data Offset(0) too small 06:55:42 executing program 0 (fault-call:0 fault-nth:20): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:42 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:42 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:42 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2185.120988][ T8637] dccp_invalid_packet: P.Data Offset(0) too small [ 2185.137398][ T8638] FAULT_INJECTION: forcing a failure. [ 2185.137398][ T8638] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.161243][ T8640] dccp_invalid_packet: P.Data Offset(0) too small [ 2185.172276][ T8638] CPU: 0 PID: 8638 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2185.180091][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2185.190144][ T8638] Call Trace: [ 2185.190172][ T8638] dump_stack+0x172/0x1f0 [ 2185.190199][ T8638] should_fail.cold+0xa/0x15 [ 2185.190232][ T8638] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2185.190255][ T8638] ? ___might_sleep+0x163/0x280 [ 2185.190280][ T8638] __should_failslab+0x121/0x190 [ 2185.217997][ T8638] should_failslab+0x9/0x14 [ 2185.222511][ T8638] __kmalloc+0x2d9/0x740 [ 2185.226758][ T8638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2185.233004][ T8638] ? d_absolute_path+0x11b/0x170 [ 2185.237946][ T8638] ? __d_path+0x140/0x140 [ 2185.237963][ T8638] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2185.237981][ T8638] tomoyo_encode2.part.0+0xf5/0x400 [ 2185.237999][ T8638] tomoyo_encode+0x2b/0x50 [ 2185.257273][ T8638] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2185.262922][ T8638] tomoyo_path_number_perm+0x1dd/0x520 [ 2185.262936][ T8638] ? tomoyo_path_number_perm+0x193/0x520 [ 2185.262954][ T8638] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2185.262971][ T8638] ? debug_check_no_obj_freed+0x200/0x464 [ 2185.262997][ T8638] ? ___might_sleep+0x163/0x280 [ 2185.263030][ T8638] ? selinux_file_mprotect+0x620/0x620 [ 2185.295955][ T8638] ? __fget+0x381/0x550 [ 2185.300126][ T8638] ? ksys_dup3+0x3e0/0x3e0 [ 2185.304553][ T8638] ? do_sys_open+0x31d/0x5d0 [ 2185.309155][ T8638] tomoyo_file_ioctl+0x23/0x30 [ 2185.313922][ T8638] security_file_ioctl+0x77/0xc0 [ 2185.318863][ T8638] ksys_ioctl+0x57/0xd0 [ 2185.323031][ T8638] __x64_sys_ioctl+0x73/0xb0 [ 2185.327653][ T8638] do_syscall_64+0xfd/0x680 [ 2185.332176][ T8638] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2185.338074][ T8638] RIP: 0033:0x459637 [ 2185.341969][ T8638] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2185.361576][ T8638] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.370035][ T8638] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2185.378007][ T8638] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2185.385980][ T8638] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2185.393956][ T8638] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2185.401932][ T8638] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2185.438600][ T8638] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4]}) 06:55:42 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:42 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:42 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20300, 0x18) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0xfffffffffffff800, 0x0, 0xffffffffffffff35, 0xfbe, 0x5, 0xff, 0xffff, 0x1ff, 0x9, 0x8}) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='setgroups\x00') ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000140)={0x0, 0x5000, 0x4b2, 0x20006, 0x1c}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@local}, &(0x7f0000000200)=0x14) write$eventfd(r1, &(0x7f00000001c0)=0x9, 0x8) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x4) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() ioctl$TCSETS(r1, 0x5402, &(0x7f0000000180)={0x5, 0x7, 0x100, 0x7, 0x17, 0x9, 0x850000000000000, 0x8ac, 0x5, 0x2, 0x1, 0x100000000}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:42 executing program 0 (fault-call:0 fault-nth:21): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:42 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:42 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8060000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2185.665233][ T8757] dccp_invalid_packet: P.Data Offset(0) too small [ 2185.690939][ T8763] FAULT_INJECTION: forcing a failure. [ 2185.690939][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.696468][ T8765] dccp_invalid_packet: P.Data Offset(0) too small 06:55:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x5]}) [ 2185.738629][ T8763] CPU: 0 PID: 8763 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2185.746477][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2185.756535][ T8763] Call Trace: [ 2185.759815][ T8763] dump_stack+0x172/0x1f0 [ 2185.764944][ T8763] should_fail.cold+0xa/0x15 [ 2185.769537][ T8763] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2185.775346][ T8763] ? ___might_sleep+0x163/0x280 [ 2185.780221][ T8763] __should_failslab+0x121/0x190 [ 2185.785173][ T8763] should_failslab+0x9/0x14 [ 2185.789690][ T8763] kmem_cache_alloc+0x2af/0x6f0 [ 2185.794551][ T8763] ? lock_downgrade+0x880/0x880 [ 2185.799404][ T8763] __kernfs_new_node+0xf0/0x6c0 [ 2185.804243][ T8763] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2185.809746][ T8763] ? wait_for_completion+0x440/0x440 [ 2185.815021][ T8763] ? mutex_unlock+0xd/0x10 [ 2185.819425][ T8763] ? kernfs_activate+0x192/0x1f0 [ 2185.824349][ T8763] kernfs_new_node+0x96/0x120 [ 2185.829022][ T8763] __kernfs_create_file+0x51/0x340 [ 2185.834169][ T8763] sysfs_add_file_mode_ns+0x222/0x560 [ 2185.839530][ T8763] internal_create_group+0x359/0xc40 [ 2185.844824][ T8763] ? remove_files.isra.0+0x190/0x190 [ 2185.850103][ T8763] ? bd_set_size+0x3f/0xb0 [ 2185.854506][ T8763] ? kasan_check_write+0x14/0x20 [ 2185.859447][ T8763] ? up_write+0xbe/0x1e0 [ 2185.863705][ T8763] sysfs_create_group+0x20/0x30 [ 2185.868558][ T8763] loop_set_fd+0xb11/0x10b0 [ 2185.873079][ T8763] lo_ioctl+0x1a3/0x1460 [ 2185.877321][ T8763] ? lock_downgrade+0x880/0x880 [ 2185.882158][ T8763] ? loop_set_fd+0x10b0/0x10b0 [ 2185.886909][ T8763] blkdev_ioctl+0xece/0x1c10 [ 2185.891498][ T8763] ? blkpg_ioctl+0xa90/0xa90 [ 2185.896081][ T8763] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2185.901873][ T8763] ? ___might_sleep+0x163/0x280 [ 2185.906707][ T8763] block_ioctl+0xee/0x130 [ 2185.911038][ T8763] ? blkdev_fallocate+0x410/0x410 [ 2185.916044][ T8763] do_vfs_ioctl+0xd5f/0x1380 [ 2185.920619][ T8763] ? ioctl_preallocate+0x210/0x210 [ 2185.925751][ T8763] ? selinux_file_mprotect+0x620/0x620 [ 2185.931203][ T8763] ? __fget+0x381/0x550 [ 2185.935349][ T8763] ? ksys_dup3+0x3e0/0x3e0 [ 2185.939751][ T8763] ? do_sys_open+0x31d/0x5d0 [ 2185.944327][ T8763] ? tomoyo_file_ioctl+0x23/0x30 [ 2185.949271][ T8763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2185.955517][ T8763] ? security_file_ioctl+0x8d/0xc0 [ 2185.960614][ T8763] ksys_ioctl+0xab/0xd0 [ 2185.964769][ T8763] __x64_sys_ioctl+0x73/0xb0 [ 2185.969473][ T8763] do_syscall_64+0xfd/0x680 [ 2185.973964][ T8763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2185.979837][ T8763] RIP: 0033:0x459637 [ 2185.983717][ T8763] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2186.003326][ T8763] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.011722][ T8763] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2186.019680][ T8763] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2186.027633][ T8763] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:55:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x40282, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000140)={0x80, 0x7, 0x6, 0x10001, 0x5, 0xffffffff}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) [ 2186.035604][ T8763] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2186.043558][ T8763] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:43 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x600000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000100)={0x1, {0x77359400}, 0x8001, 0xb9de}) 06:55:43 executing program 0 (fault-call:0 fault-nth:22): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:43 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6]}) 06:55:43 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:43 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x161400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000180)={0x7, 0x5, 0x1000, 0x6, 'syz1\x00', 0x6}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x442001) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:43 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xb) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x400}, 0x8) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) mknodat(r1, &(0x7f0000000100)='./file0\x00', 0x8000, 0x4) [ 2186.492963][ T9012] FAULT_INJECTION: forcing a failure. [ 2186.492963][ T9012] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.541840][ T9012] CPU: 1 PID: 9012 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2186.549683][ T9012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2186.559748][ T9012] Call Trace: [ 2186.563051][ T9012] dump_stack+0x172/0x1f0 [ 2186.567398][ T9012] should_fail.cold+0xa/0x15 [ 2186.572001][ T9012] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2186.577926][ T9012] ? ___might_sleep+0x163/0x280 [ 2186.582787][ T9012] __should_failslab+0x121/0x190 06:55:43 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7]}) 06:55:43 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2186.587825][ T9012] should_failslab+0x9/0x14 [ 2186.597548][ T9012] kmem_cache_alloc+0x2af/0x6f0 [ 2186.602401][ T9012] ? find_held_lock+0x35/0x130 [ 2186.607176][ T9012] ? __schedule+0x106e/0x1560 [ 2186.611853][ T9012] __kernfs_new_node+0xf0/0x6c0 [ 2186.616687][ T9012] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2186.622131][ T9012] ? __lock_acquire+0x54f/0x5490 [ 2186.627057][ T9012] ? _raw_spin_unlock_irq+0x5e/0x90 [ 2186.632244][ T9012] ? __schedule+0x106e/0x1560 [ 2186.637008][ T9012] kernfs_new_node+0x96/0x120 [ 2186.641685][ T9012] kernfs_create_dir_ns+0x52/0x160 [ 2186.646800][ T9012] internal_create_group+0x7f4/0xc40 [ 2186.652090][ T9012] ? remove_files.isra.0+0x190/0x190 [ 2186.657392][ T9012] ? bd_set_size+0x3f/0xb0 [ 2186.661815][ T9012] ? kasan_check_write+0x14/0x20 [ 2186.666747][ T9012] ? up_write+0xbe/0x1e0 [ 2186.670998][ T9012] sysfs_create_group+0x20/0x30 [ 2186.675841][ T9012] loop_set_fd+0xb11/0x10b0 [ 2186.680335][ T9012] lo_ioctl+0x1a3/0x1460 [ 2186.684564][ T9012] ? lock_downgrade+0x880/0x880 06:55:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), 0x4) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x400) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000140)=r4) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x2c) [ 2186.689402][ T9012] ? loop_set_fd+0x10b0/0x10b0 [ 2186.694167][ T9012] blkdev_ioctl+0xece/0x1c10 [ 2186.698744][ T9012] ? blkpg_ioctl+0xa90/0xa90 [ 2186.703316][ T9012] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2186.709214][ T9012] ? ___might_sleep+0x163/0x280 [ 2186.714091][ T9012] block_ioctl+0xee/0x130 [ 2186.718404][ T9012] ? blkdev_fallocate+0x410/0x410 [ 2186.723413][ T9012] do_vfs_ioctl+0xd5f/0x1380 [ 2186.728005][ T9012] ? ioctl_preallocate+0x210/0x210 [ 2186.733131][ T9012] ? selinux_file_mprotect+0x620/0x620 [ 2186.738984][ T9012] ? __fget+0x381/0x550 [ 2186.743152][ T9012] ? ksys_dup3+0x3e0/0x3e0 [ 2186.747580][ T9012] ? do_sys_open+0x31d/0x5d0 [ 2186.752190][ T9012] ? tomoyo_file_ioctl+0x23/0x30 [ 2186.757128][ T9012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2186.763347][ T9012] ? security_file_ioctl+0x8d/0xc0 [ 2186.768455][ T9012] ksys_ioctl+0xab/0xd0 [ 2186.772594][ T9012] __x64_sys_ioctl+0x73/0xb0 [ 2186.777165][ T9012] do_syscall_64+0xfd/0x680 [ 2186.781672][ T9012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2186.787557][ T9012] RIP: 0033:0x459637 [ 2186.791440][ T9012] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2186.811029][ T9012] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.819446][ T9012] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2186.827401][ T9012] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2186.835357][ T9012] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:55:43 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2186.843319][ T9012] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2186.851284][ T9012] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:44 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:44 executing program 0 (fault-call:0 fault-nth:23): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8]}) 06:55:44 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:44 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x3, 0x3, 0x0, 0x0, @sint={0x0, 0x7}}]}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@caif=@util, &(0x7f0000000000)=0x80, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000180)=0x20, 0x4) 06:55:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@remote, @in=@local}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) tkill(r3, 0x1000000000016) 06:55:44 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2187.327008][ T9163] FAULT_INJECTION: forcing a failure. [ 2187.327008][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.360575][ T9163] CPU: 1 PID: 9163 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 06:55:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x9]}) [ 2187.368562][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2187.378619][ T9163] Call Trace: [ 2187.381931][ T9163] dump_stack+0x172/0x1f0 [ 2187.386288][ T9163] should_fail.cold+0xa/0x15 [ 2187.390903][ T9163] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2187.396734][ T9163] ? ___might_sleep+0x163/0x280 [ 2187.401597][ T9163] __should_failslab+0x121/0x190 [ 2187.406546][ T9163] should_failslab+0x9/0x14 [ 2187.411067][ T9163] kmem_cache_alloc+0x2af/0x6f0 [ 2187.415916][ T9163] ? find_held_lock+0x35/0x130 [ 2187.420664][ T9163] ? kernfs_activate+0x192/0x1f0 [ 2187.425588][ T9163] __kernfs_new_node+0xf0/0x6c0 [ 2187.430426][ T9163] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2187.435877][ T9163] ? lock_downgrade+0x880/0x880 [ 2187.440729][ T9163] ? kasan_check_write+0x14/0x20 [ 2187.445652][ T9163] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 2187.451197][ T9163] ? wait_for_completion+0x440/0x440 [ 2187.456489][ T9163] kernfs_new_node+0x96/0x120 [ 2187.461167][ T9163] __kernfs_create_file+0x51/0x340 [ 2187.466280][ T9163] sysfs_add_file_mode_ns+0x222/0x560 [ 2187.471666][ T9163] internal_create_group+0x359/0xc40 [ 2187.476962][ T9163] ? remove_files.isra.0+0x190/0x190 [ 2187.482230][ T9163] ? bd_set_size+0x3f/0xb0 [ 2187.486631][ T9163] ? kasan_check_write+0x14/0x20 [ 2187.491550][ T9163] ? up_write+0xbe/0x1e0 [ 2187.495775][ T9163] sysfs_create_group+0x20/0x30 [ 2187.500632][ T9163] loop_set_fd+0xb11/0x10b0 [ 2187.505123][ T9163] lo_ioctl+0x1a3/0x1460 [ 2187.509349][ T9163] ? lock_downgrade+0x880/0x880 [ 2187.514181][ T9163] ? loop_set_fd+0x10b0/0x10b0 [ 2187.518930][ T9163] blkdev_ioctl+0xece/0x1c10 [ 2187.523511][ T9163] ? blkpg_ioctl+0xa90/0xa90 [ 2187.528087][ T9163] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2187.533901][ T9163] ? ___might_sleep+0x163/0x280 [ 2187.538753][ T9163] block_ioctl+0xee/0x130 [ 2187.543065][ T9163] ? blkdev_fallocate+0x410/0x410 [ 2187.548070][ T9163] do_vfs_ioctl+0xd5f/0x1380 [ 2187.552643][ T9163] ? ioctl_preallocate+0x210/0x210 [ 2187.557738][ T9163] ? selinux_file_mprotect+0x620/0x620 [ 2187.563185][ T9163] ? __fget+0x381/0x550 [ 2187.567335][ T9163] ? ksys_dup3+0x3e0/0x3e0 [ 2187.571738][ T9163] ? do_sys_open+0x31d/0x5d0 [ 2187.576311][ T9163] ? tomoyo_file_ioctl+0x23/0x30 [ 2187.581244][ T9163] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2187.587482][ T9163] ? security_file_ioctl+0x8d/0xc0 [ 2187.592583][ T9163] ksys_ioctl+0xab/0xd0 [ 2187.596745][ T9163] __x64_sys_ioctl+0x73/0xb0 [ 2187.601335][ T9163] do_syscall_64+0xfd/0x680 [ 2187.605826][ T9163] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2187.611716][ T9163] RIP: 0033:0x459637 [ 2187.615609][ T9163] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2187.635922][ T9163] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2187.644347][ T9163] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2187.652360][ T9163] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2187.660355][ T9163] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2187.668315][ T9163] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 06:55:44 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2187.676275][ T9163] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:44 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xa]}) 06:55:44 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x43050000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:44 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:44 executing program 0 (fault-call:0 fault-nth:24): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:44 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.upper\x00', &(0x7f0000000240)=""/142, 0x8e) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)=0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2188.090355][ T9310] FAULT_INJECTION: forcing a failure. [ 2188.090355][ T9310] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.103624][ T9310] CPU: 0 PID: 9310 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2188.111443][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2188.121511][ T9310] Call Trace: [ 2188.124820][ T9310] dump_stack+0x172/0x1f0 [ 2188.129173][ T9310] should_fail.cold+0xa/0x15 [ 2188.133782][ T9310] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2188.139600][ T9310] ? stack_trace_save+0xac/0xe0 [ 2188.144463][ T9310] ? stack_trace_consume_entry+0x190/0x190 [ 2188.150297][ T9310] __should_failslab+0x121/0x190 [ 2188.155252][ T9310] should_failslab+0x9/0x14 [ 2188.159768][ T9310] kmem_cache_alloc+0x47/0x6f0 [ 2188.164638][ T9310] ? save_stack+0x5c/0x90 [ 2188.168973][ T9310] ? save_stack+0x23/0x90 [ 2188.173402][ T9310] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2188.179241][ T9310] ? kasan_slab_alloc+0xf/0x20 [ 2188.184018][ T9310] ? kmem_cache_alloc+0x11a/0x6f0 06:55:45 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xb]}) 06:55:45 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2188.189065][ T9310] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 2188.195416][ T9310] idr_get_free+0x474/0x890 [ 2188.199946][ T9310] idr_alloc_u32+0x19e/0x330 [ 2188.204564][ T9310] ? __fprop_inc_percpu_max+0x230/0x230 [ 2188.210145][ T9310] idr_alloc_cyclic+0x132/0x270 [ 2188.215023][ T9310] ? idr_alloc+0x150/0x150 [ 2188.219463][ T9310] __kernfs_new_node+0x172/0x6c0 [ 2188.224422][ T9310] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2188.229906][ T9310] ? __lock_acquire+0x54f/0x5490 [ 2188.234886][ T9310] ? _raw_spin_unlock_irq+0x5e/0x90 06:55:45 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x10000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3ff, 0x7, 0x1, 0x80000001}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @broadcast, @broadcast}, &(0x7f0000000540)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="06072abd5800fbdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="8000020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000200000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5], 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) [ 2188.240093][ T9310] ? __schedule+0x106e/0x1560 [ 2188.244797][ T9310] kernfs_new_node+0x96/0x120 [ 2188.249487][ T9310] kernfs_create_dir_ns+0x52/0x160 [ 2188.254616][ T9310] internal_create_group+0x7f4/0xc40 [ 2188.259921][ T9310] ? remove_files.isra.0+0x190/0x190 [ 2188.265227][ T9310] ? bd_set_size+0x3f/0xb0 [ 2188.269659][ T9310] ? kasan_check_write+0x14/0x20 [ 2188.274620][ T9310] ? up_write+0xbe/0x1e0 [ 2188.278880][ T9310] sysfs_create_group+0x20/0x30 [ 2188.283734][ T9310] loop_set_fd+0xb11/0x10b0 [ 2188.288250][ T9310] lo_ioctl+0x1a3/0x1460 [ 2188.292500][ T9310] ? lock_downgrade+0x880/0x880 [ 2188.297364][ T9310] ? loop_set_fd+0x10b0/0x10b0 [ 2188.302129][ T9310] blkdev_ioctl+0xece/0x1c10 [ 2188.306717][ T9310] ? blkpg_ioctl+0xa90/0xa90 [ 2188.311293][ T9310] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2188.317089][ T9310] ? ___might_sleep+0x163/0x280 [ 2188.321942][ T9310] block_ioctl+0xee/0x130 [ 2188.326265][ T9310] ? blkdev_fallocate+0x410/0x410 [ 2188.331642][ T9310] do_vfs_ioctl+0xd5f/0x1380 [ 2188.336749][ T9310] ? ioctl_preallocate+0x210/0x210 [ 2188.341879][ T9310] ? selinux_file_mprotect+0x620/0x620 [ 2188.347356][ T9310] ? __fget+0x381/0x550 [ 2188.351542][ T9310] ? ksys_dup3+0x3e0/0x3e0 [ 2188.355954][ T9310] ? do_sys_open+0x31d/0x5d0 [ 2188.360528][ T9310] ? tomoyo_file_ioctl+0x23/0x30 [ 2188.365473][ T9310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2188.371704][ T9310] ? security_file_ioctl+0x8d/0xc0 [ 2188.376825][ T9310] ksys_ioctl+0xab/0xd0 [ 2188.380974][ T9310] __x64_sys_ioctl+0x73/0xb0 [ 2188.385567][ T9310] do_syscall_64+0xfd/0x680 [ 2188.390057][ T9310] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2188.395937][ T9310] RIP: 0033:0x459637 [ 2188.399844][ T9310] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2188.419463][ T9310] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2188.427888][ T9310] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2188.436232][ T9310] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2188.444218][ T9310] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2188.452195][ T9310] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2188.460166][ T9310] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:45 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x80350000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:45 executing program 0 (fault-call:0 fault-nth:25): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2188.629793][ T9454] net_ratelimit: 12 callbacks suppressed [ 2188.629802][ T9454] dccp_invalid_packet: P.Data Offset(0) too small 06:55:45 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2188.701904][ T9564] dccp_invalid_packet: P.Data Offset(0) too small 06:55:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00000001c0)={0x1, 0x2, 0x3, 0x9, [], [], [], 0xffffffff, 0xffc0000000000000, 0x8, 0x1, "d6e53465459ca01e380ea20c4c78b61a"}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000900)={0x1f, 0x4, 0x75a, 0x6369}, 0x8) time(&(0x7f0000000180)) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ftruncate(r2, 0x7ff) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0xffffffff, 0x6, 0x9, 0x3}}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:45 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='user\x00', 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r1) 06:55:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xc]}) 06:55:45 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:45 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2188.858100][ T9584] FAULT_INJECTION: forcing a failure. [ 2188.858100][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.876489][ T9584] CPU: 0 PID: 9584 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2188.884367][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2188.894437][ T9584] Call Trace: [ 2188.897747][ T9584] dump_stack+0x172/0x1f0 [ 2188.902128][ T9584] should_fail.cold+0xa/0x15 [ 2188.906744][ T9584] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2188.912570][ T9584] ? ___might_sleep+0x163/0x280 [ 2188.917455][ T9584] __should_failslab+0x121/0x190 [ 2188.922414][ T9584] should_failslab+0x9/0x14 [ 2188.922933][ T9588] dccp_invalid_packet: P.Data Offset(0) too small [ 2188.926931][ T9584] kmem_cache_alloc+0x2af/0x6f0 [ 2188.926949][ T9584] ? lock_downgrade+0x880/0x880 [ 2188.926970][ T9584] __kernfs_new_node+0xf0/0x6c0 [ 2188.936598][ T9589] dccp_invalid_packet: P.Data Offset(0) too small 06:55:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xd]}) [ 2188.938237][ T9584] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2188.938264][ T9584] ? wait_for_completion+0x440/0x440 [ 2188.965144][ T9584] ? zc_input_mapping+0x940/0x11a0 [ 2188.970282][ T9584] ? mutex_unlock+0xd/0x10 [ 2188.974698][ T9584] ? kernfs_activate+0x192/0x1f0 [ 2188.979619][ T9584] kernfs_new_node+0x96/0x120 [ 2188.984279][ T9584] __kernfs_create_file+0x51/0x340 [ 2188.989378][ T9584] sysfs_add_file_mode_ns+0x222/0x560 [ 2188.994737][ T9584] internal_create_group+0x359/0xc40 [ 2189.000025][ T9584] ? remove_files.isra.0+0x190/0x190 [ 2189.005295][ T9584] ? bd_set_size+0x3f/0xb0 [ 2189.009695][ T9584] ? kasan_check_write+0x14/0x20 [ 2189.014615][ T9584] ? up_write+0xbe/0x1e0 [ 2189.018870][ T9584] sysfs_create_group+0x20/0x30 [ 2189.023800][ T9584] loop_set_fd+0xb11/0x10b0 [ 2189.028289][ T9584] lo_ioctl+0x1a3/0x1460 [ 2189.032517][ T9584] ? lock_downgrade+0x880/0x880 [ 2189.037348][ T9584] ? loop_set_fd+0x10b0/0x10b0 [ 2189.042098][ T9584] blkdev_ioctl+0xece/0x1c10 [ 2189.046692][ T9584] ? blkpg_ioctl+0xa90/0xa90 [ 2189.051276][ T9584] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2189.057074][ T9584] ? ___might_sleep+0x163/0x280 [ 2189.061911][ T9584] block_ioctl+0xee/0x130 [ 2189.066226][ T9584] ? blkdev_fallocate+0x410/0x410 [ 2189.071243][ T9584] do_vfs_ioctl+0xd5f/0x1380 [ 2189.075814][ T9584] ? ioctl_preallocate+0x210/0x210 [ 2189.080948][ T9584] ? selinux_file_mprotect+0x620/0x620 [ 2189.086384][ T9584] ? __fget+0x381/0x550 [ 2189.090518][ T9584] ? ksys_dup3+0x3e0/0x3e0 [ 2189.094916][ T9584] ? do_sys_open+0x31d/0x5d0 [ 2189.099492][ T9584] ? tomoyo_file_ioctl+0x23/0x30 [ 2189.104418][ T9584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2189.110636][ T9584] ? security_file_ioctl+0x8d/0xc0 [ 2189.115729][ T9584] ksys_ioctl+0xab/0xd0 [ 2189.119889][ T9584] __x64_sys_ioctl+0x73/0xb0 [ 2189.124467][ T9584] do_syscall_64+0xfd/0x680 [ 2189.128971][ T9584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2189.134846][ T9584] RIP: 0033:0x459637 [ 2189.138724][ T9584] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2189.158311][ T9584] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2189.166721][ T9584] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2189.174705][ T9584] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2189.182667][ T9584] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2189.190622][ T9584] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2189.198577][ T9584] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:46 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:46 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:46 executing program 0 (fault-call:0 fault-nth:26): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2189.466004][ T9690] dccp_invalid_packet: P.Data Offset(0) too small 06:55:46 executing program 1: epoll_wait(0xffffffffffffff9c, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x369) [ 2189.533120][ T9712] dccp_invalid_packet: P.Data Offset(0) too small 06:55:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) mkdirat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x1ff) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:46 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x13]}) [ 2189.730434][ T9733] FAULT_INJECTION: forcing a failure. [ 2189.730434][ T9733] name failslab, interval 1, probability 0, space 0, times 0 [ 2189.743562][ T9733] CPU: 0 PID: 9733 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2189.751406][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2189.761469][ T9733] Call Trace: [ 2189.765499][ T9733] dump_stack+0x172/0x1f0 [ 2189.769850][ T9733] should_fail.cold+0xa/0x15 [ 2189.774465][ T9733] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2189.780294][ T9733] ? ___might_sleep+0x163/0x280 [ 2189.785158][ T9733] __should_failslab+0x121/0x190 [ 2189.790113][ T9733] should_failslab+0x9/0x14 [ 2189.794626][ T9733] kmem_cache_alloc+0x2af/0x6f0 [ 2189.798891][ T9793] dccp_invalid_packet: P.Data Offset(0) too small [ 2189.799501][ T9733] ? lock_downgrade+0x880/0x880 [ 2189.799534][ T9733] __kernfs_new_node+0xf0/0x6c0 [ 2189.799570][ T9733] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2189.821098][ T9733] ? wait_for_completion+0x440/0x440 [ 2189.826409][ T9733] ? mutex_unlock+0xd/0x10 [ 2189.829292][ T9828] dccp_invalid_packet: P.Data Offset(0) too small [ 2189.830856][ T9733] ? kernfs_activate+0x192/0x1f0 [ 2189.830877][ T9733] kernfs_new_node+0x96/0x120 [ 2189.830897][ T9733] __kernfs_create_file+0x51/0x340 [ 2189.830918][ T9733] sysfs_add_file_mode_ns+0x222/0x560 [ 2189.857409][ T9733] internal_create_group+0x359/0xc40 [ 2189.862717][ T9733] ? remove_files.isra.0+0x190/0x190 [ 2189.868011][ T9733] ? bd_set_size+0x3f/0xb0 [ 2189.872441][ T9733] ? kasan_check_write+0x14/0x20 [ 2189.877387][ T9733] ? up_write+0xbe/0x1e0 [ 2189.881654][ T9733] sysfs_create_group+0x20/0x30 [ 2189.886515][ T9733] loop_set_fd+0xb11/0x10b0 [ 2189.891043][ T9733] lo_ioctl+0x1a3/0x1460 [ 2189.895293][ T9733] ? lock_downgrade+0x880/0x880 [ 2189.900151][ T9733] ? loop_set_fd+0x10b0/0x10b0 [ 2189.904931][ T9733] blkdev_ioctl+0xece/0x1c10 [ 2189.909535][ T9733] ? blkpg_ioctl+0xa90/0xa90 [ 2189.914137][ T9733] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2189.919969][ T9733] ? ___might_sleep+0x163/0x280 [ 2189.924834][ T9733] block_ioctl+0xee/0x130 06:55:46 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x14]}) 06:55:46 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88470000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:46 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2189.929168][ T9733] ? blkdev_fallocate+0x410/0x410 [ 2189.934199][ T9733] do_vfs_ioctl+0xd5f/0x1380 [ 2189.938808][ T9733] ? ioctl_preallocate+0x210/0x210 [ 2189.943930][ T9733] ? selinux_file_mprotect+0x620/0x620 [ 2189.949393][ T9733] ? __fget+0x381/0x550 [ 2189.953563][ T9733] ? ksys_dup3+0x3e0/0x3e0 [ 2189.957986][ T9733] ? do_sys_open+0x31d/0x5d0 [ 2189.962575][ T9733] ? tomoyo_file_ioctl+0x23/0x30 [ 2189.967507][ T9733] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2189.973733][ T9733] ? security_file_ioctl+0x8d/0xc0 [ 2189.978835][ T9733] ksys_ioctl+0xab/0xd0 [ 2189.982991][ T9733] __x64_sys_ioctl+0x73/0xb0 [ 2189.987581][ T9733] do_syscall_64+0xfd/0x680 [ 2189.992091][ T9733] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2189.998007][ T9733] RIP: 0033:0x459637 [ 2190.001918][ T9733] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2190.021534][ T9733] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 06:55:47 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) mq_notify(r1, &(0x7f00000001c0)={0x0, 0x1, 0x2, @thr={&(0x7f0000000100)="67950549905274", &(0x7f0000000140)="5c4703e2802be16bbed207ad8722d06d2b9896d6fd515c4b1987b050247bffff43414e48623298c24113f04e9243a2823e6553b3872c5bb737fe12d87403eb021ed7a841755dceda07959d347f58c5e673ee32c6e94f7ce3765f1df5090570af"}}) keyctl$read(0xb, r0, 0x0, 0x0) [ 2190.029970][ T9733] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2190.037935][ T9733] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2190.045918][ T9733] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2190.053889][ T9733] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2190.061949][ T9733] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:47 executing program 0 (fault-call:0 fault-nth:27): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2190.222781][ T9844] dccp_invalid_packet: P.Data Offset(0) too small 06:55:47 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88480000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:47 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2190.274897][ T9859] dccp_invalid_packet: P.Data Offset(0) too small 06:55:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x21]}) [ 2190.398967][ T9955] FAULT_INJECTION: forcing a failure. [ 2190.398967][ T9955] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.421794][ T9955] CPU: 0 PID: 9955 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2190.429659][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2190.439714][ T9955] Call Trace: [ 2190.443016][ T9955] dump_stack+0x172/0x1f0 06:55:47 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2190.447367][ T9955] should_fail.cold+0xa/0x15 [ 2190.451975][ T9955] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2190.457799][ T9955] ? ___might_sleep+0x163/0x280 [ 2190.462665][ T9955] __should_failslab+0x121/0x190 [ 2190.467610][ T9955] should_failslab+0x9/0x14 [ 2190.472118][ T9955] __kmalloc+0x2d9/0x740 [ 2190.476372][ T9955] ? kobject_uevent_env+0x387/0x101d [ 2190.481670][ T9955] ? rcu_read_lock_sched_held+0x110/0x130 [ 2190.487403][ T9955] ? kobject_get_path+0xc4/0x1b0 [ 2190.492348][ T9955] kobject_get_path+0xc4/0x1b0 [ 2190.497114][ T9955] kobject_uevent_env+0x3ab/0x101d [ 2190.502227][ T9955] ? kasan_check_write+0x14/0x20 [ 2190.507157][ T9955] ? up_write+0xbe/0x1e0 [ 2190.511379][ T9955] kobject_uevent+0x20/0x26 [ 2190.515865][ T9955] loop_set_fd+0xba2/0x10b0 [ 2190.520352][ T9955] lo_ioctl+0x1a3/0x1460 [ 2190.524576][ T9955] ? lock_downgrade+0x880/0x880 [ 2190.529411][ T9955] ? loop_set_fd+0x10b0/0x10b0 [ 2190.534172][ T9955] blkdev_ioctl+0xece/0x1c10 [ 2190.538883][ T9955] ? blkpg_ioctl+0xa90/0xa90 [ 2190.543484][ T9955] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2190.549287][ T9955] ? ___might_sleep+0x163/0x280 [ 2190.554137][ T9955] block_ioctl+0xee/0x130 [ 2190.558456][ T9955] ? blkdev_fallocate+0x410/0x410 [ 2190.563477][ T9955] do_vfs_ioctl+0xd5f/0x1380 [ 2190.568162][ T9955] ? ioctl_preallocate+0x210/0x210 [ 2190.573285][ T9955] ? selinux_file_mprotect+0x620/0x620 [ 2190.578740][ T9955] ? __fget+0x381/0x550 [ 2190.591476][ T9955] ? ksys_dup3+0x3e0/0x3e0 06:55:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = fcntl$getown(r2, 0x9) move_pages(r3, 0x6, &(0x7f0000000080)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x5000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x6) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r5 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$PIO_FONTRESET(r5, 0x4b6d, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) tkill(r4, 0x1000000000016) 06:55:47 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88640000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2190.595892][ T9955] ? do_sys_open+0x31d/0x5d0 [ 2190.600465][ T9955] ? tomoyo_file_ioctl+0x23/0x30 [ 2190.605387][ T9955] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2190.611614][ T9955] ? security_file_ioctl+0x8d/0xc0 [ 2190.616733][ T9955] ksys_ioctl+0xab/0xd0 [ 2190.620887][ T9955] __x64_sys_ioctl+0x73/0xb0 [ 2190.625459][ T9955] do_syscall_64+0xfd/0x680 [ 2190.629963][ T9955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2190.635851][ T9955] RIP: 0033:0x459637 [ 2190.639747][ T9955] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2190.659358][ T9955] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2190.667774][ T9955] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2190.675736][ T9955] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2190.683718][ T9955] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2190.691685][ T9955] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 06:55:47 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x24000, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000001c0)=""/69) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{}]}) keyctl$read(0xb, r0, 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) [ 2190.699651][ T9955] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:47 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:47 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x48]}) 06:55:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x181080, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x10001, 0x12) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000180)={{0x3, 0x0, 0x5, 0x2, 0x1}, 0x1b1208f1, 0x5, 0x100}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:47 executing program 0 (fault-call:0 fault-nth:28): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:48 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88caffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:48 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:48 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0xfffffcf1) keyctl$get_keyring_id(0x0, r1, 0x5) 06:55:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4c]}) [ 2191.149341][T10090] FAULT_INJECTION: forcing a failure. [ 2191.149341][T10090] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.162241][T10090] CPU: 0 PID: 10090 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2191.170168][T10090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.180212][T10090] Call Trace: [ 2191.183501][T10090] dump_stack+0x172/0x1f0 [ 2191.187829][T10090] should_fail.cold+0xa/0x15 [ 2191.192414][T10090] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2191.198246][T10090] ? ___might_sleep+0x163/0x280 [ 2191.203100][T10090] __should_failslab+0x121/0x190 [ 2191.208037][T10090] should_failslab+0x9/0x14 [ 2191.212536][T10090] kmem_cache_alloc+0x2af/0x6f0 [ 2191.217382][T10090] ? lock_downgrade+0x880/0x880 [ 2191.222239][T10090] __kernfs_new_node+0xf0/0x6c0 [ 2191.227170][T10090] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 2191.232625][T10090] ? wait_for_completion+0x440/0x440 [ 2191.237924][T10090] ? mutex_unlock+0xd/0x10 [ 2191.242342][T10090] ? kernfs_activate+0x192/0x1f0 [ 2191.247276][T10090] kernfs_new_node+0x96/0x120 [ 2191.252253][T10090] __kernfs_create_file+0x51/0x340 [ 2191.258077][T10090] sysfs_add_file_mode_ns+0x222/0x560 [ 2191.263451][T10090] internal_create_group+0x359/0xc40 [ 2191.268761][T10090] ? remove_files.isra.0+0x190/0x190 [ 2191.274036][T10090] ? bd_set_size+0x3f/0xb0 [ 2191.278477][T10090] ? kasan_check_write+0x14/0x20 [ 2191.283409][T10090] ? up_write+0xbe/0x1e0 [ 2191.287645][T10090] sysfs_create_group+0x20/0x30 [ 2191.292489][T10090] loop_set_fd+0xb11/0x10b0 [ 2191.296988][T10090] lo_ioctl+0x1a3/0x1460 [ 2191.301215][T10090] ? lock_downgrade+0x880/0x880 [ 2191.306053][T10090] ? loop_set_fd+0x10b0/0x10b0 [ 2191.310804][T10090] blkdev_ioctl+0xece/0x1c10 [ 2191.315378][T10090] ? blkpg_ioctl+0xa90/0xa90 [ 2191.319952][T10090] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2191.325747][T10090] ? ___might_sleep+0x163/0x280 [ 2191.330603][T10090] block_ioctl+0xee/0x130 [ 2191.334933][T10090] ? blkdev_fallocate+0x410/0x410 [ 2191.339951][T10090] do_vfs_ioctl+0xd5f/0x1380 [ 2191.344523][T10090] ? ioctl_preallocate+0x210/0x210 [ 2191.349615][T10090] ? selinux_file_mprotect+0x620/0x620 [ 2191.355052][T10090] ? __fget+0x381/0x550 [ 2191.359242][T10090] ? ksys_dup3+0x3e0/0x3e0 [ 2191.363660][T10090] ? do_sys_open+0x31d/0x5d0 [ 2191.368247][T10090] ? tomoyo_file_ioctl+0x23/0x30 [ 2191.373180][T10090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2191.379418][T10090] ? security_file_ioctl+0x8d/0xc0 [ 2191.384512][T10090] ksys_ioctl+0xab/0xd0 [ 2191.388653][T10090] __x64_sys_ioctl+0x73/0xb0 [ 2191.393244][T10090] do_syscall_64+0xfd/0x680 [ 2191.397744][T10090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2191.403621][T10090] RIP: 0033:0x459637 [ 2191.407522][T10090] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2191.427107][T10090] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2191.435516][T10090] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2191.443480][T10090] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2191.451450][T10090] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2191.459431][T10090] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2191.467405][T10090] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2191.493861][T10092] Unknown ioctl -1068477435 [ 2191.545188][T10092] Unknown ioctl -1068477435 06:55:48 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff00000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000240)=0x58) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000280)={r5, 0x7, 0x20}, 0xc) r6 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r6, 0x5386, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x60]}) 06:55:48 executing program 0 (fault-call:0 fault-nth:29): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:48 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x89060000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:48 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:48 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000140)="691c77f374bc4539d1a17461d797c7915af7f14cc766c72cd1d5a943ab1c09883899bad018135ed874c2ba5adf96c376df4a9b2cdb6dae8c4a280d7e17d6f145a7440d5dadc876ae5a07d3ab89f51f0cd9718704c3d05868ee910b26ca63a236291f6b09ba1aee9b181005d1f2624f", 0x6f, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x68]}) 06:55:48 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2191.930726][T10222] FAULT_INJECTION: forcing a failure. [ 2191.930726][T10222] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.963679][T10222] CPU: 0 PID: 10222 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2191.971599][T10222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2191.981834][T10222] Call Trace: [ 2191.985133][T10222] dump_stack+0x172/0x1f0 [ 2191.989477][T10222] should_fail.cold+0xa/0x15 [ 2191.994084][T10222] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2191.999905][T10222] ? ___might_sleep+0x163/0x280 [ 2192.004775][T10222] __should_failslab+0x121/0x190 [ 2192.009722][T10222] should_failslab+0x9/0x14 [ 2192.014240][T10222] kmem_cache_alloc_node+0x261/0x710 [ 2192.019530][T10222] ? find_held_lock+0x35/0x130 [ 2192.024306][T10222] __alloc_skb+0xd5/0x5e0 [ 2192.028639][T10222] ? skb_trim+0x190/0x190 [ 2192.032975][T10222] ? kasan_check_read+0x11/0x20 [ 2192.037835][T10222] alloc_uevent_skb+0x83/0x1e2 [ 2192.042609][T10222] kobject_uevent_env+0xaa3/0x101d [ 2192.047742][T10222] kobject_uevent+0x20/0x26 [ 2192.052258][T10222] loop_set_fd+0xba2/0x10b0 [ 2192.056775][T10222] lo_ioctl+0x1a3/0x1460 [ 2192.061019][T10222] ? lock_downgrade+0x880/0x880 [ 2192.065875][T10222] ? loop_set_fd+0x10b0/0x10b0 [ 2192.070649][T10222] blkdev_ioctl+0xece/0x1c10 [ 2192.075247][T10222] ? blkpg_ioctl+0xa90/0xa90 06:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:49 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xffffffffffffff4f) [ 2192.079841][T10222] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2192.085677][T10222] ? ___might_sleep+0x163/0x280 [ 2192.090544][T10222] block_ioctl+0xee/0x130 [ 2192.094902][T10222] ? blkdev_fallocate+0x410/0x410 [ 2192.099925][T10222] do_vfs_ioctl+0xd5f/0x1380 [ 2192.104510][T10222] ? ioctl_preallocate+0x210/0x210 [ 2192.109615][T10222] ? selinux_file_mprotect+0x620/0x620 [ 2192.115052][T10222] ? __fget+0x381/0x550 [ 2192.119190][T10222] ? ksys_dup3+0x3e0/0x3e0 [ 2192.123605][T10222] ? do_sys_open+0x31d/0x5d0 [ 2192.128191][T10222] ? tomoyo_file_ioctl+0x23/0x30 [ 2192.133118][T10222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2192.139337][T10222] ? security_file_ioctl+0x8d/0xc0 [ 2192.144440][T10222] ksys_ioctl+0xab/0xd0 [ 2192.148606][T10222] __x64_sys_ioctl+0x73/0xb0 [ 2192.153200][T10222] do_syscall_64+0xfd/0x680 [ 2192.157713][T10222] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2192.163598][T10222] RIP: 0033:0x459637 [ 2192.167495][T10222] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2192.187099][T10222] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2192.195611][T10222] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2192.203667][T10222] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2192.211629][T10222] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2192.219606][T10222] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2192.227560][T10222] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6c]}) 06:55:49 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3a3, 0x101000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00', 0x5012}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) 06:55:49 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:49 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:49 executing program 0 (fault-call:0 fault-nth:30): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x101883, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000480)={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000600)={r5, 0x7}, &(0x7f0000000640)=0x8) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={0x0, 0xfc1e2cffffffe}, &(0x7f0000000280)=0x8) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000340)={0x0, @reserved}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000002c0)={r7, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000980)=0xcf) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000000004) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x8, {0x9, 0x9c, 0x100000000, 0x552, 0x6, 0x2f33}, 0x6, 0x40}, 0xe) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x8000, 0x0) r9 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x8, 0x400) renameat2(r8, &(0x7f0000000140)='./file0\x00', r9, &(0x7f00000001c0)='./file0\x00', 0x4) 06:55:49 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:49 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2192.615309][T10255] FAULT_INJECTION: forcing a failure. [ 2192.615309][T10255] name failslab, interval 1, probability 0, space 0, times 0 06:55:49 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x74]}) [ 2192.672223][T10255] CPU: 0 PID: 10255 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2192.680153][T10255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2192.690230][T10255] Call Trace: [ 2192.693540][T10255] dump_stack+0x172/0x1f0 [ 2192.697890][T10255] should_fail.cold+0xa/0x15 [ 2192.702498][T10255] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2192.708317][T10255] ? ___might_sleep+0x163/0x280 [ 2192.713187][T10255] __should_failslab+0x121/0x190 [ 2192.718137][T10255] should_failslab+0x9/0x14 [ 2192.722650][T10255] kmem_cache_alloc_trace+0x2ce/0x750 [ 2192.728056][T10255] kobject_uevent_env+0x387/0x101d [ 2192.733177][T10255] ? kasan_check_write+0x14/0x20 [ 2192.738130][T10255] ? up_write+0xbe/0x1e0 [ 2192.742376][T10255] kobject_uevent+0x20/0x26 [ 2192.746880][T10255] loop_set_fd+0xba2/0x10b0 [ 2192.751370][T10255] lo_ioctl+0x1a3/0x1460 [ 2192.755658][T10255] ? lock_downgrade+0x880/0x880 [ 2192.760498][T10255] ? loop_set_fd+0x10b0/0x10b0 [ 2192.765314][T10255] blkdev_ioctl+0xece/0x1c10 [ 2192.769888][T10255] ? blkpg_ioctl+0xa90/0xa90 [ 2192.774462][T10255] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2192.780284][T10255] ? ___might_sleep+0x163/0x280 [ 2192.785218][T10255] block_ioctl+0xee/0x130 [ 2192.789533][T10255] ? blkdev_fallocate+0x410/0x410 [ 2192.794555][T10255] do_vfs_ioctl+0xd5f/0x1380 [ 2192.799146][T10255] ? ioctl_preallocate+0x210/0x210 [ 2192.804254][T10255] ? selinux_file_mprotect+0x620/0x620 [ 2192.809699][T10255] ? __fget+0x381/0x550 [ 2192.813875][T10255] ? ksys_dup3+0x3e0/0x3e0 [ 2192.818291][T10255] ? do_sys_open+0x31d/0x5d0 [ 2192.822894][T10255] ? tomoyo_file_ioctl+0x23/0x30 [ 2192.827865][T10255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2192.834121][T10255] ? security_file_ioctl+0x8d/0xc0 [ 2192.839237][T10255] ksys_ioctl+0xab/0xd0 [ 2192.843400][T10255] __x64_sys_ioctl+0x73/0xb0 [ 2192.848023][T10255] do_syscall_64+0xfd/0x680 [ 2192.852534][T10255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2192.858422][T10255] RIP: 0033:0x459637 [ 2192.862574][T10255] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2192.887385][T10255] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2192.895809][T10255] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2192.903784][T10255] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2192.911768][T10255] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:55:49 executing program 1: keyctl$read(0xb, 0x0, 0x0, 0x0) [ 2192.919850][T10255] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2192.927830][T10255] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:50 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:50 executing program 0 (fault-call:0 fault-nth:31): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:50 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7a]}) 06:55:50 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x9, "6bec07392abf9c33150aaf07"}, 0xe, 0x1) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0)='\t', 0xfd86, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) [ 2193.163144][T10377] QAT: Invalid ioctl [ 2193.327756][T10385] FAULT_INJECTION: forcing a failure. [ 2193.327756][T10385] name failslab, interval 1, probability 0, space 0, times 0 [ 2193.341726][T10385] CPU: 1 PID: 10385 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2193.349741][T10385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2193.359839][T10385] Call Trace: [ 2193.363187][T10385] dump_stack+0x172/0x1f0 [ 2193.367752][T10385] should_fail.cold+0xa/0x15 06:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@sha1={0x1, "d8f8d5e1f4f7aa980d4801783bdf830558d2eb08"}, 0x15, 0x2) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:55:50 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2193.372697][T10385] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2193.378725][T10385] ? ___might_sleep+0x163/0x280 [ 2193.383776][T10385] __should_failslab+0x121/0x190 [ 2193.388917][T10385] should_failslab+0x9/0x14 [ 2193.393452][T10385] kmem_cache_alloc_node+0x261/0x710 [ 2193.399041][T10385] ? find_held_lock+0x35/0x130 [ 2193.403846][T10385] __alloc_skb+0xd5/0x5e0 [ 2193.408273][T10385] ? skb_trim+0x190/0x190 [ 2193.412773][T10385] ? kasan_check_read+0x11/0x20 [ 2193.417660][T10385] alloc_uevent_skb+0x83/0x1e2 [ 2193.422647][T10385] kobject_uevent_env+0xaa3/0x101d 06:55:50 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xe0]}) [ 2193.427967][T10385] kobject_uevent+0x20/0x26 [ 2193.432510][T10385] loop_set_fd+0xba2/0x10b0 [ 2193.437143][T10385] lo_ioctl+0x1a3/0x1460 [ 2193.441674][T10385] ? lock_downgrade+0x880/0x880 [ 2193.446571][T10385] ? loop_set_fd+0x10b0/0x10b0 [ 2193.451523][T10385] blkdev_ioctl+0xece/0x1c10 [ 2193.456275][T10385] ? blkpg_ioctl+0xa90/0xa90 [ 2193.460895][T10385] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2193.466969][T10385] ? ___might_sleep+0x163/0x280 [ 2193.471861][T10385] block_ioctl+0xee/0x130 06:55:50 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xffffa888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2193.476219][T10385] ? blkdev_fallocate+0x410/0x410 [ 2193.481279][T10385] do_vfs_ioctl+0xd5f/0x1380 [ 2193.486082][T10385] ? ioctl_preallocate+0x210/0x210 [ 2193.491360][T10385] ? selinux_file_mprotect+0x620/0x620 [ 2193.496852][T10385] ? __fget+0x381/0x550 [ 2193.501254][T10385] ? ksys_dup3+0x3e0/0x3e0 [ 2193.505907][T10385] ? tomoyo_file_ioctl+0x23/0x30 [ 2193.510884][T10385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2193.517314][T10385] ? security_file_ioctl+0x8d/0xc0 [ 2193.522490][T10385] ksys_ioctl+0xab/0xd0 [ 2193.526875][T10385] __x64_sys_ioctl+0x73/0xb0 [ 2193.531850][T10385] do_syscall_64+0xfd/0x680 [ 2193.536367][T10385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2193.542621][T10385] RIP: 0033:0x459637 [ 2193.546864][T10385] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2193.566927][T10385] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2193.575815][T10385] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 [ 2193.584311][T10385] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2193.592664][T10385] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2193.607769][T10385] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2193.616010][T10385] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:50 executing program 1: request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000200)='#%\x00', 0xfffffffffffffff8) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:50 executing program 0 (fault-call:0 fault-nth:32): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") fchdir(r0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) connect$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @remote}}, 0x24) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)=0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(r5, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$RTC_VL_CLR(r3, 0x7014) tkill(r4, 0x1000000000016) [ 2193.790617][T10512] net_ratelimit: 16 callbacks suppressed [ 2193.790627][T10512] dccp_invalid_packet: P.Data Offset(0) too small [ 2193.877588][T10517] dccp_invalid_packet: P.Data Offset(0) too small 06:55:50 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2194.008992][T10614] FAULT_INJECTION: forcing a failure. [ 2194.008992][T10614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2194.022621][T10614] CPU: 0 PID: 10614 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2194.030665][T10614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.041187][T10614] Call Trace: [ 2194.044713][T10614] dump_stack+0x172/0x1f0 [ 2194.049360][T10614] should_fail.cold+0xa/0x15 06:55:51 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:51 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) getresgid(0x0, 0x0, &(0x7f0000000680)) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [{}], {}, {0x20, 0x4}}, 0x2c, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x400006, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) keyctl$read(0xb, r0, 0x0, 0x0) [ 2194.054116][T10614] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2194.059953][T10614] should_fail_alloc_page+0x50/0x60 [ 2194.065171][T10614] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2194.070754][T10614] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2194.076553][T10614] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2194.082436][T10614] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2194.088090][T10614] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2194.094362][T10614] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2194.100392][T10614] cache_grow_begin+0x9d/0x650 [ 2194.105695][T10614] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2194.112712][T10614] kmem_cache_alloc+0x62a/0x6f0 [ 2194.117725][T10614] ? __fget+0x381/0x550 [ 2194.122009][T10614] getname_flags+0xd6/0x5b0 [ 2194.126541][T10614] do_mkdirat+0xa0/0x2a0 [ 2194.130806][T10614] ? __ia32_sys_mknod+0xb0/0xb0 [ 2194.135767][T10614] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2194.141403][T10614] ? do_syscall_64+0x26/0x680 [ 2194.146239][T10614] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2194.152436][T10614] ? do_syscall_64+0x26/0x680 06:55:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2194.157132][T10614] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2194.162448][T10614] __x64_sys_mkdir+0x5c/0x80 [ 2194.167336][T10614] do_syscall_64+0xfd/0x680 [ 2194.172040][T10614] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2194.177950][T10614] RIP: 0033:0x458be7 [ 2194.181867][T10614] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2194.201881][T10614] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2194.210848][T10614] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2194.218838][T10614] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2194.227317][T10614] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2194.235305][T10614] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2194.243295][T10614] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xf0]}) 06:55:51 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:51 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:51 executing program 0 (fault-call:0 fault-nth:33): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2194.470390][T10726] dccp_invalid_packet: P.Data Offset(0) too small 06:55:51 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:51 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2194.575981][T10749] dccp_invalid_packet: P.Data Offset(0) too small [ 2194.611034][T10751] FAULT_INJECTION: forcing a failure. [ 2194.611034][T10751] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.645781][T10751] CPU: 1 PID: 10751 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2194.654149][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2194.654187][T10751] Call Trace: [ 2194.668088][T10751] dump_stack+0x172/0x1f0 [ 2194.672667][T10751] should_fail.cold+0xa/0x15 [ 2194.677286][T10751] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2194.683261][T10751] ? ___might_sleep+0x163/0x280 [ 2194.688255][T10751] __should_failslab+0x121/0x190 [ 2194.693431][T10751] should_failslab+0x9/0x14 [ 2194.693444][T10751] __kmalloc+0x2d9/0x740 [ 2194.693461][T10751] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2194.693479][T10751] ? rcu_read_lock_sched_held+0x110/0x130 [ 2194.693492][T10751] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2194.693512][T10751] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2194.725575][T10751] ? tomoyo_path_number_perm+0x193/0x520 [ 2194.731235][T10751] tomoyo_path_number_perm+0x1dd/0x520 [ 2194.732851][T10631] overlayfs: lowerdir is in-use as upperdir/workdir 06:55:51 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2194.737003][T10751] ? tomoyo_path_number_perm+0x193/0x520 [ 2194.737022][T10751] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2194.737041][T10751] ? debug_check_no_obj_freed+0x200/0x464 [ 2194.737064][T10751] ? kasan_check_write+0x14/0x20 [ 2194.737102][T10751] ? putname+0xef/0x130 [ 2194.737118][T10751] ? putname+0xef/0x130 [ 2194.737139][T10751] ? putname+0xef/0x130 [ 2194.737156][T10751] ? rcu_read_lock_sched_held+0x110/0x130 [ 2194.784691][T10751] ? kmem_cache_free+0x222/0x260 [ 2194.789663][T10751] tomoyo_path_mkdir+0xaa/0xf0 [ 2194.794453][T10751] ? tomoyo_file_ioctl+0x30/0x30 [ 2194.799916][T10751] ? kern_path_mountpoint+0x40/0x40 [ 2194.805176][T10751] ? strncpy_from_user+0x2ac/0x380 [ 2194.810627][T10751] security_path_mkdir+0x113/0x170 [ 2194.815790][T10751] do_mkdirat+0x160/0x2a0 [ 2194.820144][T10751] ? __ia32_sys_mknod+0xb0/0xb0 [ 2194.825016][T10751] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2194.830625][T10751] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2194.836909][T10751] ? do_syscall_64+0x26/0x680 [ 2194.841638][T10751] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2194.841658][T10751] __x64_sys_mkdir+0x5c/0x80 [ 2194.841678][T10751] do_syscall_64+0xfd/0x680 [ 2194.856803][T10751] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2194.862985][T10751] RIP: 0033:0x458be7 [ 2194.866897][T10751] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2194.886895][T10751] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 06:55:51 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xffffff8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2194.886909][T10751] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2194.886917][T10751] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2194.886925][T10751] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2194.886933][T10751] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2194.886942][T10751] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2194.929577][T10751] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x140]}) 06:55:52 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:52 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x1, 0x0) openat$cgroup(r0, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) connect$bt_l2cap(r0, &(0x7f00000006c0)={0x1f, 0x0, {0x0, 0x8100000000, 0x60, 0x7, 0x0, 0x6}, 0x1, 0x5}, 0xe) set_mempolicy(0x2, &(0x7f0000000000)=0x639e, 0x9f) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000004c0)=0x6) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) keyctl$read(0xb, r2, 0x0, 0xffffffffffffff2e) r3 = add_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="fb9e763f6f990ff83b077e79e696e04f27d9be08fb9b0a5756bd8627dd624ad27411b1e54c5a3d992477d1646371be276233a47bfe7608d096fcba1e14c9c9d88ebb9dd9c04f45e218634d289e67237e558fc4fae06988640d2fa3d747cf001d439f1565137a260cbbc195072889f6194eca8e7652789e97d25a6956f9bfc544fa966a6e7e6d3677a44b10eb4b7ebc499e976a17c6319f90984b9fe7f3eae783f55178d3f904a0acb0d61f6a5384e2d7c4314f43aaa9373833f9b1abfd11fd2934e4965fd70e053d948eebcf89e2544d3a60bd30e1", 0xd5, 0xfffffffffffffffa) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80002020}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="870000004df13a92abfd6fd1c227292d44292cf89a842e6418ed9a3fb17160f3775a24df161097ae2f61315d7aa7209d38e589ab51eb8da46d47c64f1d0ff479a3bcf42e428bb4147afe05cd2557f49f64d0ebdcd6beee7e7c65b38d63e3da23c0313fd086ba6d474f", @ANYRES16=r4, @ANYBLOB="0d0027bd7000fcdbdf2510000000180002000800010000010000040004000800010080000000740005003400020008000200fdffffff08000300080000000800020000020000080004001f000000080002000200000008000100030000000800010069620000240002000800040000000000080002000500000008000300ff01000008000200ff03000008000100696200000800010069620000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x24004081) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="916150a3ac13c3f143f72ed58fdca7682a095d921452093bf07bf1d3664191c687428eb0f778b253fd39e55321c4186e7bb262e29f50b08b038df3c89c45396b45ad1c6c85b0d771df265784b0546347ba63f8c7610a4291d20a824eac77400851e35e0e522b3752410d7161703f153e8be2ef8887a69b883500abe0c928d8eb84", 0x81, r3) 06:55:52 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x4400) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) tkill(r3, 0x4) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000003c0)=""/238) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000380)={0xfffffffffffffffc, 0x4, r6, 0x0, r7, 0x0, 0x3f, 0x8e76}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) 06:55:52 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:52 executing program 0 (fault-call:0 fault-nth:34): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:52 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2195.231741][T10775] dccp_invalid_packet: P.Data Offset(0) too small [ 2195.274732][T10785] dccp_invalid_packet: P.Data Offset(0) too small 06:55:52 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2ae]}) [ 2195.338018][T10783] FAULT_INJECTION: forcing a failure. [ 2195.338018][T10783] name failslab, interval 1, probability 0, space 0, times 0 [ 2195.373599][T10783] CPU: 1 PID: 10783 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2195.381644][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2195.391972][T10783] Call Trace: [ 2195.395305][T10783] dump_stack+0x172/0x1f0 [ 2195.399823][T10783] should_fail.cold+0xa/0x15 [ 2195.404798][T10783] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2195.404819][T10783] ? ___might_sleep+0x163/0x280 [ 2195.404840][T10783] __should_failslab+0x121/0x190 [ 2195.404861][T10783] should_failslab+0x9/0x14 [ 2195.425454][T10783] __kmalloc+0x2d9/0x740 [ 2195.429730][T10783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2195.435996][T10783] ? d_absolute_path+0x11b/0x170 [ 2195.440954][T10783] ? __d_path+0x140/0x140 [ 2195.445304][T10783] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2195.450838][T10783] tomoyo_encode2.part.0+0xf5/0x400 [ 2195.456406][T10783] tomoyo_encode+0x2b/0x50 [ 2195.460844][T10783] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2195.466632][T10783] tomoyo_path_number_perm+0x1dd/0x520 [ 2195.472113][T10783] ? tomoyo_path_number_perm+0x193/0x520 [ 2195.477767][T10783] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2195.483761][T10783] ? debug_check_no_obj_freed+0x200/0x464 [ 2195.489516][T10783] ? kasan_check_write+0x14/0x20 [ 2195.494498][T10783] ? putname+0xef/0x130 [ 2195.498676][T10783] ? putname+0xef/0x130 [ 2195.502853][T10783] ? putname+0xef/0x130 [ 2195.507188][T10783] ? rcu_read_lock_sched_held+0x110/0x130 [ 2195.512927][T10783] ? kmem_cache_free+0x222/0x260 [ 2195.517893][T10783] tomoyo_path_mkdir+0xaa/0xf0 [ 2195.522691][T10783] ? tomoyo_file_ioctl+0x30/0x30 [ 2195.522716][T10783] ? kern_path_mountpoint+0x40/0x40 [ 2195.522738][T10783] ? strncpy_from_user+0x2ac/0x380 [ 2195.539292][T10783] security_path_mkdir+0x113/0x170 [ 2195.539314][T10783] do_mkdirat+0x160/0x2a0 [ 2195.539333][T10783] ? __ia32_sys_mknod+0xb0/0xb0 [ 2195.539349][T10783] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2195.539371][T10783] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2195.545362][T10894] dccp_invalid_packet: P.Data Offset(0) too small [ 2195.549048][T10783] ? do_syscall_64+0x26/0x680 [ 2195.549066][T10783] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2195.549086][T10783] __x64_sys_mkdir+0x5c/0x80 [ 2195.549103][T10783] do_syscall_64+0xfd/0x680 [ 2195.549122][T10783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2195.549140][T10783] RIP: 0033:0x458be7 [ 2195.570313][T10896] dccp_invalid_packet: P.Data Offset(0) too small [ 2195.572441][T10783] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2195.572450][T10783] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 06:55:52 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:52 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280000, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x104, 0x4) r1 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="8d24f5f305b1a812a49446aeaef9687be916c1aeb804217cd51ec7569ccf8ba3814d6d081552f57f055ce21514e7c297bdd1030e73343f6802b9d9ffc456d453f06cd172918c43b7f07ce4f62ccc40aa4e9c051223a6fd39f6d5823d6e0f551b3de1b629123c1ab2f265dca0d5ef3dee03269e28e13733f584dcbea187ff71ee28aa7235c28846b759c98a828770ef2cb0c960203d62d1", 0x97, 0xfffffffffffffff8) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000000c0)='\t', 0x1, r1) keyctl$read(0xb, r2, 0x0, 0x0) 06:55:52 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2195.572465][T10783] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2195.572473][T10783] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2195.572482][T10783] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2195.572491][T10783] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2195.572499][T10783] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2195.636029][T10783] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:52 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x2f24d0bfe2be7bb0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000100)={0x2, 0x4, 0x112, 0x67, 0x10001, 0x81}) 06:55:52 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:52 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2ba]}) [ 2195.941117][T11053] dccp_invalid_packet: P.Data Offset(0) too small [ 2195.964190][T11075] dccp_invalid_packet: P.Data Offset(0) too small 06:55:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ptrace$pokeuser(0x6, r3, 0x7, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x8000, 0x0) write$rfkill(r5, &(0x7f0000000180)={0x80000000, 0x3, 0x1, 0x1}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:53 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:53 executing program 0 (fault-call:0 fault-nth:35): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:53 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2dc]}) 06:55:53 executing program 1: r0 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000380)={'syz'}, &(0x7f00000000c0)="0f", 0xfffffffffffffe6c, 0xfffffffffffffffe) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000180)={r2, 0x1}) sysfs$1(0x1, &(0x7f0000000340)='\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r1, &(0x7f00000001c0)="8d05f008501f8a00da59146b72e6159dfb5e96b930b254385816e862dd76f414e52c8c8cedb3df5fa25e17be00e58fd8940ee2d061657e66e18e9b511172fd047de692a0759d263f8194e8dda2ceef29301106f31dd8a30279b1bbf9283c63f0723ce334af806b736de3842c75920b053bcadcd1b9279d2bd6463b14dd41a347510fa513f982d82eb0b3766fe6a6c6c32bf4e3485db41e19ef58be85f1d0b0665cb2766b27b88d4bb81fb4146f6bcfaddaac3e3190d9ee7fe3f6de0bb1812ca6752134af5cb3eab11408ca182908f907fb4b408041a1d1ff927cf8884d5fede1700105821fbf6cb946df41ddb6553b01c5d4a594bfcd31", &(0x7f00000002c0)=""/9}, 0x18) keyctl$read(0xb, r0, 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000040)={r2, 0x2}) [ 2196.221879][T11129] FAULT_INJECTION: forcing a failure. [ 2196.221879][T11129] name failslab, interval 1, probability 0, space 0, times 0 06:55:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x300]}) 06:55:53 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2196.272067][T11129] CPU: 0 PID: 11129 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2196.280178][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2196.290264][T11129] Call Trace: [ 2196.293940][T11129] dump_stack+0x172/0x1f0 [ 2196.298416][T11129] should_fail.cold+0xa/0x15 [ 2196.303037][T11129] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2196.309050][T11129] ? ___might_sleep+0x163/0x280 [ 2196.313927][T11129] __should_failslab+0x121/0x190 [ 2196.318889][T11129] should_failslab+0x9/0x14 [ 2196.323407][T11129] kmem_cache_alloc+0x2af/0x6f0 [ 2196.328261][T11129] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 2196.334079][T11129] ? lock_downgrade+0x880/0x880 [ 2196.339082][T11129] skb_clone+0x154/0x3d0 [ 2196.343686][T11129] netlink_broadcast_filtered+0x86e/0xb20 [ 2196.349457][T11129] netlink_broadcast+0x3a/0x50 [ 2196.354241][T11129] kobject_uevent_env+0xad4/0x101d [ 2196.359598][T11129] kobject_uevent+0x20/0x26 [ 2196.364335][T11129] loop_set_fd+0xba2/0x10b0 06:55:53 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xfffffffffffffffa}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0x200}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) [ 2196.368983][T11129] lo_ioctl+0x1a3/0x1460 [ 2196.373375][T11129] ? lock_downgrade+0x880/0x880 [ 2196.378396][T11129] ? loop_set_fd+0x10b0/0x10b0 [ 2196.383236][T11129] blkdev_ioctl+0xece/0x1c10 [ 2196.387856][T11129] ? blkpg_ioctl+0xa90/0xa90 [ 2196.392543][T11129] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2196.398815][T11129] ? ___might_sleep+0x163/0x280 [ 2196.404192][T11129] block_ioctl+0xee/0x130 [ 2196.408738][T11129] ? blkdev_fallocate+0x410/0x410 [ 2196.414225][T11129] do_vfs_ioctl+0xd5f/0x1380 [ 2196.419068][T11129] ? ioctl_preallocate+0x210/0x210 [ 2196.424326][T11129] ? selinux_file_mprotect+0x620/0x620 [ 2196.429888][T11129] ? __fget+0x381/0x550 [ 2196.434184][T11129] ? ksys_dup3+0x3e0/0x3e0 [ 2196.438789][T11129] ? do_sys_open+0x31d/0x5d0 [ 2196.443660][T11129] ? tomoyo_file_ioctl+0x23/0x30 [ 2196.448873][T11129] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2196.455516][T11129] ? security_file_ioctl+0x8d/0xc0 [ 2196.461230][T11129] ksys_ioctl+0xab/0xd0 [ 2196.465448][T11129] __x64_sys_ioctl+0x73/0xb0 [ 2196.470176][T11129] do_syscall_64+0xfd/0x680 [ 2196.474955][T11129] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2196.481177][T11129] RIP: 0033:0x459637 [ 2196.485094][T11129] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2196.505308][T11129] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2196.514174][T11129] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000459637 06:55:53 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2196.522302][T11129] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 2196.530425][T11129] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2196.538752][T11129] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2196.546790][T11129] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:53 executing program 1: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000240)="098dd2c97ba42eab39bb020000000000006279f5946ab6836bc19779d523ad1deda2799584cfa7fa5fe968251b56a6196147e630640572eea269d034b23a14bca84c64ded08b0d10ab628af070cecc228272d2bcbf40131f907f3259274ab18c443cff7df9bd93c66592e407ac62c78cbaf221181583ea8c2c4bc822f3cd293529164a967f73a75a52ebc584c15c466bb15a68068cfde97383f2ab38c5670c04d46d3a882a5f5c1088873aa92c504847d979c06626580939e13dfb94868eeb66965f34760817477bb6b787588d933baf9d8cc343d9c1f529aabb002f307e41b1e2225b0e94210942e18790f319f6576c8e00"/255, 0xfffffffffffffe20, r0) keyctl$read(0xb, r1, 0x0, 0x0) 06:55:53 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:53 executing program 0 (fault-call:0 fault-nth:36): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:53 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:53 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x500]}) 06:55:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000140)={0x10000, "4d68a8662cc593efc9b0807fb61ff581b5d3a350cbc409c38a42e1c6243277e0", 0x6, 0x20, 0x0, 0x3, 0x0, 0x3, 0x80000001, 0x4}) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000080)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:53 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2196.916437][T11305] FAULT_INJECTION: forcing a failure. [ 2196.916437][T11305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2196.930256][T11305] CPU: 0 PID: 11305 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2196.938168][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2196.948249][T11305] Call Trace: [ 2196.951585][T11305] dump_stack+0x172/0x1f0 [ 2196.956062][T11305] should_fail.cold+0xa/0x15 [ 2196.960762][T11305] ? is_bpf_text_address+0xac/0x170 06:55:53 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = request_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='+ppp0vboxnet0&cpusetvboxnet0trusted\x00', 0xfffffffffffffffa) keyctl$unlink(0x9, r0, r1) [ 2196.966042][T11305] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2196.971872][T11305] ? is_bpf_text_address+0xac/0x170 [ 2196.977125][T11305] should_fail_alloc_page+0x50/0x60 [ 2196.982449][T11305] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2196.987943][T11305] ? __lock_acquire+0x54f/0x5490 [ 2196.992939][T11305] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2196.998697][T11305] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2197.004717][T11305] cache_grow_begin+0x9d/0x650 [ 2197.009598][T11305] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2197.015964][T11305] __kmalloc+0x67c/0x740 [ 2197.015989][T11305] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2197.016008][T11305] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2197.031662][T11305] ? tomoyo_path_number_perm+0x193/0x520 [ 2197.037331][T11305] tomoyo_path_number_perm+0x1dd/0x520 [ 2197.042804][T11305] ? tomoyo_path_number_perm+0x193/0x520 [ 2197.042822][T11305] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2197.042840][T11305] ? debug_check_no_obj_freed+0x200/0x464 [ 2197.042862][T11305] ? kasan_check_write+0x14/0x20 06:55:54 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2197.042897][T11305] ? putname+0xef/0x130 [ 2197.070252][T11305] ? putname+0xef/0x130 [ 2197.074701][T11305] ? putname+0xef/0x130 [ 2197.078911][T11305] ? rcu_read_lock_sched_held+0x110/0x130 [ 2197.084803][T11305] ? kmem_cache_free+0x222/0x260 [ 2197.089767][T11305] tomoyo_path_mkdir+0xaa/0xf0 [ 2197.094556][T11305] ? tomoyo_file_ioctl+0x30/0x30 [ 2197.099519][T11305] ? kern_path_mountpoint+0x40/0x40 [ 2197.104821][T11305] ? strncpy_from_user+0x2ac/0x380 [ 2197.110383][T11305] security_path_mkdir+0x113/0x170 [ 2197.115649][T11305] do_mkdirat+0x160/0x2a0 [ 2197.120011][T11305] ? __ia32_sys_mknod+0xb0/0xb0 [ 2197.124890][T11305] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2197.130537][T11305] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2197.136619][T11305] ? do_syscall_64+0x26/0x680 [ 2197.141569][T11305] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2197.146960][T11305] __x64_sys_mkdir+0x5c/0x80 [ 2197.151711][T11305] do_syscall_64+0xfd/0x680 [ 2197.151731][T11305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2197.151742][T11305] RIP: 0033:0x458be7 [ 2197.151759][T11305] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2197.151766][T11305] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2197.151779][T11305] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2197.151788][T11305] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 06:55:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x543]}) 06:55:54 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2197.151795][T11305] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2197.151803][T11305] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2197.151812][T11305] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) sendto$rose(r2, &(0x7f0000000140)="8f9a852d628526a9c442eed7161dd472aa9c99aea3f597d2e7ab303d0186d40e6105fb58dd2868f34648ac884be54b3d59a2bba69de21e20756c5e088e2f2a0127651f3eb0dafb22296beb94d918ce10fa6017b8647f9565993c907d50e8c9d18f26dedf466bcca01d5fd90d047e14d18b7650634425ae1bc09a65383c6907ee8b32aa9d37ff23e1c94d1715e5afea70319a8ffedcdda65ec7637d200cbff64a5091ec96c065346ac77e0d359038d12bfa2ff46fbbcd6091c0010a8e4fb250dc3a1e8c", 0xc3, 0x40004, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:54 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x600]}) 06:55:54 executing program 0 (fault-call:0 fault-nth:37): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:54 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:54 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x400, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0x1, {{0xa, 0x4e20, 0xd14b, @local, 0x100}}}, 0x88) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000080), &(0x7f0000000440)=0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000180)="40984dcf0700000009", 0x0, r1) keyctl$read(0xb, r2, 0x0, 0xffffffffffffff44) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0xffffffffffffabb2, 0x7, 0x0, 0x5b9417e6}]}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000240)={0x1}, 0x1) r4 = syz_open_dev$vivid(&(0x7f0000000400)='/dev/video#\x00', 0x3, 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000480)=0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000580)) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"385192ab0025733db7b43033e9c29dbe1570946ba8d202b771f83a2aaa83f4217ad0c3196352516a6f1c36d7b8648fe7756d77970a373d2efea90199ddc6002d48afb8cf3ea41d7866aadb70832d19a0e02ebdc215cbf790d5560e0a3ff94af95c33ad4eeac37f7d65b19f081c91bd637c1f79b34dc5cf5576a3b89b78529d29bf24b50fd854049c6fea3b59ee6570d76d1e0f4172b6e6455b6d969057c677bf3f9b2a32e4db700dd2d631046d08005eba5d887818cb42e63b13608352af59a840676b85028077e087997ccb29f3c5d8b1a006a974502a3e1daf120fd4c57ba3a4038455142597dc4b436e948a5c0d8ba0b6be5cfc17bf46b21b4a496991bc84f0d14ca27332c47e05b597d63ea74303c5ddfa7c662acfaf8cb6b921033f7b15744b151852ca4e6510961da3775fcf339340c68e85321a77dcb137c730245cf9e799b741248449ac225e4ac04fea39e9b3efdb6f08f330734c890b16d4981738ec04fe1504661697c1c51f5503cded8cd11001a06bde2a846cc0b34c11ab7a969e648c252d38eab761e6d6c39a766acea0dd8037d142268e6e9d8de2e29b2ca93dc3a522dfae52ffc55c4757b4aedd10960f1101bec8598597cfbb8e21bbe0ded1a36504c2c0412d9e848572575d9f2688f5cf9cf64a77b24a0a6e919bdab8eaa61d51c6a6e4e4c0e830ea27f9f861036f3f964c661b654a49ab37c163921c051064ace25a266a4bfd877d617d4a7f03a536efdb51d8d9f1b634e0ff8b03957fae4fb2411e0ce0a538a2d8b2dffdcb5ea374173910e1461eb32f4005690b80cccd6d0c4856db75668ffae63d05208902d7f3bdc692398bacacc69d0e0c502f723a459bdc957b31e7287dbcf4d971562ca9816fa7e7061d888ffbefc9d9f7ee675c952964f2bd489aa0a3986bb1a192ef0416fc975d6a66e860627fb4899aa3b37e58acbfdbefbb8d394a0e100ffb3b0dd8fa86baedd73f2755d4668750ffa73a44435efcc43d46bf3736d8d720de1f5cfe4b56b2c99115b8d0571ffdc4f5875e4a3d04a7f1fbe6e69c86645cf60cb22509b55ec37d8d2a402d7ec141ed70b8a09f99727a28d72838217bb0a5c963f0d66298dcc5ae9d0ca65e5d0acf11d7f2c06a10bbf15bc8b8618a32ff09f350db461fb5f92791494bfe544ab2ac785aa0706128ca2c5ea7be916121c4ca61779721838bc9086016222782da434fcec2a479d3249631f857b89062439cdbb64f53f44f35c20206652bbd9ee19ec0335586cb78be9ac271366b2e1fac9f6728a82b81a82223af970d34254cd86ac98f0d9a7988bb58201ba6168847ab23cf9ec28457a359c8b4b30b6208174461e2a926342711d60f8b21036e00ed742969543d8c794a45e3c9daefc1b380ea83e9829a75bec18a7083eab448769ea61ab9742fc4273bcb74d6ea18895584296846f723b5ef"}) ptrace$getregset(0x4204, r5, 0x6, &(0x7f0000000540)={&(0x7f00000004c0)=""/123, 0x7b}) ioctl$VIDIOC_QUERYCTRL(r4, 0xc0445624, &(0x7f00000001c0)={0x4, 0x107, "6ff360a1bfb60c73e985a72bb738b58c55d422603b6314e91f4c24cf5841504b", 0x9, 0x7, 0x80000000, 0x2, 0x16}) 06:55:54 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:54 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2197.502679][T11486] FAULT_INJECTION: forcing a failure. [ 2197.502679][T11486] name failslab, interval 1, probability 0, space 0, times 0 06:55:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x608]}) 06:55:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61235e0bcf886be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 2197.626646][T11486] CPU: 0 PID: 11486 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2197.636295][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2197.646373][T11486] Call Trace: [ 2197.649694][T11486] dump_stack+0x172/0x1f0 [ 2197.654136][T11486] should_fail.cold+0xa/0x15 [ 2197.658757][T11486] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2197.664766][T11486] ? ___might_sleep+0x163/0x280 [ 2197.669907][T11486] __should_failslab+0x121/0x190 [ 2197.675050][T11486] ? ratelimit_state_init+0xb0/0xb0 [ 2197.680538][T11486] should_failslab+0x9/0x14 [ 2197.685065][T11486] kmem_cache_alloc+0x2af/0x6f0 [ 2197.690092][T11486] ? ebitmap_destroy+0xba/0xf0 [ 2197.694879][T11486] ? avc_has_perm+0x379/0x610 [ 2197.699713][T11486] ? ratelimit_state_init+0xb0/0xb0 [ 2197.704930][T11486] ext4_alloc_inode+0x1f/0x640 [ 2197.709905][T11486] ? ratelimit_state_init+0xb0/0xb0 [ 2197.715388][T11486] alloc_inode+0x68/0x1e0 [ 2197.719744][T11486] new_inode_pseudo+0x19/0xf0 06:55:54 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:54 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2197.724444][T11486] new_inode+0x1f/0x40 [ 2197.728711][T11486] __ext4_new_inode+0x377/0x5440 [ 2197.733694][T11486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2197.739952][T11486] ? __dquot_initialize+0x525/0xd80 [ 2197.739972][T11486] ? ext4_free_inode+0x1450/0x1450 [ 2197.739990][T11486] ? dqget+0x10c0/0x10c0 [ 2197.740014][T11486] ? security_transition_sid+0xf1/0x190 [ 2197.760408][T11486] ? selinux_determine_inode_label+0x1b1/0x390 [ 2197.767373][T11486] ext4_mkdir+0x3d5/0xdf0 [ 2197.771729][T11486] ? ext4_init_dot_dotdot+0x520/0x520 [ 2197.777215][T11486] ? selinux_inode_mkdir+0x23/0x30 [ 2197.782507][T11486] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2197.788770][T11486] ? security_inode_mkdir+0xe4/0x120 [ 2197.794166][T11486] vfs_mkdir+0x42e/0x670 [ 2197.798756][T11486] do_mkdirat+0x234/0x2a0 [ 2197.803240][T11486] ? __ia32_sys_mknod+0xb0/0xb0 [ 2197.808125][T11486] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2197.813622][T11486] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2197.813638][T11486] ? do_syscall_64+0x26/0x680 [ 2197.813654][T11486] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2197.813673][T11486] __x64_sys_mkdir+0x5c/0x80 [ 2197.813689][T11486] do_syscall_64+0xfd/0x680 [ 2197.813707][T11486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2197.813717][T11486] RIP: 0033:0x458be7 [ 2197.813731][T11486] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:55:54 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000018) 06:55:54 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000800)={0x1, @time={0x0, 0x989680}, 0x2, {0x2, 0x9}, 0x13728f23, 0x1}) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x2, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="825dbf07dc0ad161a941c27ac79d9e85f0caaa2ae3cf622db0fd7ab539acb23bd27b036bf8c39be4ab3b8263707ba00c7609332f3f71aca5d95e10b0f8743047c4f208", 0x43, 0x40a2}, {&(0x7f00000001c0)="242eca611faf003bc1994ec649b0c3ffe809d2496fc5424327df4bce02440176e10ee70a636076947ebdffb42a4090f8aaa4b7551f5e5fb20873a975f8efb46b7a8a0c73c41f321670e9190f726d4681ea5aa753c34ee5ba2f1fce35be9d3e365d30e5f38a85d3383b540053dda8", 0x6e, 0x981c}], 0x40, &(0x7f0000000680)={[{@gid={'gid', 0x3d, r1}}, {@type={'type', 0x3d, "8a79d4bd"}}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {@uid={'uid', 0x3d, r2}}, {@session={'session', 0x3d, 0x2}}, {@creator={'creator', 0x3d, 'xB20'}}, {@umask={'umask', 0x3d, 0x1}}, {@gid={'gid', 0x3d, r4}}, {@file_umask={'file_umask', 0x3d, 0x8}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'user\x00'}}, {@uid_lt={'uid<', r5}}, {@hash='hash'}, {@fowner_gt={'fowner>', r6}}, {@subj_type={'subj_type', 0x3d, '@,'}}]}) keyctl$read(0xb, r0, 0x0, 0x0) [ 2197.813739][T11486] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2197.813754][T11486] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2197.813762][T11486] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2197.813777][T11486] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2197.845146][T11486] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2197.845155][T11486] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:55 executing program 0 (fault-call:0 fault-nth:38): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x689]}) 06:55:55 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x608, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2198.084244][T11614] hfs: unable to parse mount options [ 2198.093674][T11620] FAULT_INJECTION: forcing a failure. [ 2198.093674][T11620] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.115150][T11620] CPU: 1 PID: 11620 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2198.123244][T11620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2198.123251][T11620] Call Trace: [ 2198.123278][T11620] dump_stack+0x172/0x1f0 [ 2198.123302][T11620] should_fail.cold+0xa/0x15 [ 2198.123326][T11620] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2198.123349][T11620] ? ___might_sleep+0x163/0x280 [ 2198.136976][T11620] __should_failslab+0x121/0x190 [ 2198.136996][T11620] should_failslab+0x9/0x14 [ 2198.137014][T11620] __kmalloc+0x2d9/0x740 [ 2198.146227][T11620] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2198.157198][T11620] ? rcu_read_lock_sched_held+0x110/0x130 [ 2198.157212][T11620] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2198.157237][T11620] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2198.166937][T11620] ? tomoyo_path_number_perm+0x193/0x520 [ 2198.166959][T11620] tomoyo_path_number_perm+0x1dd/0x520 [ 2198.166978][T11620] ? tomoyo_path_number_perm+0x193/0x520 [ 2198.176991][T11620] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2198.177008][T11620] ? debug_check_no_obj_freed+0x200/0x464 [ 2198.177032][T11620] ? kasan_check_write+0x14/0x20 [ 2198.177069][T11620] ? putname+0xef/0x130 06:55:55 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x806000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2198.188972][T11620] ? putname+0xef/0x130 [ 2198.188985][T11620] ? putname+0xef/0x130 [ 2198.189008][T11620] ? rcu_read_lock_sched_held+0x110/0x130 [ 2198.200504][T11620] ? kmem_cache_free+0x222/0x260 [ 2198.200528][T11620] tomoyo_path_mkdir+0xaa/0xf0 [ 2198.200547][T11620] ? tomoyo_file_ioctl+0x30/0x30 [ 2198.211744][T11620] ? kern_path_mountpoint+0x40/0x40 [ 2198.211762][T11620] ? strncpy_from_user+0x2ac/0x380 [ 2198.211784][T11620] security_path_mkdir+0x113/0x170 [ 2198.211811][T11620] do_mkdirat+0x160/0x2a0 [ 2198.223812][T11620] ? __ia32_sys_mknod+0xb0/0xb0 [ 2198.223828][T11620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2198.223846][T11620] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2198.223859][T11620] ? do_syscall_64+0x26/0x680 [ 2198.223881][T11620] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2198.233064][T11620] __x64_sys_mkdir+0x5c/0x80 [ 2198.241380][T11620] do_syscall_64+0xfd/0x680 [ 2198.252119][T11620] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2198.252132][T11620] RIP: 0033:0x458be7 06:55:55 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2198.252148][T11620] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2198.252155][T11620] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2198.252175][T11620] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2198.262256][T11620] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2198.262265][T11620] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:55:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x700]}) [ 2198.262273][T11620] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2198.262281][T11620] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2198.317744][T11620] ERROR: Out of memory at tomoyo_realpath_from_path. 06:55:55 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="ac", 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000140)) 06:55:55 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x806]}) 06:55:55 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:55 executing program 0 (fault-call:0 fault-nth:39): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2198.725186][T11839] FAULT_INJECTION: forcing a failure. [ 2198.725186][T11839] name failslab, interval 1, probability 0, space 0, times 0 [ 2198.738752][T11839] CPU: 1 PID: 11839 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2198.746855][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2198.757363][T11839] Call Trace: [ 2198.757420][T11839] dump_stack+0x172/0x1f0 [ 2198.757445][T11839] should_fail.cold+0xa/0x15 [ 2198.757467][T11839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2198.757495][T11839] __should_failslab+0x121/0x190 [ 2198.757514][T11839] should_failslab+0x9/0x14 [ 2198.757527][T11839] __kmalloc+0x71/0x740 [ 2198.757547][T11839] ? context_struct_to_string+0x368/0x950 [ 2198.757567][T11839] context_struct_to_string+0x368/0x950 [ 2198.757588][T11839] ? dump_masked_av_helper+0xa0/0xa0 [ 2198.765849][T11839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2198.765868][T11839] ? sidtab_search_core+0x164/0x210 [ 2198.765890][T11839] security_sid_to_context_core.isra.0+0x2fb/0x390 [ 2198.765911][T11839] security_sid_to_context_force+0x3a/0x50 [ 2198.831681][T11839] selinux_inode_init_security+0x555/0x7b0 [ 2198.837521][T11839] ? selinux_inode_create+0x30/0x30 [ 2198.842889][T11839] ? lock_downgrade+0x880/0x880 [ 2198.848152][T11839] ? kasan_check_read+0x11/0x20 [ 2198.853235][T11839] security_inode_init_security+0x1ad/0x3b0 [ 2198.859541][T11839] ? ext4_init_acl+0x290/0x290 [ 2198.864339][T11839] ? security_skb_classify_flow+0xb0/0xb0 [ 2198.870567][T11839] ? posix_acl_create+0x11a/0x430 [ 2198.875732][T11839] ? lock_downgrade+0x880/0x880 [ 2198.880621][T11839] ? ext4_set_acl+0x4f0/0x4f0 [ 2198.885321][T11839] ? _raw_spin_unlock+0x2d/0x50 [ 2198.890381][T11839] ext4_init_security+0x34/0x40 [ 2198.895260][T11839] __ext4_new_inode+0x449c/0x5440 [ 2198.900614][T11839] ? ext4_free_inode+0x1450/0x1450 [ 2198.905753][T11839] ? dqget+0x10c0/0x10c0 [ 2198.910026][T11839] ? selinux_determine_inode_label+0x1b1/0x390 [ 2198.916296][T11839] ext4_mkdir+0x3d5/0xdf0 [ 2198.920827][T11839] ? ext4_init_dot_dotdot+0x520/0x520 [ 2198.926355][T11839] ? selinux_inode_mkdir+0x23/0x30 [ 2198.931816][T11839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2198.938175][T11839] ? security_inode_mkdir+0xe4/0x120 [ 2198.943833][T11839] vfs_mkdir+0x42e/0x670 [ 2198.948373][T11839] do_mkdirat+0x234/0x2a0 [ 2198.952811][T11839] ? __ia32_sys_mknod+0xb0/0xb0 [ 2198.957769][T11839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2198.963258][T11839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2198.969347][T11839] ? do_syscall_64+0x26/0x680 [ 2198.974378][T11839] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2198.979692][T11839] __x64_sys_mkdir+0x5c/0x80 [ 2198.984416][T11839] do_syscall_64+0xfd/0x680 [ 2198.989092][T11839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2198.995002][T11839] RIP: 0033:0x458be7 [ 2198.998920][T11839] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2199.018905][T11839] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2199.027602][T11839] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2199.035822][T11839] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2199.043811][T11839] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2199.051968][T11839] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2199.060129][T11839] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000200)={0x6, &(0x7f0000000140)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {}, {}, {0x0, 0x0, 0x0, @dev}]}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000980)=[{&(0x7f0000000300)=""/148, 0x94}, {&(0x7f00000003c0)=""/157, 0x9d}, {&(0x7f00000005c0)=""/210, 0xd2}, {&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000780)=""/251, 0xfb}, {&(0x7f0000000880)=""/198, 0xc6}], 0x6) r4 = gettid() ptrace$getsig(0x4202, r4, 0x8, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:55:56 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x2800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x900]}) 06:55:56 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x341) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) 06:55:56 executing program 0 (fault-call:0 fault-nth:40): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:56 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2199.249119][T11848] net_ratelimit: 18 callbacks suppressed [ 2199.249129][T11848] dccp_invalid_packet: P.Data Offset(0) too small 06:55:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x3a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2199.305419][T11918] dccp_invalid_packet: P.Data Offset(0) too small [ 2199.336173][T11927] FAULT_INJECTION: forcing a failure. [ 2199.336173][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 2199.366810][T11927] CPU: 1 PID: 11927 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2199.375082][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2199.385155][T11927] Call Trace: [ 2199.388492][T11927] dump_stack+0x172/0x1f0 [ 2199.392846][T11927] should_fail.cold+0xa/0x15 [ 2199.392865][T11927] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2199.392885][T11927] ? ___might_sleep+0x163/0x280 [ 2199.392907][T11927] __should_failslab+0x121/0x190 [ 2199.413418][T11927] should_failslab+0x9/0x14 [ 2199.417948][T11927] kmem_cache_alloc+0x2af/0x6f0 [ 2199.423005][T11927] ? __put_user_ns+0x70/0x70 [ 2199.423023][T11927] ? rcu_read_lock_sched_held+0x110/0x130 [ 2199.423045][T11927] security_inode_alloc+0x39/0x160 [ 2199.423065][T11927] inode_init_always+0x56e/0xb50 [ 2199.423084][T11927] alloc_inode+0x89/0x1e0 [ 2199.438541][T11927] new_inode_pseudo+0x19/0xf0 [ 2199.453410][T11927] new_inode+0x1f/0x40 [ 2199.457506][T11927] __ext4_new_inode+0x377/0x5440 [ 2199.462477][T11927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2199.468906][T11927] ? __dquot_initialize+0x525/0xd80 [ 2199.468927][T11927] ? ext4_free_inode+0x1450/0x1450 [ 2199.468945][T11927] ? dqget+0x10c0/0x10c0 [ 2199.468959][T11927] ? security_transition_sid+0xf1/0x190 [ 2199.468980][T11927] ? selinux_determine_inode_label+0x1b1/0x390 [ 2199.496664][T11927] ext4_mkdir+0x3d5/0xdf0 [ 2199.501035][T11927] ? ext4_init_dot_dotdot+0x520/0x520 [ 2199.506867][T11927] ? selinux_inode_mkdir+0x23/0x30 [ 2199.512093][T11927] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2199.518614][T11927] ? security_inode_mkdir+0xe4/0x120 [ 2199.524106][T11927] vfs_mkdir+0x42e/0x670 [ 2199.528740][T11927] do_mkdirat+0x234/0x2a0 [ 2199.533098][T11927] ? __ia32_sys_mknod+0xb0/0xb0 [ 2199.538397][T11927] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2199.543887][T11927] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2199.547606][T11966] dccp_invalid_packet: P.Data Offset(0) too small [ 2199.550372][T11927] ? do_syscall_64+0x26/0x680 [ 2199.550391][T11927] ? lockdep_hardirqs_on+0x418/0x5d0 06:55:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xa00]}) 06:55:56 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000000)='\t', 0xffffffffffffff30, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:56 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 2199.550412][T11927] __x64_sys_mkdir+0x5c/0x80 [ 2199.550427][T11927] do_syscall_64+0xfd/0x680 [ 2199.550447][T11927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2199.550467][T11927] RIP: 0033:0x458be7 [ 2199.582275][T11927] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2199.582284][T11927] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2199.582299][T11927] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2199.582308][T11927] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2199.582317][T11927] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2199.582326][T11927] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2199.582333][T11927] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:56 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2199.671849][T11970] dccp_invalid_packet: P.Data Offset(0) too small [ 2199.708805][T11971] Unknown ioctl 1074029064 06:55:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x600801, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000140)={0x8, 0x6, 0x9c5, 0x8, 'syz1\x00', 0x1}) r4 = semget$private(0x0, 0x1, 0x20) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) semtimedop(r4, &(0x7f0000000180)=[{0x1, 0x80000001, 0x800}, {0x2, 0x5, 0x800}, {0x4, 0x10001, 0x1000}, {0x2, 0x0, 0x1000}], 0x4, &(0x7f0000000200)={r5, r6+10000000}) 06:55:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xb00]}) 06:55:57 executing program 0 (fault-call:0 fault-nth:41): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:57 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100, 0x200000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000140)=0x3) 06:55:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x4305000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe80, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2200.245071][T12079] dccp_invalid_packet: P.Data Offset(0) too small [ 2200.267419][T12081] dccp_invalid_packet: P.Data Offset(0) too small 06:55:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x800e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xc00]}) 06:55:57 executing program 1: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)='\b', 0x1, 0xfffffffffffffffe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) signalfd(r0, &(0x7f0000000300)={0x8}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x12, 0x0, 0x298}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x0, 0x2) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000400), 0x10) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0xcc0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @local}}, 0xf, 0x1ff, 0x1, 0x38}, 0x98) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') ioctl$SIOCNRDECOBS(r4, 0x89e2) r5 = getpgrp(0xffffffffffffffff) r6 = syz_open_dev$dspn(0x0, 0x0, 0x20000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getuid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) accept4$netrom(r6, &(0x7f0000000000)={{0x3, @rose}, [@bcast, @netrom, @remote, @null, @remote, @netrom, @bcast]}, &(0x7f0000000100)=0x48, 0x80000) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x5) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0) r8 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write(r7, &(0x7f0000000600)="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", 0x200) sendfile(r7, r8, 0x0, 0x10000) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x74, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000000000}, r5, 0xffffffffffffffff, r2, 0x0) preadv(r4, &(0x7f00000017c0), 0x3da, 0x0) [ 2200.451946][T12193] dccp_invalid_packet: P.Data Offset(0) too small [ 2200.464260][T12191] FAULT_INJECTION: forcing a failure. [ 2200.464260][T12191] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2200.477585][T12191] CPU: 1 PID: 12191 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2200.485501][T12191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2200.495579][T12191] Call Trace: [ 2200.498921][T12191] dump_stack+0x172/0x1f0 [ 2200.503289][T12191] should_fail.cold+0xa/0x15 [ 2200.507904][T12191] ? is_bpf_text_address+0xac/0x170 [ 2200.513128][T12191] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2200.518956][T12191] ? is_bpf_text_address+0xac/0x170 [ 2200.524181][T12191] should_fail_alloc_page+0x50/0x60 [ 2200.529404][T12191] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2200.535166][T12191] ? __lock_acquire+0x54f/0x5490 [ 2200.540253][T12191] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2200.546004][T12191] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2200.551969][T12191] cache_grow_begin+0x9d/0x650 [ 2200.556755][T12191] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2200.563258][T12191] __kmalloc+0x67c/0x740 [ 2200.567530][T12191] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2200.573501][T12191] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2200.579358][T12191] ? tomoyo_path_number_perm+0x193/0x520 [ 2200.592407][T12191] tomoyo_path_number_perm+0x1dd/0x520 [ 2200.598244][T12191] ? tomoyo_path_number_perm+0x193/0x520 [ 2200.603908][T12191] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2200.609821][T12191] ? debug_check_no_obj_freed+0x200/0x464 [ 2200.615581][T12191] ? kasan_check_write+0x14/0x20 [ 2200.620659][T12191] ? putname+0xef/0x130 [ 2200.625131][T12191] ? putname+0xef/0x130 [ 2200.629391][T12191] ? putname+0xef/0x130 [ 2200.633654][T12191] ? rcu_read_lock_sched_held+0x110/0x130 [ 2200.639395][T12191] ? kmem_cache_free+0x222/0x260 [ 2200.644365][T12191] tomoyo_path_mkdir+0xaa/0xf0 [ 2200.649154][T12191] ? tomoyo_file_ioctl+0x30/0x30 [ 2200.654110][T12191] ? kern_path_mountpoint+0x40/0x40 [ 2200.659514][T12191] ? strncpy_from_user+0x2ac/0x380 [ 2200.664653][T12191] security_path_mkdir+0x113/0x170 [ 2200.669892][T12191] do_mkdirat+0x160/0x2a0 [ 2200.674264][T12191] ? __ia32_sys_mknod+0xb0/0xb0 [ 2200.679282][T12191] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2200.684790][T12191] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2200.691022][T12191] ? do_syscall_64+0x26/0x680 [ 2200.695838][T12191] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2200.701152][T12191] __x64_sys_mkdir+0x5c/0x80 [ 2200.705774][T12191] do_syscall_64+0xfd/0x680 [ 2200.710742][T12191] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2200.716649][T12191] RIP: 0033:0x458be7 [ 2200.720567][T12191] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2200.740598][T12191] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 06:55:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x29) tkill(r3, 0x1000000000016) [ 2200.749292][T12191] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2200.757283][T12191] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2200.765608][T12191] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2200.773600][T12191] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2200.781761][T12191] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:55:57 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8035000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:57 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xd00]}) [ 2200.821772][T12198] dccp_invalid_packet: P.Data Offset(0) too small [ 2200.894394][ T26] audit: type=1800 audit(1562050557.892:121): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16523 res=0 06:55:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}}, 0x0) tkill(r3, 0x1000000000016) [ 2200.954619][ T26] audit: type=1804 audit(1562050557.922:122): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir838270573/syzkaller.B2kheE/3564/file0" dev="sda1" ino=16523 res=1 [ 2201.103512][T12309] dccp_invalid_packet: P.Data Offset(0) too small [ 2201.127250][T12311] dccp_invalid_packet: P.Data Offset(0) too small 06:55:58 executing program 0 (fault-call:0 fault-nth:42): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:55:58 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3580, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xe80]}) 06:55:58 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000000)="2008c7b3f70000932c0b6b366b400688a4", 0x11, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:58 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:58 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:58 executing program 1: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x113a02) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x100000001, @null, @bpq0='bpq0\x00', 0x4, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) keyctl$read(0xb, r0, 0x0, 0x0) 06:55:58 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x1300]}) 06:55:58 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x86ddffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:58 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:55:58 executing program 1: r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='\x00', 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x2c, r0) keyctl$read(0xb, r1, 0x0, 0x0) [ 2201.655179][T12325] FAULT_INJECTION: forcing a failure. [ 2201.655179][T12325] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.674540][T12325] CPU: 1 PID: 12325 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2201.682455][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2201.692611][T12325] Call Trace: [ 2201.695930][T12325] dump_stack+0x172/0x1f0 [ 2201.700424][T12325] should_fail.cold+0xa/0x15 [ 2201.705209][T12325] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2201.711041][T12325] ? ___might_sleep+0x163/0x280 [ 2201.716007][T12325] __should_failslab+0x121/0x190 [ 2201.721048][T12325] ? ratelimit_state_init+0xb0/0xb0 [ 2201.721065][T12325] should_failslab+0x9/0x14 [ 2201.721079][T12325] kmem_cache_alloc+0x2af/0x6f0 [ 2201.721101][T12325] ? ebitmap_destroy+0xba/0xf0 [ 2201.740753][T12325] ? avc_has_perm+0x379/0x610 [ 2201.745452][T12325] ? ratelimit_state_init+0xb0/0xb0 [ 2201.745468][T12325] ext4_alloc_inode+0x1f/0x640 [ 2201.745482][T12325] ? ratelimit_state_init+0xb0/0xb0 [ 2201.745503][T12325] alloc_inode+0x68/0x1e0 [ 2201.755691][T12325] new_inode_pseudo+0x19/0xf0 [ 2201.755716][T12325] new_inode+0x1f/0x40 [ 2201.755738][T12325] __ext4_new_inode+0x377/0x5440 [ 2201.766834][T12325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2201.766849][T12325] ? __dquot_initialize+0x525/0xd80 [ 2201.766867][T12325] ? ext4_free_inode+0x1450/0x1450 [ 2201.766885][T12325] ? dqget+0x10c0/0x10c0 [ 2201.766906][T12325] ? security_transition_sid+0xf1/0x190 [ 2201.807135][T12325] ? selinux_determine_inode_label+0x1b1/0x390 [ 2201.813425][T12325] ext4_mkdir+0x3d5/0xdf0 [ 2201.817795][T12325] ? ext4_init_dot_dotdot+0x520/0x520 [ 2201.823283][T12325] ? selinux_inode_mkdir+0x23/0x30 [ 2201.828429][T12325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2201.834894][T12325] ? security_inode_mkdir+0xe4/0x120 [ 2201.840356][T12325] vfs_mkdir+0x42e/0x670 [ 2201.844626][T12325] do_mkdirat+0x234/0x2a0 [ 2201.849110][T12325] ? __ia32_sys_mknod+0xb0/0xb0 [ 2201.853981][T12325] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2201.860026][T12325] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2201.866153][T12325] ? do_syscall_64+0x26/0x680 [ 2201.871049][T12325] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2201.876489][T12325] __x64_sys_mkdir+0x5c/0x80 [ 2201.881334][T12325] do_syscall_64+0xfd/0x680 [ 2201.886130][T12325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2201.892124][T12325] RIP: 0033:0x458be7 [ 2201.896049][T12325] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2201.915689][T12325] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2201.924226][T12325] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2201.932235][T12325] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2201.940460][T12325] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2201.948717][T12325] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2201.957135][T12325] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfffffffffffffffa, 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f0000000140)={0x0, 0x7530}, 0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:01 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8847000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x1400]}) 06:56:01 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:01 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000240)={r2, 0x2, &(0x7f0000000140)=[0x1, 0x6], &(0x7f0000000180)=[0x1], 0x1, 0x1, 0x352426b4, &(0x7f00000001c0)=[0x61], &(0x7f0000000200)=[0x1f, 0x2, 0x8000]}) 06:56:01 executing program 0 (fault-call:0 fault-nth:43): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2204.169989][T12554] FAULT_INJECTION: forcing a failure. [ 2204.169989][T12554] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.207171][T12554] CPU: 1 PID: 12554 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 06:56:01 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2204.215105][T12554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2204.225181][T12554] Call Trace: [ 2204.228487][T12554] dump_stack+0x172/0x1f0 [ 2204.232833][T12554] should_fail.cold+0xa/0x15 [ 2204.237461][T12554] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2204.243377][T12554] ? ___might_sleep+0x163/0x280 [ 2204.248246][T12554] __should_failslab+0x121/0x190 [ 2204.253215][T12554] should_failslab+0x9/0x14 [ 2204.257726][T12554] kmem_cache_alloc+0x2af/0x6f0 [ 2204.257742][T12554] ? __put_user_ns+0x70/0x70 [ 2204.257760][T12554] ? rcu_read_lock_sched_held+0x110/0x130 [ 2204.257783][T12554] security_inode_alloc+0x39/0x160 [ 2204.272900][T12554] inode_init_always+0x56e/0xb50 [ 2204.272919][T12554] alloc_inode+0x89/0x1e0 [ 2204.272936][T12554] new_inode_pseudo+0x19/0xf0 [ 2204.272953][T12554] new_inode+0x1f/0x40 [ 2204.272971][T12554] __ext4_new_inode+0x377/0x5440 [ 2204.272997][T12554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2204.273012][T12554] ? __dquot_initialize+0x525/0xd80 [ 2204.273028][T12554] ? ext4_free_inode+0x1450/0x1450 [ 2204.273046][T12554] ? dqget+0x10c0/0x10c0 [ 2204.273060][T12554] ? security_transition_sid+0xf1/0x190 [ 2204.273078][T12554] ? selinux_determine_inode_label+0x1b1/0x390 [ 2204.273101][T12554] ext4_mkdir+0x3d5/0xdf0 [ 2204.273126][T12554] ? ext4_init_dot_dotdot+0x520/0x520 [ 2204.273143][T12554] ? selinux_inode_mkdir+0x23/0x30 [ 2204.273157][T12554] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2204.273173][T12554] ? security_inode_mkdir+0xe4/0x120 [ 2204.273192][T12554] vfs_mkdir+0x42e/0x670 [ 2204.273211][T12554] do_mkdirat+0x234/0x2a0 [ 2204.273229][T12554] ? __ia32_sys_mknod+0xb0/0xb0 [ 2204.273245][T12554] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2204.273262][T12554] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2204.273276][T12554] ? do_syscall_64+0x26/0x680 [ 2204.273291][T12554] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2204.273310][T12554] __x64_sys_mkdir+0x5c/0x80 [ 2204.273330][T12554] do_syscall_64+0xfd/0x680 [ 2204.403864][T12554] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2204.409759][T12554] RIP: 0033:0x458be7 [ 2204.413658][T12554] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2204.433279][T12554] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2204.441709][T12554] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2204.449683][T12554] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2204.457754][T12554] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:56:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2000]}) 06:56:01 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8848000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2204.465730][T12554] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2204.473707][T12554] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:01 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:01 executing program 1: prctl$PR_SVE_SET_VL(0x32, 0x14d5b) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xfffffffffffffe14) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) 06:56:01 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8864000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2204.577259][T12666] net_ratelimit: 6 callbacks suppressed [ 2204.577269][T12666] dccp_invalid_packet: P.Data Offset(0) too small 06:56:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl(r0, 0x5, &(0x7f0000000080)="6bd4e8e2e98e227e29ee95bfa149db7feb1196e2341b2d7a48e50b4d2b7963105afa632450a5ca405cf812ade30cb011968039") madvise(&(0x7f0000309000/0x2000)=nil, 0x2000, 0x1000000000009) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:01 executing program 0 (fault-call:0 fault-nth:44): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2204.658080][T12671] dccp_invalid_packet: P.Data Offset(0) too small [ 2204.722358][T12685] FAULT_INJECTION: forcing a failure. [ 2204.722358][T12685] name failslab, interval 1, probability 0, space 0, times 0 [ 2204.735093][T12685] CPU: 0 PID: 12685 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2204.743004][T12685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2204.753075][T12685] Call Trace: [ 2204.756388][T12685] dump_stack+0x172/0x1f0 [ 2204.760741][T12685] should_fail.cold+0xa/0x15 [ 2204.765353][T12685] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2204.771182][T12685] __should_failslab+0x121/0x190 [ 2204.776145][T12685] should_failslab+0x9/0x14 [ 2204.780667][T12685] __kmalloc+0x71/0x740 [ 2204.784843][T12685] ? context_struct_to_string+0x368/0x950 [ 2204.790582][T12685] context_struct_to_string+0x368/0x950 [ 2204.796149][T12685] ? dump_masked_av_helper+0xa0/0xa0 [ 2204.801449][T12685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2204.804841][T12783] dccp_invalid_packet: P.Data Offset(0) too small [ 2204.807703][T12685] ? sidtab_search_core+0x164/0x210 [ 2204.807728][T12685] security_sid_to_context_core.isra.0+0x2fb/0x390 [ 2204.807757][T12685] security_sid_to_context_force+0x3a/0x50 [ 2204.831649][T12685] selinux_inode_init_security+0x555/0x7b0 [ 2204.837473][T12685] ? selinux_inode_create+0x30/0x30 [ 2204.839689][T12784] dccp_invalid_packet: P.Data Offset(0) too small [ 2204.842690][T12685] ? lock_downgrade+0x880/0x880 [ 2204.842710][T12685] ? kasan_check_read+0x11/0x20 [ 2204.842734][T12685] security_inode_init_security+0x1ad/0x3b0 [ 2204.842748][T12685] ? ext4_init_acl+0x290/0x290 [ 2204.842767][T12685] ? security_skb_classify_flow+0xb0/0xb0 [ 2204.842791][T12685] ? posix_acl_create+0x11a/0x430 [ 2204.880621][T12685] ? lock_downgrade+0x880/0x880 [ 2204.885495][T12685] ? ext4_set_acl+0x4f0/0x4f0 [ 2204.890183][T12685] ? _raw_spin_unlock+0x2d/0x50 [ 2204.895068][T12685] ext4_init_security+0x34/0x40 [ 2204.899939][T12685] __ext4_new_inode+0x449c/0x5440 [ 2204.904990][T12685] ? ext4_free_inode+0x1450/0x1450 [ 2204.910126][T12685] ? dqget+0x10c0/0x10c0 [ 2204.914389][T12685] ? selinux_determine_inode_label+0x1b1/0x390 [ 2204.920578][T12685] ext4_mkdir+0x3d5/0xdf0 [ 2204.924973][T12685] ? ext4_init_dot_dotdot+0x520/0x520 [ 2204.926620][T12786] dccp_invalid_packet: P.Data Offset(0) too small [ 2204.930365][T12685] ? selinux_inode_mkdir+0x23/0x30 [ 2204.930384][T12685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2204.930400][T12685] ? security_inode_mkdir+0xe4/0x120 [ 2204.930422][T12685] vfs_mkdir+0x42e/0x670 [ 2204.955760][T12787] dccp_invalid_packet: P.Data Offset(0) too small [ 2204.957659][T12685] do_mkdirat+0x234/0x2a0 [ 2204.957679][T12685] ? __ia32_sys_mknod+0xb0/0xb0 [ 2204.957702][T12685] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2204.978709][T12685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2204.984789][T12685] ? do_syscall_64+0x26/0x680 [ 2204.989475][T12685] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2204.994775][T12685] __x64_sys_mkdir+0x5c/0x80 [ 2204.999388][T12685] do_syscall_64+0xfd/0x680 [ 2205.003912][T12685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2205.009821][T12685] RIP: 0033:0x458be7 06:56:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2100]}) 06:56:01 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x3580]}) 06:56:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x3f00]}) [ 2205.013741][T12685] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2205.033546][T12685] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2205.041976][T12685] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2205.049961][T12685] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2205.050479][T12789] dccp_invalid_packet: P.Data Offset(0) too small [ 2205.057951][T12685] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a 06:56:02 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = dup(0xffffffffffffff9c) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x3, 0x81}}, 0x28) 06:56:02 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88a8ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:02 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2205.057960][T12685] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2205.057967][T12685] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:02 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x88caffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:02 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:02 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x10200) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000140)=0x8, 0x4) keyctl$read(0xb, r0, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='veth1_to_hsr\x00') [ 2205.181791][T12863] dccp_invalid_packet: P.Data Offset(0) too small 06:56:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4000]}) [ 2205.336118][T12911] dccp_invalid_packet: P.Data Offset(0) too small [ 2205.350050][T12933] dccp_invalid_packet: P.Data Offset(0) too small 06:56:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) flistxattr(r0, &(0x7f0000000140)=""/224, 0xe0) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000100013) 06:56:05 executing program 0 (fault-call:0 fault-nth:45): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:05 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8906000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:05 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4001]}) 06:56:05 executing program 1: r0 = add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="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", 0x1000, 0x0) keyctl$read(0xb, r0, 0x0, 0xfffffffffffffd3f) 06:56:05 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x8dffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2208.190982][T13018] FAULT_INJECTION: forcing a failure. [ 2208.190982][T13018] name failslab, interval 1, probability 0, space 0, times 0 06:56:05 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4305]}) 06:56:05 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00', 0xffffffffffffffff}, 0x30) r2 = add_key(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="dc2482e39d74d882d1487f170542c1af32ca00a80e1eb0455b6016bfb6c60de98aae3d51c6c837ca185c4d6311f65253a7", 0x31, 0xffffffffffffffff) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="473b7748a30a3a3646f0e008fb04e4d2504ac85a1efccfe042a58e6748880ed7ac6ac51405b9b891091a0cb54318efc8f0e3212b002f73207da26e628b9f7ff7df7caaab50cae6dc2c67d867b751c6debf88981670d5d4e5f0760e3f7d52d278925b3b160e89414bb893351a66d5e5571c2b7587bdcab3738a3ca5e3f2c402cf30703279433a60e613328ce1c12a9041f640a97b86b7db88976a1c800e4cf6eb91f95bea2ced5b8e3d4ea3649cb2555bd036", 0xb2, r2) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x1, 0x10001, 0xd55b, 0x0, 0x1, 0x220, 0x1, 0x0, 0x8000, 0xfffffffffffffff7, 0x5, 0x5, 0x3ff, 0x8, 0x5, 0x36a0, 0x8000, 0x8001, 0x0, 0x28a6, 0x9, 0xa98f, 0x0, 0x2, 0x0, 0xb5, 0x2, 0x7, 0x5, 0x101, 0xdc2, 0xb033, 0x462483db, 0x1, 0x50000000000, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x44, 0x1, 0xfffffffffffffc01, 0x5, 0xfffffffffffffffc, 0x5, 0x5}, r0, 0x4, r1, 0x8) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) [ 2208.303035][T13018] CPU: 0 PID: 13018 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2208.310969][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2208.321026][T13018] Call Trace: [ 2208.324336][T13018] dump_stack+0x172/0x1f0 [ 2208.328680][T13018] should_fail.cold+0xa/0x15 [ 2208.333279][T13018] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2208.339103][T13018] ? ___might_sleep+0x163/0x280 [ 2208.343973][T13018] __should_failslab+0x121/0x190 [ 2208.348918][T13018] should_failslab+0x9/0x14 [ 2208.353515][T13018] __kmalloc+0x2d9/0x740 [ 2208.357772][T13018] ? ext4_find_extent+0x76e/0x9d0 [ 2208.362819][T13018] ext4_find_extent+0x76e/0x9d0 [ 2208.367686][T13018] ext4_ext_map_blocks+0x1c3/0x5250 [ 2208.372886][T13018] ? mark_held_locks+0xf0/0xf0 [ 2208.377661][T13018] ? ext4_ext_release+0x10/0x10 [ 2208.382523][T13018] ? lock_acquire+0x16f/0x3f0 [ 2208.387215][T13018] ? ext4_map_blocks+0x3fd/0x18e0 [ 2208.392255][T13018] ? kasan_check_write+0x14/0x20 [ 2208.397214][T13018] ext4_map_blocks+0xec7/0x18e0 [ 2208.402108][T13018] ? ext4_issue_zeroout+0x190/0x190 [ 2208.407319][T13018] ? kasan_check_write+0x14/0x20 [ 2208.412261][T13018] ext4_getblk+0xc4/0x510 [ 2208.412352][T13018] ? ext4_iomap_begin+0xfe0/0xfe0 [ 2208.412376][T13018] ext4_bread+0x8f/0x230 [ 2208.421708][T13018] ? ext4_getblk+0x510/0x510 [ 2208.421735][T13018] ext4_append+0x155/0x370 [ 2208.421758][T13018] ext4_mkdir+0x61b/0xdf0 [ 2208.421785][T13018] ? ext4_init_dot_dotdot+0x520/0x520 [ 2208.421803][T13018] ? selinux_inode_mkdir+0x23/0x30 [ 2208.421819][T13018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2208.421836][T13018] ? security_inode_mkdir+0xe4/0x120 [ 2208.421857][T13018] vfs_mkdir+0x42e/0x670 [ 2208.465649][T13018] do_mkdirat+0x234/0x2a0 [ 2208.470080][T13018] ? __ia32_sys_mknod+0xb0/0xb0 [ 2208.474944][T13018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2208.480411][T13018] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2208.486494][T13018] ? do_syscall_64+0x26/0x680 [ 2208.491181][T13018] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2208.496480][T13018] __x64_sys_mkdir+0x5c/0x80 [ 2208.496500][T13018] do_syscall_64+0xfd/0x680 [ 2208.496521][T13018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2208.496540][T13018] RIP: 0033:0x458be7 [ 2208.505785][T13018] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2208.505794][T13018] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2208.505809][T13018] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 06:56:05 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RREADDIR(r1, &(0x7f0000000100)={0x2a, 0x29, 0x2, {0x7, [{{0x0, 0x2, 0x7}, 0x8, 0x7, 0x7, './file0'}]}}, 0x2a) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:05 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4788]}) [ 2208.505818][T13018] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2208.505827][T13018] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2208.505835][T13018] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2208.505851][T13018] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40080, 0x20) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000001c0)={0x5000, 0x0, 0xbbc, 0x8001, 0x1ff}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() sysinfo(&(0x7f0000000140)=""/103) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x30) 06:56:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xf5ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = dup(0xffffffffffffffff) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000000)) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000100)={0x31, 0x4, 0x0, {0x3, 0x1ff, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4800]}) 06:56:06 executing program 0 (fault-call:0 fault-nth:46): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2209.193199][T13254] FAULT_INJECTION: forcing a failure. [ 2209.193199][T13254] name failslab, interval 1, probability 0, space 0, times 0 [ 2209.222498][T13254] CPU: 1 PID: 13254 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2209.230419][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2209.240476][T13254] Call Trace: [ 2209.243785][T13254] dump_stack+0x172/0x1f0 [ 2209.248137][T13254] should_fail.cold+0xa/0x15 [ 2209.252759][T13254] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2209.258582][T13254] ? ___might_sleep+0x163/0x280 [ 2209.263444][T13254] __should_failslab+0x121/0x190 [ 2209.268392][T13254] should_failslab+0x9/0x14 [ 2209.272910][T13254] kmem_cache_alloc_trace+0x2ce/0x750 [ 2209.278291][T13254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2209.284532][T13254] ? _copy_from_user+0xdd/0x150 [ 2209.289397][T13254] copy_mount_options+0x5c/0x3a0 [ 2209.294348][T13254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2209.300597][T13254] ksys_mount+0xa7/0x150 [ 2209.304934][T13254] __x64_sys_mount+0xbe/0x150 [ 2209.309624][T13254] do_syscall_64+0xfd/0x680 [ 2209.314139][T13254] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2209.320036][T13254] RIP: 0033:0x45c21a [ 2209.323941][T13254] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 06:56:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4888]}) 06:56:06 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x801, 0x0) recvfrom$netrom(r0, &(0x7f0000000100)=""/38, 0x26, 0x0, &(0x7f0000000140)={{0x3, @default}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default]}, 0x48) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) keyctl$read(0xb, r1, 0x0, 0x0) 06:56:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfd00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2209.343553][T13254] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2209.343567][T13254] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2209.343576][T13254] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2209.343584][T13254] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2209.343593][T13254] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2209.343600][T13254] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 0 (fault-call:0 fault-nth:47): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4c00]}) 06:56:06 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0xfffffffffffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2209.675918][T13491] net_ratelimit: 10 callbacks suppressed [ 2209.675929][T13491] dccp_invalid_packet: P.Data Offset(0) too small [ 2209.696567][T13495] dccp_invalid_packet: P.Data Offset(0) too small [ 2209.715739][T13493] FAULT_INJECTION: forcing a failure. [ 2209.715739][T13493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2209.729069][T13493] CPU: 1 PID: 13493 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2209.736972][T13493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2209.747038][T13493] Call Trace: [ 2209.750350][T13493] dump_stack+0x172/0x1f0 [ 2209.754723][T13493] should_fail.cold+0xa/0x15 [ 2209.759327][T13493] ? mark_held_locks+0xf0/0xf0 [ 2209.765635][T13493] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2209.765657][T13493] ? mark_held_locks+0xf0/0xf0 [ 2209.765675][T13493] should_fail_alloc_page+0x50/0x60 [ 2209.765702][T13493] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2209.786788][T13493] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2209.792432][T13493] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2209.798158][T13493] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2209.803791][T13493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2209.803814][T13493] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2209.803834][T13493] cache_grow_begin+0x9d/0x650 [ 2209.803849][T13493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2209.803865][T13493] kmem_cache_alloc_trace+0x67c/0x750 [ 2209.803893][T13493] copy_mount_options+0x5c/0x3a0 [ 2209.826910][T13493] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2209.826937][T13493] ksys_mount+0xa7/0x150 [ 2209.847672][T13493] __x64_sys_mount+0xbe/0x150 [ 2209.852360][T13493] do_syscall_64+0xfd/0x680 [ 2209.852382][T13493] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2209.852393][T13493] RIP: 0033:0x45c21a [ 2209.852413][T13493] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2209.886245][T13493] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2209.894665][T13493] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2209.902649][T13493] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2209.910628][T13493] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2209.918596][T13493] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 06:56:06 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/full\x00', 0x202100, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001700)={0x10001, 0x20d, 0x0, 0x7, 0x0}, &(0x7f0000001740)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001780)={r1, 0xff, 0x1e, 0x2}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) 06:56:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6000]}) 06:56:06 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8906, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f0000000080)='/dev/snd/controlC#\x00'}, 0x30) r4 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r3, r4, 0x5, &(0x7f0000000200)={0x1c, 0x86, 0x80}) r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) syz_init_net_socket$ax25(0x3, 0x7, 0xcf) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) [ 2209.926571][T13493] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2209.998398][T13542] dccp_invalid_packet: P.Data Offset(0) too small [ 2210.019070][T13563] dccp_invalid_packet: P.Data Offset(0) too small 06:56:07 executing program 0 (fault-call:0 fault-nth:48): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6488]}) 06:56:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="0000007527bb0f86f7114f01f3c52e11cdfea1a5b4376fec1163130d6923c9b6e6bb299775da68e360f16de000448d3038b28cd4b7c16e88ae9f95a7e78e56bfc89f536fe4f98890119ae7a913fdcdfdcebe8594847e1ff39f496cb3450ff4cb1581fd7455548b9c90d5d0a0ba69e721ee1423e9f2a4c325879cdd84139d61b97438e93a469c8514ffbc68a99136c2b2", 0xfffffffffffffdb0, r0) openat$selinux_context(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/context\x00', 0x2, 0x0) keyctl$read(0xb, r1, 0x0, 0x0) 06:56:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x20000) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000000140)={0x2, 0x8}) tkill(r3, 0x1000000000016) 06:56:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2210.246348][T13624] dccp_invalid_packet: P.Data Offset(0) too small 06:56:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6800]}) [ 2210.292356][T13663] dccp_invalid_packet: P.Data Offset(0) too small [ 2210.317661][T13664] FAULT_INJECTION: forcing a failure. [ 2210.317661][T13664] name failslab, interval 1, probability 0, space 0, times 0 [ 2210.360781][T13664] CPU: 1 PID: 13664 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2210.368715][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2210.378770][T13664] Call Trace: [ 2210.382075][T13664] dump_stack+0x172/0x1f0 [ 2210.386428][T13664] should_fail.cold+0xa/0x15 [ 2210.391034][T13664] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2210.396851][T13664] ? ___might_sleep+0x163/0x280 [ 2210.401723][T13664] __should_failslab+0x121/0x190 [ 2210.406676][T13664] should_failslab+0x9/0x14 [ 2210.411219][T13664] kmem_cache_alloc+0x2af/0x6f0 [ 2210.416079][T13664] ? find_held_lock+0x35/0x130 [ 2210.420848][T13664] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2210.426485][T13664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2210.432742][T13664] getname_flags+0xd6/0x5b0 [ 2210.437257][T13664] user_path_at_empty+0x2f/0x50 [ 2210.442124][T13664] do_mount+0x150/0x1c00 [ 2210.446378][T13664] ? copy_mount_options+0x5c/0x3a0 [ 2210.451504][T13664] ? copy_mount_string+0x40/0x40 [ 2210.456465][T13664] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2210.462716][T13664] ? _copy_from_user+0xdd/0x150 [ 2210.462735][T13664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2210.462750][T13664] ? copy_mount_options+0x280/0x3a0 [ 2210.462768][T13664] ksys_mount+0xdb/0x150 [ 2210.462786][T13664] __x64_sys_mount+0xbe/0x150 [ 2210.462810][T13664] do_syscall_64+0xfd/0x680 [ 2210.473895][T13664] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2210.473907][T13664] RIP: 0033:0x45c21a 06:56:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = fcntl$getown(r0, 0x9) lookup_dcookie(0x8, &(0x7f0000000280)=""/72, 0x48) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r3) r4 = gettid() r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5c) ioctl$TIOCLINUX2(r5, 0x541c, &(0x7f0000000180)={0x2, 0x3, 0xfffffffffffffffb, 0x882, 0x9, 0x8}) r6 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000200)={0x40, 0x2, 0x7ff, 0x400}, &(0x7f0000000240)=0x10) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:56:07 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "3c454008d51cdaef", "62640308b80760fc6816bef55e2713e5", '7Tje', "dca985aa0d3d6caf"}, 0x8a615e4a96820b01) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000180)={{0x2, 0x4e22, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x8, {0x2, 0x4e24, @remote}, 'vcan0\x00'}) [ 2210.473923][T13664] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2210.473929][T13664] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2210.473941][T13664] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2210.473949][T13664] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2210.473956][T13664] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 06:56:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2210.473963][T13664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2210.473971][T13664] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2210.517984][T13737] dccp_invalid_packet: P.Data Offset(0) too small [ 2210.570059][T13742] dccp_invalid_packet: P.Data Offset(0) too small 06:56:07 executing program 0 (fault-call:0 fault-nth:49): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6c00]}) 06:56:07 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() write$P9_RSTATu(r1, &(0x7f0000000300)={0x63, 0x7d, 0x2, {{0x0, 0x40, 0x8, 0x3, {0x44, 0x0, 0x6}, 0x8000000, 0x10000, 0x8, 0x2, 0x5, 'user\x00', 0x3, 'syz', 0x2, ')^', 0x3, 'syz'}, 0xe, 'user$vboxnet1&', r2, r3, r4}}, 0x63) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:07 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:07 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2210.832978][T13849] dccp_invalid_packet: P.Data Offset(0) too small 06:56:07 executing program 1: r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="5dcbba0208823037f42170a40c45a9bb042f4f466bc4910fd4f67d9a7033cce628b25c46f2c0e003b040694b0570320107c76cb5e236be24fba2af110eb1555fa105e889f8b8cd95", 0x48, 0x0) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000200)=0x4, &(0x7f0000000240)=0x4) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)="ff", 0x1, r0) keyctl$read(0xb, r2, 0x0, 0x38a) [ 2210.888391][T13888] dccp_invalid_packet: P.Data Offset(0) too small [ 2210.920180][T13891] FAULT_INJECTION: forcing a failure. [ 2210.920180][T13891] name failslab, interval 1, probability 0, space 0, times 0 06:56:07 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7400]}) [ 2211.006574][T13891] CPU: 1 PID: 13891 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2211.014509][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2211.024570][T13891] Call Trace: [ 2211.027877][T13891] dump_stack+0x172/0x1f0 [ 2211.032225][T13891] should_fail.cold+0xa/0x15 [ 2211.036828][T13891] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2211.042650][T13891] ? ___might_sleep+0x163/0x280 [ 2211.047520][T13891] __should_failslab+0x121/0x190 [ 2211.052471][T13891] should_failslab+0x9/0x14 [ 2211.056981][T13891] __kmalloc+0x2d9/0x740 [ 2211.061233][T13891] ? __lock_acquire+0x54f/0x5490 [ 2211.066176][T13891] ? save_stack+0x5c/0x90 [ 2211.070506][T13891] ? save_stack+0x23/0x90 [ 2211.074847][T13891] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2211.080234][T13891] tomoyo_encode2.part.0+0xf5/0x400 [ 2211.085444][T13891] tomoyo_encode+0x2b/0x50 [ 2211.089954][T13891] tomoyo_mount_acl+0xe0/0x840 [ 2211.094733][T13891] ? avc_has_perm+0x379/0x610 [ 2211.099419][T13891] ? find_held_lock+0x35/0x130 [ 2211.104192][T13891] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2211.109749][T13891] ? mark_held_locks+0xf0/0xf0 [ 2211.114517][T13891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2211.120783][T13891] ? lock_acquire+0x16f/0x3f0 [ 2211.125472][T13891] ? tomoyo_mount_permission+0x10a/0x410 [ 2211.131116][T13891] tomoyo_mount_permission+0x16a/0x410 [ 2211.136579][T13891] ? tomoyo_mount_permission+0x10a/0x410 [ 2211.142214][T13891] ? tomoyo_mount_acl+0x840/0x840 [ 2211.147247][T13891] ? inode_has_perm+0x1b0/0x230 [ 2211.152113][T13891] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2211.157665][T13891] ? strncpy_from_user+0x2ac/0x380 [ 2211.162817][T13891] tomoyo_sb_mount+0x35/0x40 [ 2211.167417][T13891] security_sb_mount+0x87/0xd0 [ 2211.172194][T13891] do_mount+0x1d4/0x1c00 [ 2211.176452][T13891] ? copy_mount_options+0x5c/0x3a0 [ 2211.181571][T13891] ? copy_mount_string+0x40/0x40 [ 2211.186520][T13891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2211.192765][T13891] ? _copy_from_user+0xdd/0x150 [ 2211.197645][T13891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2211.203891][T13891] ? copy_mount_options+0x280/0x3a0 [ 2211.209103][T13891] ksys_mount+0xdb/0x150 [ 2211.213354][T13891] __x64_sys_mount+0xbe/0x150 [ 2211.219194][T13891] do_syscall_64+0xfd/0x680 [ 2211.223717][T13891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2211.229614][T13891] RIP: 0033:0x45c21a [ 2211.233514][T13891] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2211.253123][T13891] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2211.261902][T13891] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2211.269885][T13891] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2211.277878][T13891] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2211.286037][T13891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2211.294019][T13891] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:08 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:08 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7a00]}) 06:56:08 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x80, 0x18000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0xda5a, 0x9}, 'port1\x00', 0x20, 0x20, 0x8, 0x8, 0xffffffffffffffe0, 0x1, 0x8, 0x0, 0x4, 0x4}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:08 executing program 0 (fault-call:0 fault-nth:50): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:08 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x101040) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) getpgid(r2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) keyctl$read(0xb, r0, 0x0, 0x0) [ 2211.628412][T14080] FAULT_INJECTION: forcing a failure. [ 2211.628412][T14080] name failslab, interval 1, probability 0, space 0, times 0 [ 2211.643148][T14080] CPU: 0 PID: 14080 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2211.651074][T14080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2211.661137][T14080] Call Trace: [ 2211.664449][T14080] dump_stack+0x172/0x1f0 [ 2211.668806][T14080] should_fail.cold+0xa/0x15 [ 2211.673413][T14080] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2211.679238][T14080] ? mark_held_locks+0xf0/0xf0 [ 2211.684020][T14080] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2211.689754][T14080] ? __es_tree_search.isra.0+0x1bf/0x230 [ 2211.695414][T14080] __should_failslab+0x121/0x190 [ 2211.700371][T14080] should_failslab+0x9/0x14 [ 2211.704915][T14080] kmem_cache_alloc+0x47/0x6f0 [ 2211.709867][T14080] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2211.715613][T14080] ? ext4_es_can_be_merged+0x1a3/0x2a0 [ 2211.721081][T14080] ? ext4_es_scan+0x730/0x730 [ 2211.725785][T14080] ? do_raw_write_lock+0x124/0x290 [ 2211.730915][T14080] __es_insert_extent+0x2cc/0xf20 [ 2211.735955][T14080] ext4_es_insert_extent+0x2b7/0xa30 [ 2211.741258][T14080] ? ext4_es_scan_clu+0x50/0x50 [ 2211.746133][T14080] ext4_map_blocks+0xb87/0x18e0 [ 2211.751032][T14080] ? ext4_issue_zeroout+0x190/0x190 [ 2211.756268][T14080] ? kasan_check_write+0x14/0x20 [ 2211.761232][T14080] ext4_getblk+0xc4/0x510 [ 2211.766249][T14080] ? ext4_iomap_begin+0xfe0/0xfe0 [ 2211.771291][T14080] ext4_bread+0x8f/0x230 [ 2211.775545][T14080] ? ext4_getblk+0x510/0x510 [ 2211.780150][T14080] ext4_append+0x155/0x370 [ 2211.784593][T14080] ext4_mkdir+0x61b/0xdf0 [ 2211.788949][T14080] ? ext4_init_dot_dotdot+0x520/0x520 [ 2211.794327][T14080] ? selinux_inode_mkdir+0x23/0x30 [ 2211.799451][T14080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2211.805705][T14080] ? security_inode_mkdir+0xe4/0x120 [ 2211.811002][T14080] vfs_mkdir+0x42e/0x670 [ 2211.815258][T14080] do_mkdirat+0x234/0x2a0 [ 2211.819599][T14080] ? __ia32_sys_mknod+0xb0/0xb0 [ 2211.824461][T14080] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2211.829930][T14080] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2211.836090][T14080] ? do_syscall_64+0x26/0x680 [ 2211.840785][T14080] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2211.846077][T14080] __x64_sys_mkdir+0x5c/0x80 [ 2211.850679][T14080] do_syscall_64+0xfd/0x680 [ 2211.855208][T14080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2211.861134][T14080] RIP: 0033:0x458be7 [ 2211.865036][T14080] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2211.884650][T14080] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2211.893069][T14080] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2211.901059][T14080] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2211.909038][T14080] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2211.917018][T14080] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 06:56:08 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:08 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x21) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000140)={0x1, "36179cca3c5b17c164c1971df22c7d696c07064c54abbabba9dc7ea95d42f0e7", 0x200, 0x1, 0x3f, 0x2, 0x5}) 06:56:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept$ax25(r1, &(0x7f0000000240)={{}, [@bcast, @default, @bcast, @remote, @remote, @rose, @default, @bcast]}, &(0x7f00000002c0)=0x48) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) gettid() setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000300)=')posix_acl_accessppp1+\',selinuxkeyring:em1\x00', 0x2b) r5 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x40, {0x44, 0x4, 0x7}, 0x18, 0xee01, r5, 0x0, 0x100000000, 0x20, 0x75, 0x0, 0x7fffffff, 0x1, 0x0, 0xbe, 0x100000000000000, 0x5, 0xbf, 0xfff, 0xd030, 0x3}}, 0xa0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x77359400}}, 0x0) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000140)={0xbec, 0x8001, 0x6, 0x2, 0x0}, &(0x7f0000000180)=0x10) socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r7, 0x7f}, 0x8) tkill(r4, 0x1000000000016) 06:56:08 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:08 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xe65f4faafe8213a6) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r1) r2 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='syz', 0xfffffffffffffff9) keyctl$instantiate(0xc, r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7570647f445746c240f0000293e42ae2756c7420757365723a7d5b776c616e30766d6ee83bc03d3a88163f844ae3f238d8070fecd14c4ef39cffe7afe8fc71"], 0x23, r2) [ 2211.924997][T14080] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:08 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7f00]}) 06:56:08 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:09 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:09 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:09 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x0, 0x0) accept$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @multicast1}, &(0x7f0000000400)=0x10) keyctl$read(0xb, r0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={r3, 0x0, &(0x7f0000000240)}, &(0x7f0000000300)=0x10) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) 06:56:09 executing program 0 (fault-call:0 fault-nth:51): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:09 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x800e]}) 06:56:09 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:09 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2212.561027][T14517] FAULT_INJECTION: forcing a failure. [ 2212.561027][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 2212.584845][T14517] CPU: 1 PID: 14517 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2212.597734][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2212.607805][T14517] Call Trace: [ 2212.611123][T14517] dump_stack+0x172/0x1f0 [ 2212.615482][T14517] should_fail.cold+0xa/0x15 [ 2212.620098][T14517] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2212.625924][T14517] ? ___might_sleep+0x163/0x280 [ 2212.630795][T14517] __should_failslab+0x121/0x190 [ 2212.635749][T14517] should_failslab+0x9/0x14 [ 2212.640259][T14517] __kmalloc_track_caller+0x2d5/0x740 [ 2212.645638][T14517] ? setup_sigcontext+0x7d0/0x7d0 [ 2212.650674][T14517] ? __bad_area_nosemaphore+0xb3/0x420 [ 2212.656159][T14517] ? strndup_user+0x77/0xd0 [ 2212.660682][T14517] memdup_user+0x26/0xb0 [ 2212.664953][T14517] strndup_user+0x77/0xd0 [ 2212.669300][T14517] ksys_mount+0x3c/0x150 [ 2212.673559][T14517] __x64_sys_mount+0xbe/0x150 [ 2212.678246][T14517] do_syscall_64+0xfd/0x680 [ 2212.682758][T14517] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2212.688655][T14517] RIP: 0033:0x45c21a [ 2212.693373][T14517] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2212.712985][T14517] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2212.721409][T14517] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2212.729575][T14517] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2212.737555][T14517] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2212.745532][T14517] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2212.753513][T14517] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x8, 0x7, 0x8, 0x246, 'syz0\x00', 0x5e126352}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000200)=""/32) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x40000) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:11 executing program 1: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000100)={0x4, 0x40}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={0x0, 0xb8}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) sendto$x25(r1, &(0x7f0000002680)="21d3f6441b56255d6cd13c05808bf592a375af01cbbc17d77091d4ecc7e91b1c1862713d8b73b28855dfc46630c422efbd8dd29fe1b2a8d74e376b4aac8d16793f136c9dd4b0607227aca343b7f7cec68f8571a4fb3e792e6861ccd6e45b508c9b034707a4aba785f4238bfc74510d3c9f35d09abb433b99ae30687261a921cf0300387b629944ee06c7b8d39614f9420098737331df58e2f8ca5fcb7431", 0x9e, 0x20000040, &(0x7f0000002740)={0x9, @null=' \x00'}, 0x12) sendmmsg$inet_sctp(r0, &(0x7f00000024c0)=[{&(0x7f0000000140)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="3b9f2768aa2fbb4867331c358775e78edbdf2ea4ffa58c6b6ddb2cdf0e357bf24f4450a9c81b3a43ead55daba7a248104b2da85d1cf420a0fa6037dbac1286f6", 0x40}], 0x1, 0x0, 0x0, 0x40001}, {&(0x7f0000000280)=@in6={0xa, 0x4e21, 0x400000, @rand_addr="0a5448e455a5e3e4c8f58e5c15a81a95", 0x4}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000002c0)="a79233571313990ffafe49524bc503717526a5eb9fba2a6b80ea7ca1c8d0d8bdcf7cdeb6560e4c7f2ec0a4a5f710a499728d6441015edab2ddbbf14161e49bd6d0644188895efa", 0x47}], 0x1, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0xfd, 0x7fff, 0x20a, 0xc603, 0xcea, 0x88c, 0x1, 0xfffffffffffffffb, r2}}, @authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0x7fff, 0x1, 0x3c38, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0xc, 0x3, 0x7, r3}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0xc00000000000000, 0x8008, 0x41ee, 0x467, 0x1, 0x1, 0xf2, r4}}, @init={0x18, 0x84, 0x0, {0x5, 0x1, 0x5, 0x100000001}}], 0xf8, 0x40000}, {&(0x7f0000000600)=@in6={0xa, 0x4e22, 0xf9, @mcast2, 0xb8}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="6e1c064799440f3ecd704e0519bd2e2365f8862c600c28fc2f41a25081a7f87bcef8f5f1365260129af6696aea480640d9dd5c3c9f4c559bb374dd161c27fd01a3015c7383bb084df0ea910beee5ba75ac894a9756dc804bc565b5", 0x5b}, {&(0x7f00000006c0)="f8404490f857efdf1ce5c0749ee769c192ccf1c0ce896139ffec209c813c4bd7d91dedf0995253caa939e22f8b5a417e3a6c01e7bdb9ca52201ec98216be0cf4b92135056af9b712be46e1455b91fd790209d346be8371d3a4a744660541cb", 0x5f}], 0x2, &(0x7f0000000780)=[@authinfo={0x18}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x8000}}], 0x30}, {&(0x7f00000007c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000800)="61d989f880e84393211c2b63b290f32d51b0c5ab7c18f45aedb1916159433ad487576464aed9cd9b22526780490363107ae9686afb5205f7c8b65aad233afd49c14ca6b5c56d1508b721e775972b8feefe507e77cec9038e57fa8e27bbd10d685ee53ed72dd8c44491abeb0ee85e9761780a22d078dd03fbbe2dd761847aa46770381badf9f21b4841c4db7cb00a2856ada661e635b8a9c00340b4faa0731ae5bcd7ff740e89e484f816e4de099a93cf2632", 0xb2}, {&(0x7f00000008c0)="4e98fd1c1b017d867fe93040f986ac0bfbdb522bd3cb4ecf29c2b709a5fd53fce7a858aa594480750e581863dca1da541f649b316a00e3df9cf4f72e2cfcb73914a980d5d941320469ba63bc44c4c1eb5643ccdf211bae7e759390fa7ad08e5e4863a9", 0x63}, {&(0x7f0000000940)="041dbc8f3f7aa7dda04098d8f61fe6754b29a0be7c9a1d195f87508642555c1b32df42567848ccf93adcad5eea71fceee6f58fd4c82cc129783ce0fd5dc3107e2f846fd75ccee1d80810140e9a89001c1a2570f669d77aec867171e8021202faf028a58dbbc770904f308506ff2b00cf27e22c732035682d0ce44b532ee3372e4667f91068308b029e85820e4574781eca16c7701b88bd3473f7ca923174e2a8efccee55087bb07c005040cee3c382d0b26ce6772974d0f1de9beb18c1139f72b2b791bc8ea8c97387b535e6947946db81cb4ce776065476f42e1fc99e7e60f55b24", 0xe2}, {&(0x7f0000000a40)="f916eab5828b34c84958f0ff3ff923db98c1aebe79fe1589ae247cadabf8779d63403853ff31ec0aed52f624cf260add35901845bfc089f6a38c8282153e15e11b7da8fbfaa6526a92bba86bf375a35fff9a0cc453fccf995bb0dc419f574235", 0x60}, {&(0x7f0000000ac0)="a96180741f79ef7430c0789d280c938d5420046efb4b1b61765d60447ec13bde9a5f3e0d0a55798343f38bb508a52fda8ca2367dcfb685adf361e076346ddc1ef27af9530a4fcbadc571f6e70fb9ae03d1688910663f02a0da9c2430cf01c794614cbb0e24dc5ff1904e6350cd139e80f5de543c8d119ae3552d114de861907eead0b7345a86ef1c23bcdfe76a350aafa8405ef6ead52d407bf4e632a44d06c9847e12a3c2b5633ffff6b82dfd9362104d031a8851e34ad6777e", 0xba}, {&(0x7f0000000b80)="d41f6eb9ba5550405d79724cd66eaf80426193343ba88a966432d26b32283f6ebad66b6d64235cba61a470621e0a35440d1735e10fa4262844d3eeacd5aed95fa4c45cf81a96c8aeba775e5bb633e73caf724519f2c42960105cf391ec4fb818cfea34", 0x63}], 0x6, 0x0, 0x0, 0x20000000}, {&(0x7f0000000c80)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000cc0)="ab62854903fed49e6ab63a0020efcba46ba38335a8a3f697545ad37757171bcefa32354953b6f091b613e677239a665c1cc64a938e084aed4d06d334be2027d64f1936db1f173ea4eeb17ae554678de1c1c582a03283518f9d623524e51792b435831ccd4818f538a8352b4fa46b63f4f8", 0x71}, {&(0x7f0000000d40)="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", 0x1000}], 0x2, &(0x7f0000001d80)=[@init={0x18, 0x84, 0x0, {0x1f, 0x800, 0x7, 0x7ff}}, @prinfo={0x18, 0x84, 0x5, {0x1e4b14203db0206c, 0x80000000}}], 0x30, 0x24040840}, {&(0x7f0000001dc0)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001e00)="b17f66df9d46b8ae2cb112035e44100713e5", 0x12}, {&(0x7f0000001e40)="78907e8aa020448dcd57d8e8aa14aff2bd1c5447d1e5ae03299f85988fcbc29ef051783e30fd58f03bcac32633a1b2b350c8d95bbff0a37e84e88579d7eb761e73283c9c2bb143cc45be797b0bbd75bcf057137bb6d8d88d1c90f8fcbd8822290444240a7b56f0d80797953bc0e9461d47515fe306d87bcd0a5ef5f5353d22b1e563ec574dd0ce5ef2517e828503e4a7f2fba3f29990ffe001e1302176c763a8e812ebe9f371c85927742a45fe282618fe1c3823b82e2963cee75187af55cde8f49a6bff779246fc48caecb5cc2bae53a298fd2ad5834f0d1e9f236fcca82cceb1a37726a7c9054795de75fe31bdca28abe8f81fbdc6ad", 0xf7}], 0x2, &(0x7f0000001f80)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr="eec7ff9366fc459aeedf6c542b558682"}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x7fffffff}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x8}}], 0x70, 0x20000004}, {&(0x7f0000002000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002040)="568b3c5c400ccc09950f5f619df2e5eb41a42fe6d2608b2084cef749fdbf06e650852abc1844fb45f1776d06039a8956639e1dd2502ba2ceab826466fa2b6ec7102d8c28aa73e684bc89a80473a9cdf17fe8733b8c96a27b14e6cb976d03e502ceb7f71b16d64faf77140d5c4867b32306e805cc0b31bf11522ecbaf0b13a31d16f4dd8684e5502b84e7b4c0906f2b907ae27a11c2256f673fe552af197e3b0ef0571768c3ac04f5dd0a05523d227c99fd2edb3967bf49be5822", 0xba}, {&(0x7f0000002100)="a1138617337665ed1119b07c47c286a89eddd62bf8e0f5e30268dedc971692f060a34ddcf1fdc2d5dfb8ccd9e95a4de4839f6a05ceb783a1086ffaf6ca2da74886f0797a97cdf9bde7c10b118bbf28c97a2bcc422c514e0ebf72aba7dbc80e8d4e04e84985b537fab8f64c17fc5f75d39edf4b741edd02a4c358aa37af93c14dd47f38598d3ea36bdff7656c9bd4dca42b28c6b84cf74f4fde1499370c528260329a71", 0xa3}, {&(0x7f00000021c0)="f9b46382199a870f083499b428ce137570972194c56b676b21d8ff3f8bb12279fdc8c8bae13b5773f0ba866a93f61e8b72c244ce9748cc3913a39747a65d85406f06f762921924493e06664f096de3a995eb48afe89dd005a945d7b27c79ff0f0b5bdd87ad664034d32b9612dce03fa7a1abeb3a40c87a63fbaa60cc0739f9df317c935735c7d131829167f3e94a24bce978a20b66207c825778ba07ef78236ddbf26db09cc9a76ea5cdf04ff5c0107642f7eea58c34bd73b8478740d85c109c898cb3c7dd996edb5b7489949fd729f2", 0xd0}, {&(0x7f00000022c0)="3e7817efa6f0121d50110ce38fbbb2f4c7c3a5f7982bb85dd39f9e51efa5556d2d88ac740a3535a6e57f51f4a8375c1be7aaa9966def74451edb169fe9a259408306e891d00dc83a8005aef9d08eb5", 0x4f}, {&(0x7f0000002340)="3cd96d6ebb6155a32acef5ca296a9765639fbd6e1b284e7bc0834736e5a8c98b21f1d0acbd7188c78ed1c0cd06a9737679e5bbb741eb691dc164ffbf6c3bf726fcab2c4e10f8fbb8647fcb1a3d1aefdadc31ef3fe7ceb429d0bdc52c86fc16bf287d3bf46ad5f147e9b30aa256ebfb961b19804a00cd75e341618d7f957c98e87125cec07af5", 0x86}], 0x5, &(0x7f0000002480)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x18, 0x4000000}], 0x7, 0x10) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 06:56:11 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:11 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8035]}) 06:56:11 executing program 0 (fault-call:0 fault-nth:52): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2214.906584][T14522] net_ratelimit: 8 callbacks suppressed [ 2214.906594][T14522] dccp_invalid_packet: P.Data Offset(0) too small [ 2214.937363][T14525] FAULT_INJECTION: forcing a failure. [ 2214.937363][T14525] name failslab, interval 1, probability 0, space 0, times 0 06:56:11 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2214.953127][T14530] dccp_invalid_packet: P.Data Offset(0) too small 06:56:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8100]}) [ 2215.038933][T14525] CPU: 1 PID: 14525 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2215.046954][T14525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2215.057011][T14525] Call Trace: [ 2215.060313][T14525] dump_stack+0x172/0x1f0 [ 2215.064668][T14525] should_fail.cold+0xa/0x15 [ 2215.069276][T14525] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2215.075108][T14525] ? ___might_sleep+0x163/0x280 [ 2215.079971][T14525] __should_failslab+0x121/0x190 [ 2215.084916][T14525] should_failslab+0x9/0x14 [ 2215.089426][T14525] kmem_cache_alloc+0x2af/0x6f0 [ 2215.094284][T14525] ? rcu_read_lock_sched_held+0x110/0x130 [ 2215.100016][T14525] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2215.106268][T14525] ? __mark_inode_dirty+0x241/0x1280 [ 2215.111565][T14525] ext4_mb_new_blocks+0x5a0/0x3c10 [ 2215.116691][T14525] ? ext4_find_extent+0x76e/0x9d0 [ 2215.121738][T14525] ext4_ext_map_blocks+0x2b83/0x5250 [ 2215.127037][T14525] ? ext4_ext_release+0x10/0x10 [ 2215.131932][T14525] ext4_map_blocks+0x8c5/0x18e0 [ 2215.136795][T14525] ? ext4_issue_zeroout+0x190/0x190 [ 2215.142037][T14525] ? kasan_check_write+0x14/0x20 [ 2215.146985][T14525] ext4_getblk+0xc4/0x510 [ 2215.151321][T14525] ? ext4_iomap_begin+0xfe0/0xfe0 [ 2215.156361][T14525] ext4_bread+0x8f/0x230 [ 2215.160605][T14525] ? ext4_getblk+0x510/0x510 [ 2215.165216][T14525] ext4_append+0x155/0x370 [ 2215.169647][T14525] ext4_mkdir+0x61b/0xdf0 [ 2215.174003][T14525] ? ext4_init_dot_dotdot+0x520/0x520 [ 2215.179387][T14525] ? selinux_inode_mkdir+0x23/0x30 [ 2215.184507][T14525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2215.190756][T14525] ? security_inode_mkdir+0xe4/0x120 [ 2215.196060][T14525] vfs_mkdir+0x42e/0x670 [ 2215.200318][T14525] do_mkdirat+0x234/0x2a0 [ 2215.204658][T14525] ? __ia32_sys_mknod+0xb0/0xb0 [ 2215.209527][T14525] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2215.214993][T14525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2215.221064][T14525] ? do_syscall_64+0x26/0x680 [ 2215.225755][T14525] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2215.231061][T14525] __x64_sys_mkdir+0x5c/0x80 [ 2215.235664][T14525] do_syscall_64+0xfd/0x680 [ 2215.240186][T14525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2215.246083][T14525] RIP: 0033:0x458be7 [ 2215.249983][T14525] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad c3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2215.270548][T14525] RSP: 002b:00007f0795b26a88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2215.279143][T14525] RAX: ffffffffffffffda RBX: 0000000020000228 RCX: 0000000000458be7 [ 2215.287124][T14525] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 0000000020000100 [ 2215.295094][T14525] RBP: 0000000000000001 R08: 0000000000000000 R09: 000000000000000a [ 2215.303064][T14525] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 2215.311062][T14525] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:12 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x543, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:12 executing program 1: r0 = add_key$keyring(&(0x7f0000001140)='keyring\x00', &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="5084acdbde7c93e3f7fb2b314f22a9c65162ab475c2f877155935f8b6191de8cb27c4fcc2a23119ab97e14bb645887b150d7e2c6eaf778c8456535b977ce13972c71cd032d60b8b323ea9249f38414a859bd57a5d0d8214e8e51679c37f1ee7c232d9665b16e8213e32b5974a6329333af0122954dbd646af4823c94e4c9b6457aa101794d9f599e74beb965fc786cd1019e975eadae429a32a3adfc8724e45bf138ce38482cd06bbfac60fe61cd1985d218059153d639339ac9a38aa9371ac2fbb991d8b247ae6919d0e296cdfc531816db38001f0ec7ced7a97c780b6eb0087ec340fb70f02fb2fca3eb970562e776fd33f897b40225b4b58eac9ecf96b52ad0fbc23001c68a2848873d3cfcd68867a2f3ae7bd0a9a6fd7a5c5ecaefbd3dd215cc232e8f9314303ae0b5515c0d4e4f14790b208df829bb0d30f7f9761b9a721a6e9847c6aa63b4c06c62e0e6c5df0b93e5d64ccf489dd2a3fdc6c438336be25c838e146bfd5f1d654e79e4d72b5cc36d6a164a7053c56d0f794672f5f13360a992438323cd53e002ddf36263a543ac997fbf55d7233b95ca7d7d6a4e0dbf4e4868c7cfd4100354385476a440a27b0ab85d0a0b3dc8b8c5fd63210fff2c89305d43aada7d1bbf544fb22b14c834abcc4b5199553ee30bd159d65eb535afaefbf06512a44bcc9bdd4816bde815df1e117aa670e43e28e7fd788b295d3c01a160a56695c46e985d75405092f3a673415db0c51e4d2c76189865e7bc0dd7b719c301512417ed3253c7cc7e5d9745515682c11b94db0125a70e733b7828c48deda7310d446aeb0129b27f1a2e7fe7666c9087529fd01d5c8c65b424facaadeb132f8f3fc0b5c9622c94cdce2e15e7e2f9bd4407caea43f26eb4b1c5d9da75b6b70f3fbc37416e81ed7eeb2435abcb7ca283388c592e7b9c95984638966b31773d701e6783ecb58fd65e7f5dc670ee63b6180b9f0e98a7f55f91a59ff1ae962e1f9e374fc2bb79bfdc9bf156d8c742925f38327fd8f798e286b4d68b4710de7f79256e4ccae6f598828090133c5a2da280b09a88c3c0528e66ce81f612440dfa3a0f4949deb8100e93a7aad8898a2a55877379abf7e89aa7ccf73fe4db3b2bc0363d16419dd194dbe03168477e8a092ad0309f39514425b4012a7149f66805f659d545011705cc30d8a4b15ed27e8bac04ebdb29a4f96c10b6de412bb9fe169d913c8b4982a196a785d4ecf260f7a03552b5233eba915f6f5fa6f02c981dd324b40f8a67365a7d5822a895661636e8c405cc884addc439973dfaaee31eabc765efbdf1d1d31fd8df505605a8187c301082d055f5b452355262795b4622ffa45a45139b99b379950712c4e01f83c9daf3f18c094e9a320e3e2deb1538c9cdb875f308cb7503fbc5ebc28892caedabb5212b13a42da1a20a312e4dfd0e7d8b68ecf1c818625798d155e29f23f89a53e78904f36c54541c80c8d4900acbe889b7b386e4b6238575045afc1baa6af9a36fd68d818eb097dcb5a0ad3a08c7fcb439b826c096b1dd9d10c09249412e310c482407d47cb5e5552db42e5030dbbc0f802c0da95170ee1292c986f72fd31e5f7157fa4102aa97af18af3feabca90038aebaf953074755a8c3b2372c254ec4de6f2aa6752a1e433880256695e40e8fdbc3d66b37dacdb5c9c5634abc15dd63051233f5760f91a1f07c6444057a0072c6684340120f16ab7eb461e730478a5b09e29e178a1a6684f76b03bbc389b9f9f97f92023148409008b4fcbc19104ae3944a5bf82b9425a37e985b8408c029351f22f2914a7b281a5732e08fadabc47f6cee1e05fc6726faff8d30e7883e14a6318106283c432f0fcedc5d63c6e6e2932b1b17ecb8648f1b1d578a0ed3a7f17bd722e9fbfbcd59978d7437203d4d44212a57ba68c0485a71302b768f133f54733f068333511d5b6ef664c05bd929b966e66407a08754495888ba5ec1c5db0a0e4a20a8951183a07b2c8bf9e0a8323b330a627feb998c598b7b5dc4dca8751cb6c9d4c8ffec7742240f6958c918f4b78d1a88c7c146617ec621d97c428be7cedb79a2a37081c092333898013930f7dbf713fbbaf96351caa70aee1408d75ddfa82e2e97ada1f251c1024f8eac512aa0efe2bd855f8b7c2604ca9ff1f76bfc2ef6abfa3918eafc68457c5de8b189b1d9a6662fa5c3e73f2f7a4faa945aebf4cec423c63431a1961ba09006a0f5c8a7c2dd80247392318bdd611d0c094878feb0b04ca00f1fb72e678be1081a12a19d959c31f94efda0296ffba1bea2851d4bcbd0891648828123a0f243860d15b20bdaa75ac80b76a0a57277efbf395165a412431d9aeaec57abd9bf5de3b67a6b30d4ad7e20ae2923c11b7c31cc3833e86f2ef06dc2883f814a6af69b3bef0e1ed6a728feeedc9c7ca25d9851c398a9faf3b0c60d47957113b64f9159eb6073715e062e4dd19de5722c57414be7d8ecf6d9f813a6cef50e00aba6726bbc25412d2521be1858d50cd8c035894128b624905fb97cb3b829bc395831efca2de9ae0c485f3308deefaf287c9e59c1e1a2ed2b8a239f0eaa6fb7d2fdeaad2fb191c5a1764fd7a6c1debe4c081b120c94c2647f81a0bb5d1226a5db711be5161ac92358c3e244faa7993ab4ddd2e6233c8d23d3cad3b4bf248b9878c944c72d814e5030e2ca38bea81b45eaa81d9f80736e9554c6b20b2861f048bad0b440534c23ff3848383d5e3486a350e6c7f617e7f189215dacacd0671caaf67d58a8f168ed75812d915847272b4988dbbc9a2112cb034e724ae62f82222ebad71054fc121f71d3b35a972b15e81dc65c0fd84bb7ac264e7b6d504ff566af6813a784cc44c8801e310d027625ba8e9a5a3721cf3099cdb64adceb93e058c1841ae445f299f2ce1948ecd4047b796f1eb81f53c946707595da23d9d6ac4e7170baafd7f1c31bd2e40681369bc9a3d3099da5f59b44b96922811f7e063d6e7fb09ec91e629b40138e1f718279e272b1210276e5850811342087b98d3e34c083371d224e440bed16d4ac7039e364e772d8a8439471c2db3a44fea6eefff2dabddc0648aea62068363c17a4332f9cf422d39731d24d5d959cfde8f984de6d543ed1b872a8ff32fa9227b7fadda51f64bdd36679f96793ee0ac14dfe1a6f90aaac6c29ceff202f277d0f2819a4af3af8c2d42d4fff1436638416e5f6773115013fc89f1c6cbb023218572329eb71fd1e8a718390d8510578b1f04d217bc5fe653cd90450d25dbf3fb7a45e72dbd96f7dd464e1b235098b42ecc2ca0efa1b99ec8c266e49783f29b9e1d39b0970aa7491c19dc8fcfbbecab011acdd1a270591d7a47eaf1011b1c185e78f443f37d6db4a463fe6270a4618bfd172479b253aa29fab0a53f141136fb61d7c80bac16b2ee4e8ffd676e430e6f919a0f84b7ee3531bba70c355734502877db094d64cafddb127c5f81854426884e7b8ddd302455641d093ee7c48ed1681ed5fe02df42c77a8091ba49e95e48c55cd5dfa6bb90231b8dd86172da67bb6e41eec8c85bcc38bd595548ac94e738ec57c44c13442069f82b292896ea34c37369bcd4e2355acb7b951258f963354ad8b547503cffa528da71507ca2c81413e7af9de81a669a2f048ed17969f72e529c38d29ee44a25dfb9e38ac7436af4728fc15a01c61390f03b7b2e936469530ec50085d40ec58661023f9d5454cc93f874ace43b9df904cbf1f72feb6d1e0414a8e3c316b30d3182f9cce60232c1aa339e7d9195f1c9fa0b412be632aa7ba8783e44bf8a059916ebaa054a3afad68a84bb9dd20222fe7478727245715b8f1b7ff6baafed012dc8a1d5c62c58e167bf0837b13072a604ce5b80863d20ad40250fe4aa174186d6b28edfbe0263ef2e3a1d1a32a7acd344f1de9a49185caac9f6957f0281d937a84af9d48b29b9d386f6fdbc50193e9f464defac1564ac45cbb00e1d43383c7d302c300f58a09983796654e40b20b70e17519b74b7b7c80c493152f493c46dc9c16f94d9db517e696c0a10ca6d3b64393f4dd56be7265fb744ae5abad12fb9793924f10427f5206a202976204a72b872b5d55849a947d651e9dceb8383b1c6534a48fb1fbf9774f882f9f8002339aa4470a43950400b0135935a5e525a9a3285a37398d41382cada3e6e34165b8e701100305ff7c3e1c9faa6c32585c65bb3a4934781e2ba6d4682669b23de6fbef3e07e9b7d4649c48ed995d94b054ee5ba24f9aef846313b6c34be771061cc6222fdad99a0cd6fab79d2323ca9aea4422c64b18a339a41454db3ef1a2f0d4a1bdf4df2a6161c40eaab4f27ad7f3c37ddf66eb3abb1fca5544c70d49d182cf3414b1bb00796c0a112fa82d1b22bb1c9dad7629e3a6d294d293a9273f4af94e36c8cb995fa1cfe2f23fe034094e6789eb94ea859993600951fbd49fc0821b467b611fec404a0861680ee939f6af23b67aaafb827eebfd9aa25ea9e65fdc49b116bcc3ced795d79f139016c16e58630d2c22df46a406e1ceb075e7c2a15ea2fbc5c60562693bf0402b6e7342d3d2344ac3f8d35a771429f951836969e9f37d27a01f9acb96f498912a5ca64868b4417917661f111f1854a3c5c075073c977b896e4e7742f04f0143c63d5d7dd36a565215667bc149943b6179a96406cb6e83780a6651ad939fca5efc2a0cccf5f10e9bd372cfd06947bec3899dc12fe2fe5307cba73fb2d0f2c3829c6018c95d481b23444d811de3ee744d304f228bceedc6e5966ae1c547cd4b631a9c3f4990963b226cc9435049fdea827d8f784fa3e514691cd4894e639455b65316578fa0a1564fca423521b04040936b01467f9f45efd6c2ea8c709c3636781623233dfb8f2585f8f358d9c825328cb6f926d6637bff36c36fb5d323fac45434acea31a84c0bb4f65d5a98b1797e7093311175da36d7db754a2431affcafbd76b7a20737a22bb84305543f5a48ef910879e5d6e8e8b77514bbad2954b51d5554d819abad22bc252d97a8af7c7d903a6f74e0436115d00e3917777fc64810797d1953d13824cbe93345b08525b2cb70336450767f33d7098a1179b8883eac5a0c77361fc3925241626ef6daa15556d63960ac003b6464e24573275ab7f0c46f04ce72455569d80a075db6fa6980715fb7f5da31eb816bdcdf60a96db1aac2f92c3282f32697a9914882bfc409835eabfb1a23a16022708a647bfd369a1c4a51c2132e62a25a618d8438146f176ecb080bc04b6287f5de5b4ec48db87b970825cc972e3025cb04eacbaef44f678304154f084caab3c493861615499ae2badbe77f7c6b0825feed518670cca31cac96521c209d02e38053427507d42cd432e803211e3b532f4bf6e397f402522f3684cecb3b9bbb094f1d82eb32f911ea6dbebca9e3b7b416955f93070d71ee93ef4262fde7823dc4b64b6b09cd104679be43f5cdd9acb92bc0acef6fa92399d1dde1711b817e73b63e1cc18fdab0e72aa3981d1396dd7f6b91b67a48c13470eef3523e1968d43eb3d9e1e270580b4a9933de6d8ac4c1d022f91c3e4eaf3013b5706e4c96ee6164f17a9f743888358fb7cd06fb0c13e480e97b46b4d7e599e1240f697ba1e49efd4f6840f8f866fe5b3c62d1e5a54a09dcf9c2184a259214d7b5661986b445e6d215393420bf55fd58e3bd39582ca797ec4c0a145ec94c37fada224d46e8c5fc0a4d15d5af3c12e168d95325ad75405d999109064c36cde09c5107be9ffd48f59fce2e81ba534cc8254df48ab87ab56c4308140414df45caab8b69dd51edba", 0x1000, r0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) 06:56:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2215.395386][T14639] dccp_invalid_packet: P.Data Offset(0) too small [ 2215.431339][T14640] dccp_invalid_packet: P.Data Offset(0) too small 06:56:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xd0e, 0x153040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast1}], 0x30) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8847]}) 06:56:12 executing program 0 (fault-call:0 fault-nth:53): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:12 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:12 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:12 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10880, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) keyctl$invalidate(0x15, r1) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) [ 2215.883591][T14753] FAULT_INJECTION: forcing a failure. [ 2215.883591][T14753] name failslab, interval 1, probability 0, space 0, times 0 [ 2215.899795][T14755] dccp_invalid_packet: P.Data Offset(0) too small [ 2215.921132][T14753] CPU: 1 PID: 14753 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2215.929061][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2215.939119][T14753] Call Trace: [ 2215.942431][T14753] dump_stack+0x172/0x1f0 [ 2215.946804][T14753] should_fail.cold+0xa/0x15 [ 2215.951405][T14753] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2215.957219][T14753] ? ___might_sleep+0x163/0x280 [ 2215.957243][T14753] __should_failslab+0x121/0x190 [ 2215.957263][T14753] should_failslab+0x9/0x14 [ 2215.957276][T14753] __kmalloc+0x2d9/0x740 [ 2215.957298][T14753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2215.967058][T14753] ? d_absolute_path+0x11b/0x170 [ 2215.967072][T14753] ? __d_path+0x140/0x140 [ 2215.967088][T14753] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2215.967107][T14753] tomoyo_encode2.part.0+0xf5/0x400 [ 2215.967125][T14753] tomoyo_encode+0x2b/0x50 [ 2215.967145][T14753] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2216.011886][T14753] tomoyo_mount_acl+0x2cc/0x840 [ 2216.016753][T14753] ? find_held_lock+0x35/0x130 [ 2216.021525][T14753] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2216.027086][T14753] ? mark_held_locks+0xf0/0xf0 [ 2216.031856][T14753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2216.038132][T14753] ? lock_acquire+0x16f/0x3f0 [ 2216.042813][T14753] ? tomoyo_mount_permission+0x10a/0x410 [ 2216.048465][T14753] tomoyo_mount_permission+0x16a/0x410 [ 2216.053934][T14753] ? tomoyo_mount_permission+0x10a/0x410 [ 2216.059573][T14753] ? tomoyo_mount_acl+0x840/0x840 [ 2216.064607][T14753] ? inode_has_perm+0x1b0/0x230 [ 2216.069473][T14753] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2216.075032][T14753] ? strncpy_from_user+0x2ac/0x380 [ 2216.080157][T14753] tomoyo_sb_mount+0x35/0x40 [ 2216.084761][T14753] security_sb_mount+0x87/0xd0 [ 2216.089538][T14753] do_mount+0x1d4/0x1c00 [ 2216.093786][T14753] ? copy_mount_options+0x5c/0x3a0 [ 2216.098911][T14753] ? copy_mount_string+0x40/0x40 [ 2216.103976][T14753] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2216.110216][T14753] ? _copy_from_user+0xdd/0x150 [ 2216.115076][T14753] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2216.121319][T14753] ? copy_mount_options+0x280/0x3a0 [ 2216.126527][T14753] ksys_mount+0xdb/0x150 [ 2216.130781][T14753] __x64_sys_mount+0xbe/0x150 [ 2216.135469][T14753] do_syscall_64+0xfd/0x680 [ 2216.140016][T14753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2216.145909][T14753] RIP: 0033:0x45c21a [ 2216.149810][T14753] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2216.169414][T14753] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 06:56:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8060000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:13 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x608, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8848]}) [ 2216.177829][T14753] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2216.185800][T14753] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2216.193772][T14753] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2216.201742][T14753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2216.209727][T14753] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2216.227981][T14753] ERROR: Out of memory at tomoyo_realpath_from_path. 06:56:13 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0xc) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0xad7) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) syz_open_pts(r2, 0x80000) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:13 executing program 0 (fault-call:0 fault-nth:54): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2216.363679][T14870] dccp_invalid_packet: P.Data Offset(0) too small [ 2216.402750][T14872] dccp_invalid_packet: P.Data Offset(0) too small [ 2216.464831][T14877] FAULT_INJECTION: forcing a failure. [ 2216.464831][T14877] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.490965][T14877] CPU: 1 PID: 14877 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2216.498871][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2216.508941][T14877] Call Trace: [ 2216.512251][T14877] dump_stack+0x172/0x1f0 [ 2216.516604][T14877] should_fail.cold+0xa/0x15 [ 2216.521224][T14877] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2216.527046][T14877] ? ___might_sleep+0x163/0x280 [ 2216.531915][T14877] __should_failslab+0x121/0x190 [ 2216.536876][T14877] should_failslab+0x9/0x14 [ 2216.541388][T14877] kmem_cache_alloc_trace+0x2ce/0x750 [ 2216.546863][T14877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2216.553109][T14877] ? _copy_from_user+0xdd/0x150 [ 2216.557960][T14877] copy_mount_options+0x5c/0x3a0 [ 2216.562888][T14877] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2216.562908][T14877] ksys_mount+0xa7/0x150 [ 2216.562924][T14877] __x64_sys_mount+0xbe/0x150 [ 2216.562943][T14877] do_syscall_64+0xfd/0x680 [ 2216.562962][T14877] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2216.562980][T14877] RIP: 0033:0x45c21a [ 2216.573445][T14877] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2216.573453][T14877] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2216.573468][T14877] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2216.573476][T14877] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2216.573484][T14877] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2216.573492][T14877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2216.573500][T14877] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:13 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000140)=0x4, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:56:13 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x689, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8864]}) 06:56:13 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000100)=0x3) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:13 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:13 executing program 0 (fault-call:0 fault-nth:55): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2216.884703][T14987] dccp_invalid_packet: P.Data Offset(0) too small [ 2216.896446][T14986] FAULT_INJECTION: forcing a failure. [ 2216.896446][T14986] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.910682][T15012] dccp_invalid_packet: P.Data Offset(0) too small [ 2216.931702][T14986] CPU: 1 PID: 14986 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2216.939623][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2216.949689][T14986] Call Trace: [ 2216.952998][T14986] dump_stack+0x172/0x1f0 [ 2216.957350][T14986] should_fail.cold+0xa/0x15 [ 2216.961955][T14986] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2216.967782][T14986] ? ___might_sleep+0x163/0x280 [ 2216.972651][T14986] __should_failslab+0x121/0x190 [ 2216.977601][T14986] should_failslab+0x9/0x14 [ 2216.982111][T14986] kmem_cache_alloc_trace+0x2ce/0x750 [ 2216.987490][T14986] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2216.993732][T14986] ? _copy_from_user+0xdd/0x150 [ 2216.998593][T14986] copy_mount_options+0x5c/0x3a0 [ 2217.003536][T14986] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2217.009790][T14986] ksys_mount+0xa7/0x150 [ 2217.014035][T14986] __x64_sys_mount+0xbe/0x150 [ 2217.018718][T14986] do_syscall_64+0xfd/0x680 [ 2217.018740][T14986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2217.018752][T14986] RIP: 0033:0x45c21a [ 2217.018772][T14986] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2217.029130][T14986] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2217.029145][T14986] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2217.029155][T14986] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2217.029164][T14986] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 06:56:14 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) ioctl$KDMKTONE(r1, 0x4b30, 0x9) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/16) 06:56:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8906]}) 06:56:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") ioctl(r0, 0x9, &(0x7f00000005c0)="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") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:14 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2217.029172][T14986] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2217.029194][T14986] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2217.133891][T15100] dccp_invalid_packet: P.Data Offset(0) too small 06:56:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xae02]}) 06:56:14 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="306ec1a2e48f70645410c3855c345a2c8b362b781a6ad2194d69489c30a8510adac0c66020089b9b1b2929dfad6566505dce58c37d90d83ef745abce5bce8194cad9b7a1d13a3332e396448ae29c776c716aab05dfe099c6cdb5ad", 0x5b, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20200, 0xc1) accept4$tipc(r2, &(0x7f00000002c0)=@id, &(0x7f0000000300)=0x10, 0x80000) bind$tipc(r2, &(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10) 06:56:14 executing program 0 (fault-call:0 fault-nth:56): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:14 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000240)={0x7, 0x2, @raw_data=[0x9, 0x1, 0x100000001, 0x8, 0x7, 0x3c00000000000000, 0x2, 0x913, 0xffff, 0xffff, 0xffffffffffffffff, 0x10000, 0x10000, 0x1, 0x1ff, 0x1]}) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x3) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r4, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r5 = gettid() r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x3) fcntl$dupfd(r2, 0x0, r4) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) mq_open(&(0x7f00000002c0)='[./vmnet1vboxnet1ppp0cpuset}trusted{md5sum\'{em0ppp1\x91user\x00', 0x803, 0x81, &(0x7f0000000300)={0x3f, 0x6, 0x1, 0x8, 0xfffffffffffffffa, 0xfff, 0x81, 0x1}) ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r6, 0xc0086421, &(0x7f00000001c0)={r7, 0x3}) [ 2217.364855][T15215] FAULT_INJECTION: forcing a failure. [ 2217.364855][T15215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2217.378097][T15215] CPU: 0 PID: 15215 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2217.378117][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2217.396153][T15215] Call Trace: [ 2217.399679][T15215] dump_stack+0x172/0x1f0 [ 2217.404030][T15215] should_fail.cold+0xa/0x15 [ 2217.404044][T15215] ? tomoyo_mount_acl+0xe0/0x840 [ 2217.404060][T15215] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2217.404075][T15215] ? do_syscall_64+0xfd/0x680 [ 2217.404090][T15215] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2217.404106][T15215] ? kasan_check_read+0x11/0x20 [ 2217.404132][T15215] should_fail_alloc_page+0x50/0x60 [ 2217.404146][T15215] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2217.404159][T15215] ? kernel_text_address+0x73/0xf0 [ 2217.404176][T15215] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2217.404212][T15215] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2217.462279][T15215] cache_grow_begin+0x9d/0x650 [ 2217.467056][T15215] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2217.473315][T15215] __kmalloc+0x67c/0x740 [ 2217.477572][T15215] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2217.483320][T15215] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2217.488886][T15215] tomoyo_mount_acl+0x149/0x840 [ 2217.493756][T15215] ? find_held_lock+0x35/0x130 [ 2217.498535][T15215] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2217.504099][T15215] ? mark_held_locks+0xf0/0xf0 [ 2217.508875][T15215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2217.515146][T15215] ? lock_acquire+0x16f/0x3f0 [ 2217.519836][T15215] ? tomoyo_mount_permission+0x10a/0x410 [ 2217.525476][T15215] tomoyo_mount_permission+0x16a/0x410 [ 2217.530940][T15215] ? tomoyo_mount_permission+0x10a/0x410 [ 2217.530956][T15215] ? tomoyo_mount_acl+0x840/0x840 [ 2217.530971][T15215] ? inode_has_perm+0x1b0/0x230 [ 2217.530991][T15215] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2217.531018][T15215] ? strncpy_from_user+0x2ac/0x380 [ 2217.557155][T15215] tomoyo_sb_mount+0x35/0x40 [ 2217.561767][T15215] security_sb_mount+0x87/0xd0 [ 2217.566543][T15215] do_mount+0x1d4/0x1c00 [ 2217.570795][T15215] ? copy_mount_options+0x5c/0x3a0 [ 2217.575942][T15215] ? copy_mount_string+0x40/0x40 [ 2217.580898][T15215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2217.587155][T15215] ? copy_mount_options+0x280/0x3a0 [ 2217.592379][T15215] ksys_mount+0xdb/0x150 [ 2217.596637][T15215] __x64_sys_mount+0xbe/0x150 [ 2217.601329][T15215] do_syscall_64+0xfd/0x680 [ 2217.605851][T15215] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2217.612786][T15215] RIP: 0033:0x45c21a [ 2217.616776][T15215] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2217.637862][T15215] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2217.646297][T15215] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2217.654300][T15215] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 06:56:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:14 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001200)='cgroup.subtree_control\x00', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x0) keyctl$read(0xb, r0, 0x0, 0x3e5) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000001100)='/proc/self/attr/current\x00', 0x2, 0x0) fsetxattr$security_evm(r2, &(0x7f0000001140)='security.evm\x00', &(0x7f0000001180)=@v2={0x7, 0x3, 0x3, 0x8, 0x3b, "c24ee0e1d01cfd8d539ff2d9a266a07fede2a9368158b3ac2a1df964676123bacfb3ad3923cb62109265877b092713a8aef32f0a0a365033da417f"}, 0x45, 0x2) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/4096) 06:56:14 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xba02]}) [ 2217.662276][T15215] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2217.670250][T15215] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2217.670260][T15215] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:14 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xe80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2217.721148][ T26] audit: type=1400 audit(1562050574.712:123): avc: denied { setattr } for pid=15323 comm="syz-executor.1" name="current" dev="proc" ino=258970 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 06:56:14 executing program 1: add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) 06:56:14 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:14 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xdc02]}) 06:56:15 executing program 0 (fault-call:0 fault-nth:57): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000140)=0xc) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000001c0)='/dev/snd/controlC#\x00', &(0x7f0000000200)='/dev/snd/controlC#\x00', &(0x7f0000000240)='/dev/snd/controlC#\x00', &(0x7f0000000280)='/dev/snd/controlC#\x00', &(0x7f00000002c0)='/dev/snd/controlC#\x00', &(0x7f0000000300)=')wlan1selinux+ppp1\x00', &(0x7f0000000340)='mime_type\x00', &(0x7f0000000380)='/dev/snd/controlC#\x00'], &(0x7f00000005c0)=[&(0x7f0000000400)='/dev/snd/controlC#\x00', &(0x7f0000000440)='user\x00', &(0x7f0000000480)='**md5sum^-\x00']) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xe000]}) 06:56:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 1: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="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", 0x1000, 0xfffffffffffffffc) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xf000]}) 06:56:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x7, 0xf8) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2218.124103][T15478] FAULT_INJECTION: forcing a failure. [ 2218.124103][T15478] name failslab, interval 1, probability 0, space 0, times 0 [ 2218.202037][T15478] CPU: 1 PID: 15478 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2218.209968][T15478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2218.220024][T15478] Call Trace: [ 2218.223346][T15478] dump_stack+0x172/0x1f0 [ 2218.227699][T15478] should_fail.cold+0xa/0x15 [ 2218.232304][T15478] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2218.238128][T15478] ? ___might_sleep+0x163/0x280 [ 2218.242991][T15478] __should_failslab+0x121/0x190 [ 2218.247944][T15478] should_failslab+0x9/0x14 [ 2218.252451][T15478] __kmalloc+0x2d9/0x740 [ 2218.256711][T15478] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2218.262451][T15478] ? rcu_read_lock_sched_held+0x110/0x130 [ 2218.268182][T15478] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2218.273903][T15478] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2218.279641][T15478] tomoyo_mount_acl+0x2cc/0x840 [ 2218.284504][T15478] ? find_held_lock+0x35/0x130 [ 2218.289275][T15478] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2218.294843][T15478] ? mark_held_locks+0xf0/0xf0 [ 2218.299615][T15478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2218.305882][T15478] ? lock_acquire+0x16f/0x3f0 [ 2218.310562][T15478] ? tomoyo_mount_permission+0x10a/0x410 [ 2218.316203][T15478] tomoyo_mount_permission+0x16a/0x410 [ 2218.321667][T15478] ? tomoyo_mount_permission+0x10a/0x410 [ 2218.327309][T15478] ? tomoyo_mount_acl+0x840/0x840 [ 2218.332338][T15478] ? inode_has_perm+0x1b0/0x230 [ 2218.332357][T15478] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2218.332375][T15478] ? strncpy_from_user+0x2ac/0x380 [ 2218.332392][T15478] tomoyo_sb_mount+0x35/0x40 [ 2218.332417][T15478] security_sb_mount+0x87/0xd0 [ 2218.342789][T15478] do_mount+0x1d4/0x1c00 [ 2218.342807][T15478] ? retint_kernel+0x2b/0x2b [ 2218.342826][T15478] ? copy_mount_string+0x40/0x40 [ 2218.352545][T15478] ? copy_mount_options+0x1fb/0x3a0 [ 2218.352563][T15478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2218.352582][T15478] ? copy_mount_options+0x280/0x3a0 [ 2218.361565][T15478] ksys_mount+0xdb/0x150 [ 2218.361583][T15478] __x64_sys_mount+0xbe/0x150 [ 2218.361604][T15478] do_syscall_64+0xfd/0x680 [ 2218.371121][T15478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2218.406975][T15478] RIP: 0033:0x45c21a [ 2218.410878][T15478] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2218.430597][T15478] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2218.439023][T15478] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a 06:56:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x98, &(0x7f0000000340)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x7, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x1, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000180)="a58eced478d8fbcf1f700659ca8ecd28613bc7531a0ef9d9ef7f2fafbd3d276b2c112638dfd25c162b203ae1f92cacfbda39fccefab884bb1c142f87a319110143fe414f4ffb039d44477f6663ea0c68fc259fdd17eaada60721aa2b4f05445dc89bd3f9eceaea8a602a8e1e4c5a089458bb2e207c8538ee2a1adea8c3fbb9f334fc653be0e21d280323ebef5f571108f74c5f696019b376fe553ee0521bd65ae9c60e93fd809afc40a284c25d9055f8b35dff8eafe71bcef35c530a7147ce31363a03515af2d97f7e61836978f8ffc16b441497", &(0x7f0000000040)="8e820892f2a1ba61df43d647d70dab5d40a3ee0897c842"}}, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000380)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000280)={'nat\x00'}, &(0x7f0000000300)=0x78) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000003c0)) tkill(r3, 0x1000000000016) [ 2218.447004][T15478] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2218.454975][T15478] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2218.462950][T15478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2218.470921][T15478] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2218.493450][T15478] ERROR: Out of memory at tomoyo_realpath_from_path. 06:56:15 executing program 0 (fault-call:0 fault-nth:58): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xff00]}) 06:56:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 1: keyctl$read(0xb, 0x0, 0x0, 0x0) 06:56:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000140)) sendmsg$nl_netfilter(r4, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x1480, 0x5, 0x5, 0x0, 0x70bd27, 0x25dfdbfe, {0x2, 0x0, 0x8}, [@typed={0x8, 0x45, @ipv4=@local}, @typed={0x4, 0x3d}, @typed={0x4, 0x27}, @nested={0x12b4, 0x7d, [@typed={0x8, 0x4b, @u32=0x200}, @typed={0xc, 0x58, @u64=0x3}, @generic="019704b4f240cfc1b9b98b82db3fed0903485afcf20cf6ecb94567dd849a35a3d62370776d42cd40b492d981882f9bbab97f3a3350ae3720855dc7a9be0acda5e7f61c5828e6e8b613c5623963aaa8b34d0091c1a41e09d8ff1dad91de683ef2760399c279d9cd8b08a9b8e6c9c404307301892f429f3587058f39f46d98dda4b8", @generic="fc10fcb7c2b748061c69b03058be12137a241a506a5250ee66aefe09a46375ac107d99e6e4ea446d88dd63f4ea7f9a0b2ca758f7e9fb179f3864e190f63f32b1cf5229951daaddfc84e640ca0dd3f0ede7ffd5d65e77c55bb7adfb9f27579885262466efea124cd043c1a133bf97ba874269c6cfe7c65af167bd90f528fc", @generic="ef356b4e07c10c2d5efc32c1a31cc7128296c87517b81931c35bbcfd609b646d39db2823f448b8377773b52237a6daf066418facf9a6707c8946293dc1122dd50a1016635ca49eb769670d49d6feb3206bb488157421068777cd6c89c35dacdc875008999a41fbbbe891bd9243730bb61e2648d7117d680d3cf7c2150c80785ba6c6081c6107c7d586b6e3bdc20b4b90a6575f58be29706853fdef6f1873061685ec84dbc152aeed2acfca5ec610562dc7e1b4d0f53b3077e931f477c0f8ab738b4aac688a4fa283022cc9b5c47e05861be8ceb7ece874509d13dfa23f54e85b3d8eef2a7ee4bbd505354ae54cc4fc0d0ac452f2", @generic="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", @typed={0x8, 0x1b, @fd=r1}, @generic="feebaceb5a075e0d1f51b2a484d22e2c1446f8e17c9aa2b3593250e4a165c42f37200a73861780b66e90219696fe8ef1bf5d6c89fa6c54bb1700b6cc10d278121bb5a724d14325c60a9da62b6d2f71e5f7bc6aa319609260b504794e2722b898107794946f562812915e3e52b1c5735dc6d0677b6ef61b0ff405e280c6c0e508718a66e9c4331b179d7f171f58e6b2f9ab9d473d24051f6ea02560347a120da4b2"]}, @generic="0b14f7161d5ffcae469af2e63941ae5d5ad11fc3e36dad2d2bbca73d038cf36f5759770c71f0c438aae32a7242d72a6f5e0c59c679814410e8bc46470f089373c488f66049bbcbd12dbca65b2e75d233e060528f363e86f3cae324f400b6eb3bb455afb88814b67130812fd62067c893b4aa9fc89f41483c4d7d808df1ce41bc87a120fd1d30d277dac4780dcc3df63fecee11e4fc9632fd86c73d957f85d127c13b0aed60e59bcb2a94f8540db17c56f7194422f1e6c501d5e77c392aa45a87d732dc3ecfc5290606628893c3dfddbe5dff9eaf3d", @generic="43880873bba1e3999757bf06c2008a37502633a5dedc0d61bc28be8b7df872ad8140837971f8a621139ae1cdb0c8e2ef887d1b5d4c5fe52967fd730557935bf45c445f4667a59059ae477c1dbce83a3e7c3a5594b8e179ec47397b0d28fba6eb2181a41597e78a1a6446249b7b43137d1e9e6d37ea55d7fdf9f4e81e98eaf35f89d9092e0e34516771795c661e935774a14ca26b59d83e42fb4717d3e31e0ed954590f1d253c97c10020585c9d252049840ab5235e17c82775b340e740cba63489ba86489a5b83d05c26a4e056f35196fd55"]}, 0x1480}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40080) r5 = request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='clear_refs\x00', 0x0) add_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="d3031490802385d72279e6367120aaca6bcb92c0b3cd5264d5ddb50c405fdae7d0d27ac8d1272bdd06ec12d60778cd9b09c8394e5b8601dea5e1eec8282424e0dcf2257b35db9bc081a5", 0x4a, r5) tkill(r3, 0x1000000000016) 06:56:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xf0ff7f]}) 06:56:15 executing program 1: r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='syz', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r0, 0xfc, 0x55}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'sha3-224\x00'}}, &(0x7f0000000240)="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", &(0x7f0000000340)=""/85) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) 06:56:15 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xf0ffff]}) 06:56:15 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4788, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2219.005475][T15652] FAULT_INJECTION: forcing a failure. [ 2219.005475][T15652] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.054360][T15652] CPU: 0 PID: 15652 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2219.062302][T15652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2219.072361][T15652] Call Trace: [ 2219.075670][T15652] dump_stack+0x172/0x1f0 [ 2219.080026][T15652] should_fail.cold+0xa/0x15 [ 2219.084629][T15652] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2219.090445][T15652] ? ___might_sleep+0x163/0x280 [ 2219.095308][T15652] __should_failslab+0x121/0x190 [ 2219.100280][T15652] should_failslab+0x9/0x14 [ 2219.104788][T15652] __kmalloc+0x2d9/0x740 [ 2219.109034][T15652] ? __lock_acquire+0x54f/0x5490 [ 2219.113976][T15652] ? save_stack+0x5c/0x90 [ 2219.118307][T15652] ? save_stack+0x23/0x90 [ 2219.122648][T15652] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2219.128044][T15652] tomoyo_encode2.part.0+0xf5/0x400 [ 2219.133263][T15652] tomoyo_encode+0x2b/0x50 [ 2219.137684][T15652] tomoyo_mount_acl+0xe0/0x840 [ 2219.142456][T15652] ? avc_has_perm+0x379/0x610 [ 2219.147138][T15652] ? find_held_lock+0x35/0x130 [ 2219.151917][T15652] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2219.157477][T15652] ? mark_held_locks+0xf0/0xf0 [ 2219.162250][T15652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2219.168525][T15652] ? lock_acquire+0x16f/0x3f0 [ 2219.173215][T15652] ? tomoyo_mount_permission+0x10a/0x410 [ 2219.178870][T15652] tomoyo_mount_permission+0x16a/0x410 [ 2219.184434][T15652] ? tomoyo_mount_permission+0x10a/0x410 [ 2219.190078][T15652] ? tomoyo_mount_acl+0x840/0x840 [ 2219.195120][T15652] ? inode_has_perm+0x1b0/0x230 [ 2219.200081][T15652] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2219.205683][T15652] ? strncpy_from_user+0x2ac/0x380 [ 2219.210808][T15652] tomoyo_sb_mount+0x35/0x40 [ 2219.215413][T15652] security_sb_mount+0x87/0xd0 [ 2219.220195][T15652] do_mount+0x1d4/0x1c00 [ 2219.224454][T15652] ? retint_kernel+0x2b/0x2b [ 2219.229056][T15652] ? copy_mount_string+0x40/0x40 [ 2219.234020][T15652] ? copy_mount_options+0x1ea/0x3a0 [ 2219.239316][T15652] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 2219.244880][T15652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2219.251136][T15652] ? copy_mount_options+0x280/0x3a0 [ 2219.256350][T15652] ksys_mount+0xdb/0x150 [ 2219.260607][T15652] __x64_sys_mount+0xbe/0x150 [ 2219.265298][T15652] do_syscall_64+0xfd/0x680 [ 2219.269814][T15652] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2219.275800][T15652] RIP: 0033:0x45c21a [ 2219.279702][T15652] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2219.299406][T15652] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2219.307829][T15652] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2219.315810][T15652] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2219.323789][T15652] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2219.331765][T15652] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2219.339739][T15652] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:16 executing program 0 (fault-call:0 fault-nth:59): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:16 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r5, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x96c3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 06:56:16 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = dup(0xffffffffffffffff) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x57) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) recvmsg(r2, &(0x7f00000006c0)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/191, 0xbf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/56, 0x38}, {&(0x7f00000003c0)=""/184, 0xb8}, {&(0x7f0000000480)=""/172, 0xac}, {&(0x7f0000000540)=""/105, 0x69}], 0x6, &(0x7f0000000640)=""/74, 0x4a}, 0x40000000) getpeername$packet(r1, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'ifb0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000940)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000b00)={@local, @multicast1, 0x0}, &(0x7f0000000b40)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000c40)={0x0, @multicast1, @initdev}, &(0x7f0000000c80)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000dc0)=0xe8) accept$packet(r1, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001340)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001400)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000017c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000001780)={&(0x7f0000001440)={0x310, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x22c, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r11}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r13}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) keyctl$read(0xb, r0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 06:56:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x1000000]}) 06:56:16 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:16 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x2000000]}) 06:56:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2219.526667][T15722] FAULT_INJECTION: forcing a failure. [ 2219.526667][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.578279][T15722] CPU: 0 PID: 15722 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2219.586213][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2219.596271][T15722] Call Trace: [ 2219.599576][T15722] dump_stack+0x172/0x1f0 [ 2219.603921][T15722] should_fail.cold+0xa/0x15 [ 2219.608527][T15722] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2219.614351][T15722] ? ___might_sleep+0x163/0x280 [ 2219.619227][T15722] __should_failslab+0x121/0x190 [ 2219.624186][T15722] should_failslab+0x9/0x14 [ 2219.628705][T15722] __kmalloc+0x2d9/0x740 [ 2219.634481][T15722] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2219.640213][T15722] ? rcu_read_lock_sched_held+0x110/0x130 [ 2219.645942][T15722] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2219.651676][T15722] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2219.657245][T15722] tomoyo_mount_acl+0x2cc/0x840 [ 2219.662101][T15722] ? find_held_lock+0x35/0x130 [ 2219.662116][T15722] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2219.662137][T15722] ? mark_held_locks+0xf0/0xf0 [ 2219.662152][T15722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2219.662193][T15722] ? lock_acquire+0x16f/0x3f0 [ 2219.688215][T15722] ? tomoyo_mount_permission+0x10a/0x410 [ 2219.693862][T15722] tomoyo_mount_permission+0x16a/0x410 [ 2219.699590][T15722] ? tomoyo_mount_permission+0x10a/0x410 [ 2219.705258][T15722] ? tomoyo_mount_acl+0x840/0x840 [ 2219.710290][T15722] ? inode_has_perm+0x1b0/0x230 [ 2219.715158][T15722] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2219.720726][T15722] ? strncpy_from_user+0x2ac/0x380 [ 2219.725855][T15722] tomoyo_sb_mount+0x35/0x40 [ 2219.730461][T15722] security_sb_mount+0x87/0xd0 [ 2219.736228][T15722] do_mount+0x1d4/0x1c00 [ 2219.740488][T15722] ? copy_mount_options+0x5c/0x3a0 [ 2219.745634][T15722] ? copy_mount_string+0x40/0x40 [ 2219.750592][T15722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2219.756868][T15722] ? copy_mount_options+0x280/0x3a0 [ 2219.762080][T15722] ksys_mount+0xdb/0x150 [ 2219.766954][T15722] __x64_sys_mount+0xbe/0x150 [ 2219.771642][T15722] do_syscall_64+0xfd/0x680 06:56:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x800e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2219.776158][T15722] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2219.782060][T15722] RIP: 0033:0x45c21a [ 2219.785959][T15722] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2219.805574][T15722] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2219.814857][T15722] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a 06:56:16 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:16 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8035, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2219.822841][T15722] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2219.830812][T15722] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2219.838815][T15722] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2219.847319][T15722] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2219.906642][T15722] ERROR: Out of memory at tomoyo_realpath_from_path. 06:56:17 executing program 0 (fault-call:0 fault-nth:60): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = shmget(0x3, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x3, 0x0, @thr={&(0x7f0000000180)="a24fec1911d973bca243f82f021d4600d7dcf8f7ea04e0afee25f9c8592c501f8f6372f25ee4ca5bfc2f1d6c9ad4d90ab39f51531e404d48b4682a96c3435cc7fa67b8560fd11971add6b92633", &(0x7f0000000200)="2d818766ddeece12ffed9c3e554dec485a0038490151648ea3cbff0aab8a9080317092e085f66299d989f57e5ac327e8001740f4b5adf9280e0b3ebd86dd438772398fcf17807c846a93783a609463397f69103cf3f66215f15f55a874013c1a03ee8481998aac75966c27acfa5e24e90fd300dd8d15d46e765188681b8ea37c7bdb2a3e663d1293a0508173d2549393f5ca4e72d95abbebc60564e37d78ef1d27e955"}}, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:56:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x3000000]}) 06:56:17 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 06:56:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2220.054773][T15846] net_ratelimit: 21 callbacks suppressed [ 2220.054783][T15846] dccp_invalid_packet: P.Data Offset(0) too small 06:56:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x7, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8847, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2220.097455][T15862] dccp_invalid_packet: P.Data Offset(0) too small 06:56:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4000000]}) [ 2220.159710][T15881] FAULT_INJECTION: forcing a failure. [ 2220.159710][T15881] name failslab, interval 1, probability 0, space 0, times 0 [ 2220.221984][T15881] CPU: 1 PID: 15881 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2220.230003][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2220.230010][T15881] Call Trace: [ 2220.230040][T15881] dump_stack+0x172/0x1f0 [ 2220.230064][T15881] should_fail.cold+0xa/0x15 [ 2220.252326][T15881] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2220.258148][T15881] ? ___might_sleep+0x163/0x280 [ 2220.263019][T15881] __should_failslab+0x121/0x190 [ 2220.267972][T15881] should_failslab+0x9/0x14 [ 2220.272483][T15881] __kmalloc+0x2d9/0x740 [ 2220.276744][T15881] ? tomoyo_realpath_from_path+0xc0/0x7a0 [ 2220.282465][T15881] ? rcu_read_lock_sched_held+0x110/0x130 [ 2220.282482][T15881] ? tomoyo_realpath_from_path+0xcd/0x7a0 [ 2220.282499][T15881] tomoyo_realpath_from_path+0xcd/0x7a0 [ 2220.282521][T15881] tomoyo_mount_acl+0x149/0x840 [ 2220.282548][T15881] ? find_held_lock+0x35/0x130 [ 2220.290853][T15961] dccp_invalid_packet: P.Data Offset(0) too small [ 2220.294799][T15881] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2220.294822][T15881] ? mark_held_locks+0xf0/0xf0 [ 2220.294838][T15881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2220.294870][T15881] ? lock_acquire+0x16f/0x3f0 [ 2220.327113][T15963] dccp_invalid_packet: P.Data Offset(0) too small [ 2220.332915][T15881] ? tomoyo_mount_permission+0x10a/0x410 [ 2220.332938][T15881] tomoyo_mount_permission+0x16a/0x410 [ 2220.332951][T15881] ? tomoyo_mount_permission+0x10a/0x410 [ 2220.332966][T15881] ? tomoyo_mount_acl+0x840/0x840 [ 2220.332986][T15881] ? inode_has_perm+0x1b0/0x230 [ 2220.370732][T15881] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2220.376294][T15881] ? strncpy_from_user+0x2ac/0x380 [ 2220.381418][T15881] tomoyo_sb_mount+0x35/0x40 [ 2220.386027][T15881] security_sb_mount+0x87/0xd0 [ 2220.390840][T15881] do_mount+0x1d4/0x1c00 [ 2220.395105][T15881] ? copy_mount_options+0x5c/0x3a0 [ 2220.400238][T15881] ? copy_mount_string+0x40/0x40 [ 2220.405198][T15881] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2220.411536][T15881] ? copy_mount_options+0x280/0x3a0 [ 2220.416746][T15881] ksys_mount+0xdb/0x150 06:56:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x5000000]}) [ 2220.420999][T15881] __x64_sys_mount+0xbe/0x150 [ 2220.423634][T15965] dccp_invalid_packet: P.Data Offset(0) too small [ 2220.425694][T15881] do_syscall_64+0xfd/0x680 [ 2220.425716][T15881] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2220.425728][T15881] RIP: 0033:0x45c21a [ 2220.425749][T15881] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2220.447322][T15966] dccp_invalid_packet: P.Data Offset(0) too small [ 2220.466087][T15881] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2220.466102][T15881] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2220.466110][T15881] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2220.466118][T15881] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2220.466126][T15881] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2220.466134][T15881] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:17 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = add_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="8e2629746410db544a896328fd8005a21ceb555bf7245a9ba97dc74849a84c7a9aab46f36e34ed5b37e8d12c2cca50d6dc68df09664d", 0x36, 0xfffffffffffffffc) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="4c42b030e666e1b561af65cc983ef433be59732901e5e915adc78c4e9ccfe2f9e8a42208ad08fff67c9499a041e4e649118631e49daeb83431b64af44306de0f156a6223c2fc76edbcef6da6233a047154027982cacb2d4f135ca43212c846744127a31e03289fbc5cfc444eb88f320d0bb216504ca87f6277466c57bbd7fe027492d1027167ef02e1f3931b4bf4247eb2e855166bdf10b713646741224a685a8b6d5dab94f87293f001b05a2726a8400585277611bd474948d7123247374cfc0654d9d5369c9d4098c033c409e467ea9b19ce93809f8b42a98da177", 0xdc, r1) [ 2220.496572][T15881] ERROR: Out of memory at tomoyo_realpath_from_path. 06:56:17 executing program 0 (fault-call:0 fault-nth:61): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="3a38f9fddceaad73a46786ecd89456eb06c79be9ff5a87a65d07752f092b80ac229b38fc118b1484f2d86ea569e6d8923e48e082608163a7a40b266855a617f336dfca8f64d082c8e31a81de449724addd4120d7f082ec944d8345cf01758c9f0860717486f122f08a5af880e743c52080daf50aff670b4b26d099910f0a9f004cfd6352af58f220310dbca068651acce9a12ff983d1f3c187f0c44cb6b04842") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @loopback}}, [0x32, 0xffffffff, 0x0, 0x2fda, 0x7, 0x4c, 0x3, 0x3ff, 0x2, 0x0, 0x3, 0x2, 0x5, 0x9, 0x4000000000000000]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={r4, 0x2800000000, 0x9}, 0x8) gettid() r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000000000000f00000001000000010001000000000000000000000000000b0000c07f0000000001000000000000f7faffff00000000190000800800000004000000020000000200000000000000010000400400000000000000a57b0000050b000000000000050000800000000007000000310000005a60362a00000000040000007fffffff04000000080000000800000000000000040000000002000009000000001000"/176]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000440)={0x0, @aes128, 0x1, "da78f96753dc42f7"}) tkill(r5, 0x1000000000016) 06:56:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8848, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6000000]}) 06:56:17 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8864, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:17 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8dffffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:17 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xae3a, 0x800) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) [ 2220.707999][T16078] dccp_invalid_packet: P.Data Offset(0) too small [ 2220.748623][T16082] dccp_invalid_packet: P.Data Offset(0) too small [ 2220.759083][T16081] FAULT_INJECTION: forcing a failure. [ 2220.759083][T16081] name failslab, interval 1, probability 0, space 0, times 0 06:56:17 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7000000]}) [ 2220.825614][T16081] CPU: 1 PID: 16081 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2220.833558][T16081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2220.843620][T16081] Call Trace: [ 2220.846932][T16081] dump_stack+0x172/0x1f0 [ 2220.851275][T16081] should_fail.cold+0xa/0x15 [ 2220.855870][T16081] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2220.861703][T16081] ? ___might_sleep+0x163/0x280 [ 2220.866572][T16081] __should_failslab+0x121/0x190 [ 2220.871527][T16081] should_failslab+0x9/0x14 [ 2220.876045][T16081] __kmalloc_track_caller+0x2d5/0x740 [ 2220.881437][T16081] ? mark_held_locks+0xf0/0xf0 [ 2220.886205][T16081] ? __x64_sys_mount+0xbe/0x150 [ 2220.891063][T16081] ? do_syscall_64+0xfd/0x680 [ 2220.891080][T16081] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2220.891101][T16081] ? btrfs_mount+0xdc/0x15e2 [ 2220.906417][T16081] kstrdup+0x3a/0x70 [ 2220.906435][T16081] ? btrfs_remount+0x11f0/0x11f0 [ 2220.906455][T16081] btrfs_mount+0xdc/0x15e2 [ 2220.919686][T16081] ? fs_parse+0x53c/0xf70 [ 2220.924037][T16081] ? btrfs_remount+0x11f0/0x11f0 [ 2220.929072][T16081] ? selinux_fs_context_parse_param+0x101/0x160 [ 2220.935327][T16081] ? selinux_sb_show_options+0x550/0x550 [ 2220.940976][T16081] ? rcu_read_lock_sched_held+0x110/0x130 [ 2220.946708][T16081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2220.952957][T16081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2220.959208][T16081] ? vfs_parse_fs_string+0x111/0x170 [ 2220.964590][T16081] ? vfs_parse_fs_string+0x111/0x170 [ 2220.969885][T16081] ? rcu_read_lock_sched_held+0x110/0x130 [ 2220.975624][T16081] ? kfree+0x1f7/0x220 [ 2220.979707][T16081] ? vfs_parse_fs_string+0x116/0x170 [ 2220.985006][T16081] ? vfs_parse_fs_param+0x540/0x540 [ 2220.990214][T16081] ? btrfs_remount+0x11f0/0x11f0 [ 2220.995163][T16081] legacy_get_tree+0x108/0x220 [ 2220.999939][T16081] ? legacy_get_tree+0x108/0x220 [ 2221.004892][T16081] ? legacy_parse_monolithic+0x11f/0x180 [ 2221.010537][T16081] vfs_get_tree+0x8e/0x390 [ 2221.014964][T16081] do_mount+0x138c/0x1c00 [ 2221.019306][T16081] ? copy_mount_string+0x40/0x40 [ 2221.024263][T16081] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2221.030507][T16081] ? copy_mount_options+0x280/0x3a0 [ 2221.035717][T16081] ksys_mount+0xdb/0x150 [ 2221.039974][T16081] __x64_sys_mount+0xbe/0x150 [ 2221.044666][T16081] do_syscall_64+0xfd/0x680 [ 2221.049214][T16081] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2221.055118][T16081] RIP: 0033:0x45c21a 06:56:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/mnt\x00') tkill(r3, 0x1000000000016) 06:56:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/vcs\x00', 0x2200, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0}, &(0x7f0000001ac0)=0xc) lstat(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000001980)='/dev/loop0\x00', &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)='fuseblk\x00', 0x4000, &(0x7f0000001bc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',grid=', @ANYRESDEC=r5, @ANYBLOB=',default_permissions,blksize=0x0000000000001000,allow_other,allow_other,audit,\x00']) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r6 = gettid() timer_create(0x1, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000140)="289479b242e57419f9f9e859ad19d29da0402a87f5e33be2eaf4a999a68f921d013aadcc68bf5db5f7d6c54fcd96c00bc994360b426addf7e27aed74cc0b8b1c6bdcbcc475bb220ae3ed08e8cdaa726cee8905e5f9b710c6e7b8ca0ec87041428a31ce61c7fce80fad", &(0x7f00000001c0)="0db756ac9a9ba8824601bf2acb15d4b3af491ddde7bcf6d5e4184555fb4ea7edf964147ef6a18dd0a3c1d255c1c7349737faa27e5c2fb7c0dade0517927056cae76b609295365c00e25541b15df8196fdf739d2175903aca44bbb5cbc3f28a47f62cbf6a5fa824f36945dcc0de19e97bf71f37971460c058371f340cffefd27fdf3b91aa2615ed3e4fd3712e2c670805a4c69a3364f60f1af85506541b1da33e60bd6757d97b45597ba5c270b37d843fd86f772acf55dd"}}, &(0x7f00000004c0)) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000001880)=0xc) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0x1d) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000001940)={'ip6erspan0\x00', 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001300)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4}}, &(0x7f0000001400)=0xe8) getresgid(&(0x7f0000001440), &(0x7f0000001480)=0x0, &(0x7f00000014c0)) getsockopt$inet_tcp_buf(r7, 0x6, 0x1f, &(0x7f00000018c0)=""/94, &(0x7f0000000400)=0x5e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001500)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000001600)=0xe8) lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f00000017c0)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000300), 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @rights={{0x38, 0x1, 0x1, [r0, r1, r2, r1, r0, r1, r0, r2, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r6, r12, r13}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xb0}, {&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000009c0)="7d7b59ea81969371248b7cd60f56e599bb273b67c93223b7f26fbf6e79c6224fac85a48e057c73e0f709f001cdd256b38ebb8395d228b25c965900", 0x3b}, {&(0x7f0000000a00)="efd51c0d6be561310d1b5c7d9559c43b0dd81aa6f2e80fa94975af1951c40f13fb5e3b33804495aa8745c2313edfd77de209d8a8eeefc4c5b45ce337595a56526c9ed3b5c0a3da0d8ab729961fd27d25e91f87fa6657f23ceec82982d5527ab8efa8dbfb73cfb202d0720a67d597c3019b92f399e119fb1bb8b2646a289f8117f6eac52a443c443442d03e4e292fca", 0x8f}, {&(0x7f0000000ac0)="f6fa52ffb8e097c57b", 0x9}], 0x3, 0x0, 0x0, 0xe49cf89cd61529fb}, {&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000bc0)="8462977ca3e5c012ecb67d7d763952af3f07d2b1d47709ff25af1b9cce7bbb60d72dda573fc8999edcc57a929b10ed258dfcce2f9d886341196ee41db9efc5d4aa002b15f0f0a05236ef1f65a9abc067023007882c0f5295939bb641cfdc714c067062d1b076677a6d9581fecc635503c41b718a04419452d4cdb25d4f9a733f6b2c623b14d25070", 0x88}, {&(0x7f0000000c80)="13c3c4de64ff437f38892764909f0b11f707f10b47a766caca1ccd28ba81a8477595ee25069300f398fff42bdb508b7f51f3cf01e1c5cd004aa9e0274ab163e122f901ef3f9156c7eab4bc5354eb9f9f701bbbb8f3fcf72e5261a51d6ecd53e210d2290c4ef890e928e97a9fce36684805a37f", 0x73}, {&(0x7f0000000d00)="88cb03431426dbfe84004d744b07b20a9e55938de2c2cee68458260936c48f3e3e6b88cf80d2b6dc9ac81686915c1eb7bba4514c00319c66036497a4cae6474c44c36453ac35da22c107d0b0829949661011a07e37f5", 0x56}, {&(0x7f0000000d80)="cf225b590772f702a78778bc558e120ef4a1c3666fe27191ec38e0075c013595", 0x20}, {&(0x7f0000000dc0)="fe870cf533dbe003ca63e3ff5a724163cb0d5336741c6308e72903fe7e9709e6eb773bfa5844278219173aacac76f75939ff26a324fc238e58da00d4279b2f853f389ab5ac52b7a713f08a17830bc4e69d5747a4f60bdf2227c230225951d0e7beb64c23c9af21410729f228a160434a28456f1d931601d0868e3cf5c7b93a020e18d5777b653ca3a16a48aa32db17b7a64fa8febd5d63c745afb8cf986519488f04b91774c6f414a4d9ad9410c8946a3d7994ce8d689b52c2dfdbadd6ecc7cf6728229952f418", 0xc7}, {&(0x7f0000000ec0)="940342a9f95444c95f6345504ac0ab521a4ba5e9fcecfb0a1eabfe8db5863f49e2a1ee9e465cae084679cab47cfe81bb7b3d2eabc31d7fc7470f4ce92c007aa638c6b0276cf8b5241509c3637968670c7d51e4772c3028a0b853628a0c53a9395ff21de441b4a652796c01e17137d4aeaad563ee46d3ca85059706f6ac9af6d2489655256793db42fdb6273657f83b66c557cae15b5e5addc27306321fb272988545966c1495c522b58fa3013948", 0xae}, {&(0x7f0000000f80)="fd3a9967355570edd6e75d33cef84110e53c3d4f292815abd56b136530cf7dbad32a83cee7b9881576fe080743ef8f601cb0bb5e1b38cf9610de5e7bb168f9c54d3480e3502331768cfddfca407030ad2f90e7bef1dbb521b2837bdd92b5b7e5fc4b484d798b381fe72e49935fe787519f4bf25d48f3ae15bc00911a98480d2f66fa15a77d203e4785e45283fcd038971506453154799d7e02b49d352d32170c3b2b47cb36defc7059cd28b7259e412f3f59b528afca7107c8650308444894a980c240409abc184a", 0xc8}, {&(0x7f0000001080)="592d8d62c1b9ca05b1ad42acf797833ed6b4f7f708dd683eec661be8373091083a225c1f651fca0b44266cad14378f693b06db769603dd9f52000c011c0ed3ca83535fe044757431f2a1347c1412d20bec8ba9f91637806cc38e61c3ca572823ba782159943edfee6a6c3f012d0c81de2a2f061fb2b96d81a21dd185f35fc0ff9f82db5a2266ad77", 0x88}], 0x8, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {r6, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r6, r16, r17}}}, @cred={{0x1c, 0x1, 0x2, {r6, r18, r19}}}, @rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x90, 0x800}], 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000780)='/dev/video0\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) [ 2221.059019][T16081] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2221.078633][T16081] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2221.087062][T16081] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2221.095039][T16081] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2221.103013][T16081] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2221.110985][T16081] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 06:56:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2221.110994][T16081] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2221.180628][T16147] dccp_invalid_packet: P.Data Offset(0) too small [ 2221.208135][T16201] dccp_invalid_packet: P.Data Offset(0) too small 06:56:18 executing program 0 (fault-call:0 fault-nth:62): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8906, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) rt_sigaction(0x4, &(0x7f0000000340)={&(0x7f0000000180)="c4a25d08150b080000c4c269929cacec990000c421791709640ff268f8470faef9410f50f0c4413dd4f767f2ab8fc978c1e9410f53c3", {0x8}, 0x58000000, &(0x7f00000001c0)="0f33c42271ba12c4815e10ebdae9c442159094e10000008066f3420fa6d036360f72e74e0f01f9c481b37c770066df1b"}, &(0x7f00000003c0)={&(0x7f0000000240)="c4a1eb59ecf30f0d0a4518cc0f986b06c40259b7a4b8390000002e2e2646d06f9b26653e26410f7415b953c1bcdce4c4a1fff04495d1c46279330e", {}, 0x0, &(0x7f0000000380)="c44129767801c443014cad330000004f0fefdb2e660f73f805c4411ddff3c4c1dd59efc4a26af54549c4a351026b2ff60f01f966a6"}, 0x8, &(0x7f0000000400)) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000280)="274d8c59a2e0239214b5963325385571074f04e635f46bf8739e433157aec64caff67a271a09c2d076fdecaf4b9da4012f14d834aa9614ed48825c95e2a7dfce842d9eb1a9655bca6b84fd1488", 0x4d, 0xfffffffffffffffe) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) keyctl$read(0xb, r1, 0x0, 0x0) 06:56:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8000000]}) 06:56:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x8060000]}) 06:56:18 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @loopback}, {0x6, @dev={[], 0x11}}, 0x10, {0x2, 0x4e20, @local}, 'caif0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futex(&(0x7f0000000080)=0x1, 0x8b, 0x2, &(0x7f0000000180)={r5, r6+30000000}, &(0x7f00000001c0)=0x2, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) [ 2221.438341][T16271] FAULT_INJECTION: forcing a failure. [ 2221.438341][T16271] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2221.451585][T16271] CPU: 0 PID: 16271 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2221.459483][T16271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2221.469542][T16271] Call Trace: [ 2221.472849][T16271] dump_stack+0x172/0x1f0 [ 2221.477204][T16271] should_fail.cold+0xa/0x15 [ 2221.481804][T16271] ? __kasan_slab_free+0x102/0x150 06:56:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2221.486921][T16271] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2221.492730][T16271] ? mark_held_locks+0xf0/0xf0 [ 2221.492748][T16271] should_fail_alloc_page+0x50/0x60 [ 2221.492762][T16271] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2221.492775][T16271] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2221.492791][T16271] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2221.492803][T16271] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2221.492824][T16271] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2221.492844][T16271] cache_grow_begin+0x9d/0x650 [ 2221.535661][T16271] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2221.541918][T16271] kmem_cache_alloc+0x62a/0x6f0 [ 2221.546785][T16271] getname_kernel+0x53/0x370 [ 2221.551385][T16271] kern_path+0x20/0x40 [ 2221.555484][T16271] tomoyo_mount_acl+0x28c/0x840 [ 2221.560351][T16271] ? find_held_lock+0x35/0x130 [ 2221.565118][T16271] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2221.565142][T16271] ? mark_held_locks+0xf0/0xf0 [ 2221.565164][T16271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2221.575488][T16271] ? lock_acquire+0x16f/0x3f0 [ 2221.575503][T16271] ? tomoyo_mount_permission+0x10a/0x410 [ 2221.575524][T16271] tomoyo_mount_permission+0x16a/0x410 [ 2221.575537][T16271] ? tomoyo_mount_permission+0x10a/0x410 [ 2221.575552][T16271] ? tomoyo_mount_acl+0x840/0x840 [ 2221.575568][T16271] ? inode_has_perm+0x1b0/0x230 [ 2221.575588][T16271] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2221.618608][T16271] ? strncpy_from_user+0x2ac/0x380 [ 2221.623728][T16271] tomoyo_sb_mount+0x35/0x40 [ 2221.628328][T16271] security_sb_mount+0x87/0xd0 [ 2221.634572][T16271] do_mount+0x1d4/0x1c00 06:56:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2221.638827][T16271] ? copy_mount_options+0x5c/0x3a0 [ 2221.643947][T16271] ? copy_mount_string+0x40/0x40 [ 2221.648902][T16271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2221.655148][T16271] ? copy_mount_options+0x280/0x3a0 [ 2221.660378][T16271] ksys_mount+0xdb/0x150 [ 2221.664629][T16271] __x64_sys_mount+0xbe/0x150 [ 2221.664649][T16271] do_syscall_64+0xfd/0x680 [ 2221.664668][T16271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2221.664679][T16271] RIP: 0033:0x45c21a [ 2221.664695][T16271] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2221.664703][T16271] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2221.664716][T16271] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2221.664724][T16271] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2221.664732][T16271] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 06:56:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x9000000]}) [ 2221.664739][T16271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2221.664747][T16271] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:18 executing program 0 (fault-call:0 fault-nth:63): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:18 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x316) 06:56:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = gettid() timer_create(0x7, &(0x7f0000066000)={0x0, 0xf, 0x0, @thr={&(0x7f0000000140)="a749728fbac3c380ae166847691ed19759df339ddb66cff8aa4a4e1b86098f0afac8a1771645067c6a6561ba725e39049d79a86c125e8f42e8798323695c95e861e44da8255e1acd8df2b6e19d91963b42536277a1a91713cf75c656d5ad0baebc6af6124890f6b07a06138abba9ea2c140f7ddc201c282a88478151f9b0437ea3", &(0x7f0000000200)="69db9df04e8c1f75366676e509640a8fc29dfec442408dc8a07c3b667b6c535c6738d99bca9726665c7ffd6c211017857040b35d3c0373ec42975928143e2f24c8f8fec0bf2cab7e7339bf78f60cfa6904faef2074492e613806c3833e94d5b93782b6500f9ce10c54ffb134d70cada8c970324020a0e360effcd4448003126e31af81"}}, &(0x7f0000000080)) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000380)={r4, 0x8}) 06:56:18 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xa000000]}) 06:56:18 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:18 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:19 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xffffffdd) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0xff, 0x9}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 06:56:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xb000000]}) 06:56:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ppoll(&(0x7f0000000280)=[{r0, 0x78cd90a378c9daf9}, {r2, 0x101}, {r0, 0x1000}], 0x3, &(0x7f00000002c0), &(0x7f0000000300), 0x8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000080)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x51) tkill(r3, 0x1000000000016) [ 2222.078165][T16348] FAULT_INJECTION: forcing a failure. [ 2222.078165][T16348] name failslab, interval 1, probability 0, space 0, times 0 06:56:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2222.189160][T16348] CPU: 1 PID: 16348 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2222.197089][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2222.207152][T16348] Call Trace: [ 2222.210459][T16348] dump_stack+0x172/0x1f0 [ 2222.214806][T16348] should_fail.cold+0xa/0x15 [ 2222.219408][T16348] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2222.225234][T16348] ? ___might_sleep+0x163/0x280 [ 2222.230102][T16348] __should_failslab+0x121/0x190 [ 2222.235052][T16348] should_failslab+0x9/0x14 [ 2222.239568][T16348] __kmalloc_track_caller+0x2d5/0x740 [ 2222.244952][T16348] ? vfs_parse_fs_string+0xe8/0x170 [ 2222.250166][T16348] kmemdup_nul+0x31/0xa0 [ 2222.254420][T16348] vfs_parse_fs_string+0xe8/0x170 [ 2222.259475][T16348] ? vfs_parse_fs_param+0x540/0x540 [ 2222.264693][T16348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2222.270943][T16348] ? alloc_fs_context+0x400/0x690 [ 2222.275986][T16348] do_mount+0x700/0x1c00 [ 2222.280237][T16348] ? copy_mount_string+0x40/0x40 [ 2222.285208][T16348] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2222.291456][T16348] ? _copy_from_user+0xdd/0x150 [ 2222.296327][T16348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2222.302575][T16348] ? copy_mount_options+0x280/0x3a0 [ 2222.302597][T16348] ksys_mount+0xdb/0x150 [ 2222.302615][T16348] __x64_sys_mount+0xbe/0x150 [ 2222.302633][T16348] do_syscall_64+0xfd/0x680 [ 2222.302659][T16348] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2222.312081][T16348] RIP: 0033:0x45c21a [ 2222.312097][T16348] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2222.312105][T16348] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2222.312120][T16348] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2222.312129][T16348] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2222.312137][T16348] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2222.312144][T16348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2222.312153][T16348] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:19 executing program 0 (fault-call:0 fault-nth:64): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:19 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0xfffffffffffffffc, @empty}}, 0x1e) r1 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000380)="091c0c27b79f51eebb954d48a0d4be787fee00cb04e99e280110b68fadc90cf0afcc9b51debd39606b17e8f6297b9891b58bb798f061bbe93982fa4a97ebd05bcea043022b0b7456dd25a5a3a56f95617c18d9a23eeb24041821995a02393229ddc709db2564bf6e42fdc6ccbe9345632f2f3f8276fe0ec8207baf5cb97ac64450689c3b975cebb6437e646e60a473e2e851f6fa20d1afebb361a99b8be923a0984a3cf55f7b7324beb32f0c5067fa58e21cb5b5f823490236886e53fdee892b3f4b9d", 0xc3, 0xfffffffffffffffe) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x141481, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xd57, @ipv4={[], [], @broadcast}, 0x7fff}}, 0xbcd0, 0x20, 0x8001, 0x8, 0x11}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r3, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x0, @local}]}, &(0x7f0000000580)=0x10) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) keyctl$read(0xb, r1, 0x0, 0x306b) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4, 0x30}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={r4, 0xc5, "da529de56a68d3fd4125199b348114ea604ae7e142288f727d6c1923592d14f26d49802c917ade68035373e67ae74ce2c01ca1eef84511168121ee43341b570bd8e0e921809e1f197a119af7c023caea913100204abe8050e6325e83cc49afd6cfc93622379fa0a1b0b2ce1bf026135159035ed30390a1b94ad5a2b91a5cb0c5cc32b24587360b66d8af0750986de5dc58ceec4244598bbb253c01b2a649badf85e203934ab4a0c82a3b4f14c03f63bef0de18b09d97638afcbca2583fd7377aaef3e16397"}, &(0x7f0000000140)=0x453) 06:56:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xc000000]}) 06:56:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x40) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x801, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @loopback}, &(0x7f0000000280)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'nr0\x00', r5}) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000005c0)=""/4096) 06:56:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff8d, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2222.614314][T16479] FAULT_INJECTION: forcing a failure. [ 2222.614314][T16479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2222.627553][T16479] CPU: 0 PID: 16479 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2222.635445][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2222.635453][T16479] Call Trace: [ 2222.635481][T16479] dump_stack+0x172/0x1f0 [ 2222.635507][T16479] should_fail.cold+0xa/0x15 [ 2222.635525][T16479] ? __kasan_slab_free+0x102/0x150 [ 2222.635545][T16479] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2222.635568][T16479] ? mark_held_locks+0xf0/0xf0 [ 2222.635588][T16479] should_fail_alloc_page+0x50/0x60 [ 2222.635605][T16479] __alloc_pages_nodemask+0x1a1/0x8d0 [ 2222.635620][T16479] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2222.635649][T16479] ? __alloc_pages_slowpath+0x28f0/0x28f0 [ 2222.678880][T16479] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2222.678906][T16479] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2222.678928][T16479] cache_grow_begin+0x9d/0x650 [ 2222.678951][T16479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2222.707073][T16479] kmem_cache_alloc+0x62a/0x6f0 [ 2222.707101][T16479] getname_kernel+0x53/0x370 [ 2222.707119][T16479] kern_path+0x20/0x40 [ 2222.707144][T16479] tomoyo_mount_acl+0x28c/0x840 [ 2222.722977][T16479] ? find_held_lock+0x35/0x130 [ 2222.722996][T16479] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2222.723019][T16479] ? mark_held_locks+0xf0/0xf0 [ 2222.723036][T16479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2222.723069][T16479] ? lock_acquire+0x16f/0x3f0 06:56:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xd000000]}) 06:56:19 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2222.723083][T16479] ? tomoyo_mount_permission+0x10a/0x410 [ 2222.723103][T16479] tomoyo_mount_permission+0x16a/0x410 [ 2222.723117][T16479] ? tomoyo_mount_permission+0x10a/0x410 [ 2222.723132][T16479] ? tomoyo_mount_acl+0x840/0x840 [ 2222.723148][T16479] ? inode_has_perm+0x1b0/0x230 [ 2222.723216][T16479] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2222.794715][T16479] ? strncpy_from_user+0x2ac/0x380 [ 2222.799839][T16479] tomoyo_sb_mount+0x35/0x40 [ 2222.804471][T16479] security_sb_mount+0x87/0xd0 [ 2222.809250][T16479] do_mount+0x1d4/0x1c00 [ 2222.813518][T16479] ? copy_mount_options+0x5c/0x3a0 [ 2222.818638][T16479] ? copy_mount_string+0x40/0x40 [ 2222.823598][T16479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2222.829846][T16479] ? copy_mount_options+0x280/0x3a0 [ 2222.835056][T16479] ksys_mount+0xdb/0x150 [ 2222.839307][T16479] __x64_sys_mount+0xbe/0x150 [ 2222.843995][T16479] do_syscall_64+0xfd/0x680 [ 2222.848509][T16479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2222.854401][T16479] RIP: 0033:0x45c21a [ 2222.858299][T16479] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2222.877911][T16479] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2222.886326][T16479] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2222.886335][T16479] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2222.886344][T16479] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 06:56:19 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2222.886353][T16479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2222.886362][T16479] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x13000000]}) 06:56:20 executing program 0 (fault-call:0 fault-nth:65): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:20 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0, 0x47, 0x2e}, &(0x7f0000000100)={'enc=', 'raw', ' hash=', {'crct10dif\x00'}}, &(0x7f0000000180)="2d6adb5b7728fa8c7303d5ccf2ef2bb0c837169fd4ce2d9eefa0ed1b46c7711be1fa60fa51718ae0aa95cf6b0e5bb53680893dc8d9ed484a61290a82dc68e166e2c662a0c8f8ed", &(0x7f0000000200)=""/46) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x80040, 0x0) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000400)=[{&(0x7f0000000300)="c0843a3fd41d5084825164bafd9ed678c1681cb099084bbe125316d07d9d641877d321d83db2940584236000d51d645238bbdb76078a5103a80838c10566600d57f11e70b7c9a33c44dc89af09696b8a1bdabbcd1ec539", 0x57}, {&(0x7f0000000380)="356edcbef03023c874da3dae0c489f2ce9eac01f43b2e0fd7b34175199be5f1c94b3c0afa32e3ae661a1cce4231182f72b964ca946225e5c0d38b722d09d9aa260c15a559d6bc326728beda00d9d83c09010fc8492401a6c5d855e40a98ca51ddea0b82030669a1cf1b0", 0x6a}], 0x2, r0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000280)=""/75) 06:56:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="275a61635e0bcfec7be070b6c2f8fb1c4cf2150728629b4dd83b46e40ef2a4b3856efbdaf93cec3c7cabf965e35596b4") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffff000014000000060000004d0000000100000009000000ffffffff"]) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/48, 0xffffffffffffff99}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x39) 06:56:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x14000000]}) 06:56:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x20000000]}) 06:56:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:20 executing program 4: r0 = gettid() wait4(r0, &(0x7f0000000080), 0xfffffffffffffffc, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000180)) ioctl(r1, 0x1000008913, &(0x7f00000000c0)="48d0130347db890ed6e070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:56:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:20 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="f92fae368c348c42a33dec1c8511937475a3405374b764e1c60282000ba33c739ce540e2e3cb0d5383120263bbb20b14f94fceba5186469d5608e76d7457", 0x3e, 0xfffffffffffffffe) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x4000, 0x0) keyctl$read(0xb, r0, 0x0, 0x0) [ 2223.365548][T16716] FAULT_INJECTION: forcing a failure. [ 2223.365548][T16716] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.469664][T16716] CPU: 0 PID: 16716 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2223.477586][T16716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2223.487649][T16716] Call Trace: [ 2223.490960][T16716] dump_stack+0x172/0x1f0 [ 2223.495315][T16716] should_fail.cold+0xa/0x15 [ 2223.499916][T16716] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2223.505730][T16716] ? ___might_sleep+0x163/0x280 [ 2223.510596][T16716] __should_failslab+0x121/0x190 [ 2223.515549][T16716] should_failslab+0x9/0x14 [ 2223.520061][T16716] __kmalloc_track_caller+0x2d5/0x740 [ 2223.525444][T16716] ? btrfs_mount_root+0x1d0/0x1220 [ 2223.530598][T16716] ? rcu_read_lock_sched_held+0x110/0x130 [ 2223.536337][T16716] ? btrfs_mount_root+0x2b8/0x1220 [ 2223.541461][T16716] kstrdup+0x3a/0x70 [ 2223.545366][T16716] btrfs_mount_root+0x2b8/0x1220 [ 2223.550323][T16716] ? btrfs_decode_error+0x70/0x70 [ 2223.555357][T16716] ? rcu_read_lock_sched_held+0x110/0x130 [ 2223.561106][T16716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2223.567444][T16716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2223.573694][T16716] ? vfs_parse_fs_string+0x111/0x170 [ 2223.578983][T16716] ? vfs_parse_fs_string+0x111/0x170 [ 2223.584279][T16716] ? rcu_read_lock_sched_held+0x110/0x130 [ 2223.590036][T16716] ? kfree+0x1f7/0x220 [ 2223.594114][T16716] ? vfs_parse_fs_string+0x116/0x170 [ 2223.599407][T16716] ? vfs_parse_fs_param+0x540/0x540 [ 2223.604617][T16716] ? btrfs_decode_error+0x70/0x70 [ 2223.609651][T16716] legacy_get_tree+0x108/0x220 [ 2223.614427][T16716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2223.620676][T16716] vfs_get_tree+0x8e/0x390 [ 2223.625101][T16716] fc_mount+0x17/0xc0 [ 2223.629092][T16716] vfs_kern_mount.part.0+0xd8/0xf0 [ 2223.635690][T16716] vfs_kern_mount+0x40/0x60 [ 2223.640214][T16716] btrfs_mount+0x2b4/0x15e2 [ 2223.644726][T16716] ? fs_parse+0x53c/0xf70 [ 2223.649075][T16716] ? btrfs_remount+0x11f0/0x11f0 [ 2223.654019][T16716] ? selinux_fs_context_parse_param+0x101/0x160 [ 2223.660267][T16716] ? selinux_sb_show_options+0x550/0x550 [ 2223.665914][T16716] ? rcu_read_lock_sched_held+0x110/0x130 [ 2223.671636][T16716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2223.677880][T16716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2223.684128][T16716] ? vfs_parse_fs_string+0x111/0x170 [ 2223.689426][T16716] ? vfs_parse_fs_string+0x111/0x170 [ 2223.694724][T16716] ? rcu_read_lock_sched_held+0x110/0x130 [ 2223.700449][T16716] ? kfree+0x1f7/0x220 [ 2223.704528][T16716] ? vfs_parse_fs_string+0x116/0x170 [ 2223.709828][T16716] ? vfs_parse_fs_param+0x540/0x540 [ 2223.715037][T16716] ? btrfs_remount+0x11f0/0x11f0 [ 2223.719981][T16716] legacy_get_tree+0x108/0x220 [ 2223.724754][T16716] ? legacy_get_tree+0x108/0x220 [ 2223.729727][T16716] ? legacy_parse_monolithic+0x11f/0x180 [ 2223.735373][T16716] vfs_get_tree+0x8e/0x390 [ 2223.739803][T16716] do_mount+0x138c/0x1c00 [ 2223.744153][T16716] ? copy_mount_string+0x40/0x40 [ 2223.749139][T16716] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2223.755434][T16716] ? _copy_from_user+0xdd/0x150 [ 2223.760307][T16716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2223.767196][T16716] ? copy_mount_options+0x280/0x3a0 [ 2223.772412][T16716] ksys_mount+0xdb/0x150 [ 2223.776672][T16716] __x64_sys_mount+0xbe/0x150 [ 2223.781365][T16716] do_syscall_64+0xfd/0x680 [ 2223.785886][T16716] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2223.791784][T16716] RIP: 0033:0x45c21a [ 2223.795711][T16716] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2223.815326][T16716] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2223.823743][T16716] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2223.831715][T16716] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2223.839683][T16716] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2223.847658][T16716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2223.855637][T16716] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:20 executing program 0 (fault-call:0 fault-nth:66): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:20 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x21000000]}) 06:56:20 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:20 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:20 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x3f000000]}) 06:56:21 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:21 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2224.126235][T16876] FAULT_INJECTION: forcing a failure. [ 2224.126235][T16876] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.175882][T16876] CPU: 1 PID: 16876 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2224.183813][T16876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2224.193901][T16876] Call Trace: [ 2224.197243][T16876] dump_stack+0x172/0x1f0 [ 2224.201600][T16876] should_fail.cold+0xa/0x15 [ 2224.206211][T16876] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2224.212039][T16876] ? ___might_sleep+0x163/0x280 [ 2224.216917][T16876] __should_failslab+0x121/0x190 [ 2224.221948][T16876] should_failslab+0x9/0x14 [ 2224.226464][T16876] __kmalloc+0x2d9/0x740 [ 2224.230730][T16876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2224.237010][T16876] ? d_absolute_path+0x11b/0x170 [ 2224.241958][T16876] ? __d_path+0x140/0x140 [ 2224.246303][T16876] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2224.251696][T16876] tomoyo_encode2.part.0+0xf5/0x400 [ 2224.256914][T16876] tomoyo_encode+0x2b/0x50 [ 2224.261519][T16876] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2224.267166][T16876] tomoyo_mount_acl+0x2cc/0x840 [ 2224.272033][T16876] ? find_held_lock+0x35/0x130 [ 2224.276803][T16876] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2224.282368][T16876] ? mark_held_locks+0xf0/0xf0 [ 2224.287150][T16876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2224.293424][T16876] ? lock_acquire+0x16f/0x3f0 [ 2224.298117][T16876] ? tomoyo_mount_permission+0x10a/0x410 [ 2224.303943][T16876] tomoyo_mount_permission+0x16a/0x410 [ 2224.309417][T16876] ? tomoyo_mount_permission+0x10a/0x410 [ 2224.315069][T16876] ? tomoyo_mount_acl+0x840/0x840 [ 2224.320104][T16876] ? inode_has_perm+0x1b0/0x230 [ 2224.324975][T16876] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2224.330532][T16876] ? strncpy_from_user+0x2ac/0x380 [ 2224.335655][T16876] tomoyo_sb_mount+0x35/0x40 [ 2224.340260][T16876] security_sb_mount+0x87/0xd0 [ 2224.345302][T16876] do_mount+0x1d4/0x1c00 [ 2224.349552][T16876] ? copy_mount_options+0x5c/0x3a0 [ 2224.354679][T16876] ? copy_mount_string+0x40/0x40 [ 2224.359635][T16876] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2224.365888][T16876] ? copy_mount_options+0x280/0x3a0 [ 2224.371100][T16876] ksys_mount+0xdb/0x150 [ 2224.375359][T16876] __x64_sys_mount+0xbe/0x150 [ 2224.380049][T16876] do_syscall_64+0xfd/0x680 [ 2224.384592][T16876] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2224.390576][T16876] RIP: 0033:0x45c21a [ 2224.394477][T16876] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2224.414085][T16876] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 06:56:21 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x40000000]}) [ 2224.422500][T16876] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2224.430479][T16876] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2224.438458][T16876] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2224.446454][T16876] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2224.454428][T16876] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2224.473565][T16876] ERROR: Out of memory at tomoyo_realpath_from_path. 06:56:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000000140)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x40010000]}) 06:56:23 executing program 1: lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xb48c, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="878beecc4fd665cee2bd4f8d157754cbca21e9ce55f6b0b03170461fda2578281fe48ff67ea7e79eacc064b1eff324475f0a5c6062626800759349c3b43d3f2c337bc153db2e62e93e13ab59d5f71941612ac3049ac66c288d894e968551347bc038d432403c4da04865a3093f5967793fa232bc8c16bb3bbcf5c04a7e2db0c4aa408341365ec47da29a8f4278244f404adaf9dcfbf711bc037fa45502c80644849405417fed30146e3528ee7ecaf77b3b04d8572890bdc40fce21a739a192a4d1a2939845e42699ba", 0xc9, 0x401}], 0x840, &(0x7f00000003c0)={[{@uni_xlateno='uni_xlate=0'}], [{@uid_eq={'uid', 0x3d, r0}}, {@obj_user={'obj_user', 0x3d, ':GPL[cgroup$-%'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x31, 0x77, 0x63, 0x39, 0x61, 0x77, 0x76], 0x2d, [0x77, 0x35, 0x31], 0x2d, [0x67, 0x67, 0x37, 0x62], 0x2d, [0x3b, 0x3d, 0x33, 0x77], 0x2d, [0x36, 0x73, 0x77, 0x76, 0x38, 0x66, 0x37, 0x76]}}}, {@smackfsroot={'smackfsroot'}}, {@uid_lt={'uid<', r1}}]}) r2 = timerfd_create(0xd, 0x800) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, r2, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) 06:56:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8060000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:23 executing program 0 (fault-call:0 fault-nth:67): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2226.436420][T16958] net_ratelimit: 26 callbacks suppressed [ 2226.436430][T16958] dccp_invalid_packet: P.Data Offset(0) too small [ 2226.469251][T16962] FAULT_INJECTION: forcing a failure. [ 2226.469251][T16962] name failslab, interval 1, probability 0, space 0, times 0 06:56:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2226.497241][T16961] FAT-fs (loop1): Unrecognized mount option "obj_user=:GPL[cgroup$-%" or missing value [ 2226.509014][T16972] dccp_invalid_packet: P.Data Offset(0) too small [ 2226.536213][T16962] CPU: 0 PID: 16962 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2226.544147][T16962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2226.554226][T16962] Call Trace: [ 2226.557542][T16962] dump_stack+0x172/0x1f0 [ 2226.561907][T16962] should_fail.cold+0xa/0x15 [ 2226.566525][T16962] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2226.572353][T16962] ? ___might_sleep+0x163/0x280 [ 2226.577235][T16962] __should_failslab+0x121/0x190 [ 2226.577256][T16962] should_failslab+0x9/0x14 [ 2226.577271][T16962] kmem_cache_alloc_trace+0x2ce/0x750 [ 2226.577287][T16962] ? lockdep_init_map+0x1be/0x6d0 [ 2226.577310][T16962] legacy_init_fs_context+0x48/0xe0 [ 2226.604928][T16962] ? generic_parse_monolithic+0x200/0x200 [ 2226.604944][T16962] alloc_fs_context+0x3a7/0x690 [ 2226.604968][T16962] fs_context_for_mount+0x25/0x30 [ 2226.620542][T16962] do_mount+0x132d/0x1c00 [ 2226.624893][T16962] ? copy_mount_string+0x40/0x40 [ 2226.629858][T16962] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2226.636215][T16962] ? copy_mount_options+0x280/0x3a0 [ 2226.641431][T16962] ksys_mount+0xdb/0x150 [ 2226.645716][T16962] __x64_sys_mount+0xbe/0x150 [ 2226.650423][T16962] do_syscall_64+0xfd/0x680 [ 2226.654952][T16962] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2226.660849][T16962] RIP: 0033:0x45c21a [ 2226.664871][T16962] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2226.684523][T16962] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 06:56:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x43050000]}) 06:56:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:23 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xffffff58) [ 2226.692950][T16962] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2226.692960][T16962] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2226.692969][T16962] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2226.692978][T16962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2226.692987][T16962] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2226.799078][T17077] dccp_invalid_packet: P.Data Offset(0) too small [ 2226.817387][T17079] dccp_invalid_packet: P.Data Offset(0) too small 06:56:23 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x3a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) prctl$PR_GET_SECCOMP(0x15) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x15) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000200)=0x52a) 06:56:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x48000000]}) 06:56:23 executing program 0 (fault-call:0 fault-nth:68): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:23 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x993, 0x200) keyctl$read(0xb, r0, 0x0, 0x0) [ 2226.994054][T17092] dccp_invalid_packet: P.Data Offset(0) too small [ 2227.012600][T17093] dccp_invalid_packet: P.Data Offset(0) too small 06:56:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x4c000000]}) 06:56:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2227.070500][T17097] FAULT_INJECTION: forcing a failure. [ 2227.070500][T17097] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.101529][T17097] CPU: 0 PID: 17097 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2227.109468][T17097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2227.119533][T17097] Call Trace: [ 2227.122835][T17097] dump_stack+0x172/0x1f0 [ 2227.127189][T17097] should_fail.cold+0xa/0x15 [ 2227.131794][T17097] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2227.137633][T17097] ? ___might_sleep+0x163/0x280 [ 2227.142759][T17097] __should_failslab+0x121/0x190 [ 2227.147711][T17097] should_failslab+0x9/0x14 [ 2227.152220][T17097] __kmalloc+0x2d9/0x740 [ 2227.156466][T17097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2227.162710][T17097] ? d_absolute_path+0x11b/0x170 [ 2227.167649][T17097] ? __d_path+0x140/0x140 [ 2227.171983][T17097] ? tomoyo_encode2.part.0+0xf5/0x400 [ 2227.177364][T17097] tomoyo_encode2.part.0+0xf5/0x400 [ 2227.182582][T17097] tomoyo_encode+0x2b/0x50 [ 2227.187005][T17097] tomoyo_realpath_from_path+0x1d3/0x7a0 [ 2227.192648][T17097] tomoyo_mount_acl+0x2cc/0x840 [ 2227.197513][T17097] ? find_held_lock+0x35/0x130 [ 2227.202301][T17097] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 2227.204403][T17105] dccp_invalid_packet: P.Data Offset(0) too small [ 2227.207872][T17097] ? mark_held_locks+0xf0/0xf0 [ 2227.207890][T17097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2227.207922][T17097] ? lock_acquire+0x16f/0x3f0 [ 2227.230427][T17097] ? tomoyo_mount_permission+0x10a/0x410 [ 2227.236078][T17097] tomoyo_mount_permission+0x16a/0x410 [ 2227.241542][T17097] ? tomoyo_mount_permission+0x10a/0x410 [ 2227.247196][T17097] ? tomoyo_mount_acl+0x840/0x840 [ 2227.247213][T17097] ? inode_has_perm+0x1b0/0x230 [ 2227.247234][T17097] ? selinux_inode_setxattr+0x8b0/0x8b0 [ 2227.247256][T17097] ? strncpy_from_user+0x2ac/0x380 06:56:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x43050000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2227.262668][T17097] tomoyo_sb_mount+0x35/0x40 [ 2227.262690][T17097] security_sb_mount+0x87/0xd0 [ 2227.262711][T17097] do_mount+0x1d4/0x1c00 [ 2227.262727][T17097] ? retint_kernel+0x2b/0x2b [ 2227.262744][T17097] ? copy_mount_string+0x40/0x40 [ 2227.262764][T17097] ? copy_mount_options+0x1f0/0x3a0 [ 2227.262781][T17097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2227.262802][T17097] ? copy_mount_options+0x280/0x3a0 [ 2227.272494][T17097] ksys_mount+0xdb/0x150 [ 2227.272514][T17097] __x64_sys_mount+0xbe/0x150 [ 2227.272534][T17097] do_syscall_64+0xfd/0x680 06:56:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x664) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffff9c}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/84}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={r3, 0x80000, r1}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$TIOCGDEV(r5, 0x80045432, &(0x7f0000000140)) tkill(r2, 0x1000000000016) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000300)={0xffffffff, 0x0, 0x7, 0x3, 0x18, 0xa3, 0x6, 0x6, 0xddf, 0x0, 0x3f}) [ 2227.272553][T17097] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2227.272565][T17097] RIP: 0033:0x45c21a [ 2227.272580][T17097] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2227.272589][T17097] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2227.272603][T17097] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a 06:56:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x800e0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x60000000]}) 06:56:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x4000000000) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x6000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f00000001c0)=0x1) r5 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000140)={0x7fff, 0xffffffff}) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000180)=0x3) r7 = gettid() ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000002c0)='\x00', 0x0, r2) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000280)=0x4) fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x2, 0x0, 0x9, 0x0, r7}) [ 2227.272612][T17097] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2227.272621][T17097] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2227.272628][T17097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2227.272637][T17097] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2227.277044][T17165] dccp_invalid_packet: P.Data Offset(0) too small [ 2227.397673][T17097] ERROR: Out of memory at tomoyo_realpath_from_path. 06:56:24 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20200) ioctl$void(r1, 0xc0045c79) [ 2227.486728][T17219] dccp_invalid_packet: P.Data Offset(0) too small 06:56:24 executing program 0 (fault-call:0 fault-nth:69): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x80350000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x68000000]}) [ 2227.543932][T17224] dccp_invalid_packet: P.Data Offset(0) too small 06:56:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) [ 2227.672701][T17288] FAULT_INJECTION: forcing a failure. [ 2227.672701][T17288] name failslab, interval 1, probability 0, space 0, times 0 06:56:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x3, "8734667246ed3531"}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/32) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xfa, "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"}, &(0x7f00000002c0)=0x102) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000300)={r4, 0xeb, "73bd9160fac2ddef5ca23727df4327ead0bedfa9a229a919b25ee94939985c0f8b0343151d647e9e39657d3f4995df32dc5cfae25848f51c8c169ee20af00f8b8e1a9efb20fbdb594842ff5da2afa4ea78398c0d66e3ced4a77c5f6d7254b35c2647a6fdd2e44e26f2374252884566ce463e39e23278ffafd036a2da18128f241406984419d8ea853f5f46f18f75bd979e4274584515517f229f3860aa17a3df7d3691a13bed76a5ef1752af5b7cc12365d2e9bf262ff3ff2b54e0f163fadba36179a8187c545885d2c2572e886cf9261a969e2d27ffc60f654d594437e6d7ae4b974b8cded6f141363860"}, &(0x7f0000000400)=0xf3) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e22, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0xabe, 0x0, 0xfffffffffffffffb, 0x11c, 0x5}) tkill(r2, 0x1000000000016) [ 2227.727252][T17288] CPU: 1 PID: 17288 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2227.735189][T17288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2227.735197][T17288] Call Trace: [ 2227.735225][T17288] dump_stack+0x172/0x1f0 [ 2227.735248][T17288] should_fail.cold+0xa/0x15 [ 2227.735269][T17288] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2227.735295][T17288] ? ___might_sleep+0x163/0x280 [ 2227.770138][T17288] __should_failslab+0x121/0x190 [ 2227.775274][T17288] should_failslab+0x9/0x14 [ 2227.779797][T17288] __kmalloc_track_caller+0x2d5/0x740 [ 2227.785209][T17288] ? vfs_parse_fs_string+0xe8/0x170 [ 2227.790418][T17288] kmemdup_nul+0x31/0xa0 [ 2227.790437][T17288] vfs_parse_fs_string+0xe8/0x170 [ 2227.790453][T17288] ? vfs_parse_fs_param+0x540/0x540 [ 2227.790476][T17288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2227.790495][T17288] ? alloc_fs_context+0x400/0x690 [ 2227.816229][T17288] do_mount+0x700/0x1c00 [ 2227.816253][T17288] ? copy_mount_string+0x40/0x40 [ 2227.816285][T17288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2227.831712][T17288] ? copy_mount_options+0x280/0x3a0 [ 2227.831734][T17288] ksys_mount+0xdb/0x150 [ 2227.831751][T17288] __x64_sys_mount+0xbe/0x150 [ 2227.831770][T17288] do_syscall_64+0xfd/0x680 [ 2227.831795][T17288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2227.850366][T17288] RIP: 0033:0x45c21a [ 2227.850383][T17288] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2227.850391][T17288] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2227.850405][T17288] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2227.850421][T17288] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2227.879807][T17288] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2227.879816][T17288] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 06:56:24 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:24 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x6c000000]}) [ 2227.879822][T17288] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:24 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x86ddffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) gettid() pkey_alloc(0x0, 0x3) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:25 executing program 0 (fault-call:0 fault-nth:70): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x88470000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000100)="68b2774a02537ef0", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x74000000]}) [ 2228.184542][T17462] FAULT_INJECTION: forcing a failure. [ 2228.184542][T17462] name failslab, interval 1, probability 0, space 0, times 0 06:56:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2228.273225][T17462] CPU: 1 PID: 17462 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2228.281155][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2228.291217][T17462] Call Trace: [ 2228.291245][T17462] dump_stack+0x172/0x1f0 [ 2228.291279][T17462] should_fail.cold+0xa/0x15 [ 2228.303466][T17462] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2228.309285][T17462] ? ___might_sleep+0x163/0x280 [ 2228.314146][T17462] __should_failslab+0x121/0x190 [ 2228.314165][T17462] should_failslab+0x9/0x14 [ 2228.314178][T17462] __kmalloc_track_caller+0x2d5/0x740 [ 2228.314200][T17462] ? vfs_parse_fs_string+0xe8/0x170 [ 2228.314220][T17462] kmemdup_nul+0x31/0xa0 [ 2228.314240][T17462] vfs_parse_fs_string+0xe8/0x170 [ 2228.334235][T17462] ? vfs_parse_fs_param+0x540/0x540 [ 2228.334259][T17462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2228.334279][T17462] ? alloc_fs_context+0x400/0x690 [ 2228.343531][T17462] do_mount+0x700/0x1c00 [ 2228.343551][T17462] ? copy_mount_string+0x40/0x40 [ 2228.343573][T17462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2228.343595][T17462] ? copy_mount_options+0x280/0x3a0 [ 2228.355026][T17462] ksys_mount+0xdb/0x150 [ 2228.355046][T17462] __x64_sys_mount+0xbe/0x150 [ 2228.355067][T17462] do_syscall_64+0xfd/0x680 [ 2228.355089][T17462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2228.364953][T17462] RIP: 0033:0x45c21a 06:56:25 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x0, 0x0) getpeername$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) r4 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r5, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r7 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3ff, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x8, 0x7, 0x1f, 0x3ff, 0x10000, 0xb2d, 0xff, {0x0, @in6={{0xa, 0x4e22, 0x6, @mcast1}}, 0x9, 0x7, 0x7ff, 0x100000000, 0x8}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000240)={r8, 0x401}, 0x8) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000040)=""/32) sync() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x26) 06:56:25 executing program 1: r0 = dup(0xffffffffffffff9c) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)=0xf4240) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0xfffffffffffffeea, 0xfffffffffffffffe) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x2) keyctl$read(0xb, r1, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x500) socket$inet_smc(0x2b, 0x1, 0x0) 06:56:25 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x88480000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a00000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2228.364969][T17462] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2228.364977][T17462] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2228.364990][T17462] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2228.364998][T17462] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2228.365008][T17462] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2228.365015][T17462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2228.365023][T17462] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7a000000]}) 06:56:25 executing program 0 (fault-call:0 fault-nth:71): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:25 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x88640000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1008008912, &(0x7f0000000140)="1f5a61635e0bcfec7be0707083403bd989d4fc4b78c3fb8abfdc4b623f184385f89c66bc2b38ad373aafba24e4995bb91a8eded0bdd5fa9834a7c64cc8597c306413c2f258b2388eaf4278c5164a") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:25 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x50000, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) 06:56:25 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7f000000]}) [ 2228.734114][T17590] FAULT_INJECTION: forcing a failure. [ 2228.734114][T17590] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.782803][T17590] CPU: 1 PID: 17590 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2228.791337][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2228.801406][T17590] Call Trace: [ 2228.804728][T17590] dump_stack+0x172/0x1f0 [ 2228.809078][T17590] should_fail.cold+0xa/0x15 [ 2228.813697][T17590] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2228.819520][T17590] ? ___might_sleep+0x163/0x280 [ 2228.824389][T17590] __should_failslab+0x121/0x190 [ 2228.829341][T17590] should_failslab+0x9/0x14 [ 2228.833854][T17590] kmem_cache_alloc_trace+0x2ce/0x750 [ 2228.839248][T17590] alloc_fs_context+0x5a/0x690 [ 2228.844025][T17590] fs_context_for_mount+0x25/0x30 [ 2228.849060][T17590] vfs_kern_mount.part.0+0x28/0xf0 [ 2228.854181][T17590] vfs_kern_mount+0x40/0x60 [ 2228.858707][T17590] btrfs_mount+0x2b4/0x15e2 [ 2228.863234][T17590] ? fs_parse+0x53c/0xf70 [ 2228.867582][T17590] ? btrfs_remount+0x11f0/0x11f0 [ 2228.872534][T17590] ? selinux_fs_context_parse_param+0x101/0x160 [ 2228.878789][T17590] ? selinux_sb_show_options+0x550/0x550 [ 2228.884438][T17590] ? rcu_read_lock_sched_held+0x110/0x130 [ 2228.890176][T17590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2228.896425][T17590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2228.902683][T17590] ? vfs_parse_fs_string+0x111/0x170 [ 2228.907978][T17590] ? vfs_parse_fs_string+0x111/0x170 [ 2228.913272][T17590] ? rcu_read_lock_sched_held+0x110/0x130 [ 2228.919001][T17590] ? kfree+0x1f7/0x220 [ 2228.923084][T17590] ? vfs_parse_fs_string+0x116/0x170 [ 2228.928386][T17590] ? vfs_parse_fs_param+0x540/0x540 [ 2228.933598][T17590] ? btrfs_remount+0x11f0/0x11f0 [ 2228.938542][T17590] legacy_get_tree+0x108/0x220 [ 2228.943314][T17590] ? legacy_get_tree+0x108/0x220 [ 2228.948287][T17590] ? legacy_parse_monolithic+0x11f/0x180 [ 2228.953935][T17590] vfs_get_tree+0x8e/0x390 [ 2228.958362][T17590] do_mount+0x138c/0x1c00 [ 2228.962709][T17590] ? copy_mount_string+0x40/0x40 [ 2228.967675][T17590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2228.973924][T17590] ? copy_mount_options+0x280/0x3a0 [ 2228.979133][T17590] ksys_mount+0xdb/0x150 [ 2228.983384][T17590] __x64_sys_mount+0xbe/0x150 [ 2228.988076][T17590] do_syscall_64+0xfd/0x680 [ 2228.992592][T17590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2228.998487][T17590] RIP: 0033:0x45c21a [ 2229.002431][T17590] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2229.022045][T17590] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 06:56:26 executing program 1: r0 = add_key(&(0x7f00000003c0)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000002c0)="c83184f302eeff82e7a6cdbc1d46cdd1c31ae21ffcae75b3fe5b891e3b99fba126760b2e30e0e53dd5f7e723fe2160ecb8efa5552a03bb93be4725bd4d7a678107ab806e3fdadb2c950130c90000000000000000000000ced268f937dc36351c96d1f144a76f0e507e00a6fd928a6fc3ec9857a736de3cb24ac7d168f43dda191eafeeebafb31677b0e53cf3de66", 0x93, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000000c0)='\t', 0xffffffffffffff22, r0) keyctl$read(0xb, r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x402000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000200)={0x9, 0xffff, 0x485, 0x1, 0x6, 0x8, 0x7ff}, 0xc) 06:56:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x88a8ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x7ffff000]}) [ 2229.030476][T17590] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2229.038454][T17590] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2229.046517][T17590] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2229.054581][T17590] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2229.062617][T17590] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x800e0000]}) 06:56:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x88caffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 0 (fault-call:0 fault-nth:72): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xfffffd55) [ 2229.384251][T17822] FAULT_INJECTION: forcing a failure. [ 2229.384251][T17822] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.427194][T17822] CPU: 1 PID: 17822 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2229.435209][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2229.445296][T17822] Call Trace: [ 2229.448602][T17822] dump_stack+0x172/0x1f0 [ 2229.452945][T17822] should_fail.cold+0xa/0x15 [ 2229.457546][T17822] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2229.463366][T17822] ? ___might_sleep+0x163/0x280 [ 2229.468260][T17822] __should_failslab+0x121/0x190 [ 2229.473227][T17822] should_failslab+0x9/0x14 [ 2229.477738][T17822] kmem_cache_alloc_trace+0x2ce/0x750 [ 2229.483119][T17822] ? lockdep_init_map+0x1be/0x6d0 [ 2229.488168][T17822] legacy_init_fs_context+0x48/0xe0 [ 2229.493563][T17822] ? generic_parse_monolithic+0x200/0x200 [ 2229.499289][T17822] alloc_fs_context+0x3a7/0x690 [ 2229.504153][T17822] fs_context_for_mount+0x25/0x30 [ 2229.509280][T17822] vfs_kern_mount.part.0+0x28/0xf0 [ 2229.514485][T17822] vfs_kern_mount+0x40/0x60 [ 2229.519001][T17822] btrfs_mount+0x2b4/0x15e2 [ 2229.523517][T17822] ? fs_parse+0x53c/0xf70 [ 2229.527868][T17822] ? btrfs_remount+0x11f0/0x11f0 [ 2229.532816][T17822] ? selinux_fs_context_parse_param+0x101/0x160 [ 2229.539067][T17822] ? selinux_sb_show_options+0x550/0x550 [ 2229.544713][T17822] ? rcu_read_lock_sched_held+0x110/0x130 [ 2229.550442][T17822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2229.556699][T17822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2229.562951][T17822] ? vfs_parse_fs_string+0x111/0x170 [ 2229.568247][T17822] ? vfs_parse_fs_string+0x111/0x170 [ 2229.573546][T17822] ? rcu_read_lock_sched_held+0x110/0x130 [ 2229.579274][T17822] ? kfree+0x1f7/0x220 [ 2229.583359][T17822] ? vfs_parse_fs_string+0x116/0x170 [ 2229.588655][T17822] ? vfs_parse_fs_param+0x540/0x540 [ 2229.593872][T17822] ? btrfs_remount+0x11f0/0x11f0 [ 2229.598814][T17822] legacy_get_tree+0x108/0x220 [ 2229.603581][T17822] ? legacy_get_tree+0x108/0x220 [ 2229.608536][T17822] ? legacy_parse_monolithic+0x11f/0x180 [ 2229.614180][T17822] vfs_get_tree+0x8e/0x390 [ 2229.618607][T17822] do_mount+0x138c/0x1c00 [ 2229.622949][T17822] ? copy_mount_string+0x40/0x40 [ 2229.627937][T17822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2229.634846][T17822] ? copy_mount_options+0x280/0x3a0 [ 2229.640057][T17822] ksys_mount+0xdb/0x150 [ 2229.644321][T17822] __x64_sys_mount+0xbe/0x150 [ 2229.649026][T17822] do_syscall_64+0xfd/0x680 [ 2229.653546][T17822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2229.659444][T17822] RIP: 0033:0x45c21a [ 2229.663723][T17822] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2229.683366][T17822] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2229.691798][T17822] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2229.699772][T17822] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2229.707748][T17822] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2229.715722][T17822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 06:56:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f0000000080)=""/26, 0x1a}], 0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000000300)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x80350000]}) 06:56:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x89060000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2229.723706][T17822] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:26 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x12002, 0x0) 06:56:26 executing program 0 (fault-call:0 fault-nth:73): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8dffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x81000000]}) 06:56:26 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:26 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:27 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) [ 2229.980269][T17916] FAULT_INJECTION: forcing a failure. [ 2229.980269][T17916] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.012621][T17916] CPU: 1 PID: 17916 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2230.020559][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2230.030632][T17916] Call Trace: [ 2230.033949][T17916] dump_stack+0x172/0x1f0 [ 2230.038310][T17916] should_fail.cold+0xa/0x15 [ 2230.042909][T17916] ? alloc_page_buffers+0x16a/0x5c0 [ 2230.048127][T17916] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2230.053962][T17916] ? __lock_acquire+0x54f/0x5490 [ 2230.058903][T17916] ? mark_held_locks+0xf0/0xf0 [ 2230.063713][T17916] __should_failslab+0x121/0x190 [ 2230.068664][T17916] should_failslab+0x9/0x14 [ 2230.073185][T17916] kmem_cache_alloc+0x47/0x6f0 [ 2230.077997][T17916] ? ___might_sleep+0x163/0x280 [ 2230.082855][T17916] ? mempool_alloc+0x380/0x380 [ 2230.082893][T17916] mempool_alloc_slab+0x47/0x60 [ 2230.092504][T17916] mempool_alloc+0x169/0x380 [ 2230.097112][T17916] ? mempool_destroy+0x40/0x40 [ 2230.101885][T17916] ? mark_held_locks+0xa4/0xf0 [ 2230.106656][T17916] ? lock_downgrade+0x880/0x880 [ 2230.111520][T17916] ? __find_get_block+0x9b8/0xcf0 [ 2230.111535][T17916] ? __getblk_gfp+0x1b1/0x970 [ 2230.111548][T17916] ? __find_get_block+0x9b8/0xcf0 [ 2230.111563][T17916] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2230.111583][T17916] bio_alloc_bioset+0x3b9/0x680 [ 2230.111603][T17916] ? __find_get_block+0x317/0xcf0 [ 2230.141467][T17916] ? bvec_alloc+0x2f0/0x2f0 [ 2230.145989][T17916] submit_bh_wbc+0x133/0x7f0 [ 2230.150581][T17916] __bread_gfp+0x13d/0x300 [ 2230.155000][T17916] btrfs_read_dev_one_super+0xb6/0x2a0 [ 2230.160457][T17916] btrfs_read_dev_super+0x6c/0xd0 [ 2230.165477][T17916] ? btrfs_read_dev_one_super+0x2a0/0x2a0 [ 2230.171206][T17916] btrfs_get_bdev_and_sb+0xff/0x300 [ 2230.176409][T17916] open_fs_devices+0x68e/0xbd0 [ 2230.181183][T17916] ? find_fsid+0x2e0/0x2e0 [ 2230.185612][T17916] btrfs_open_devices+0x147/0x170 [ 2230.190636][T17916] btrfs_mount_root+0x79a/0x1220 [ 2230.195596][T17916] ? btrfs_decode_error+0x70/0x70 [ 2230.200618][T17916] ? rcu_read_lock_sched_held+0x110/0x130 [ 2230.206340][T17916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.212582][T17916] ? vfs_parse_fs_string+0x111/0x170 [ 2230.217863][T17916] ? vfs_parse_fs_string+0x111/0x170 [ 2230.223145][T17916] ? rcu_read_lock_sched_held+0x110/0x130 [ 2230.228951][T17916] ? kfree+0x1f7/0x220 [ 2230.237280][T17916] ? vfs_parse_fs_string+0x116/0x170 [ 2230.242563][T17916] ? vfs_parse_fs_param+0x540/0x540 [ 2230.247760][T17916] ? btrfs_decode_error+0x70/0x70 [ 2230.252781][T17916] legacy_get_tree+0x108/0x220 [ 2230.257718][T17916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.263959][T17916] vfs_get_tree+0x8e/0x390 [ 2230.268376][T17916] fc_mount+0x17/0xc0 [ 2230.272369][T17916] vfs_kern_mount.part.0+0xd8/0xf0 [ 2230.277479][T17916] vfs_kern_mount+0x40/0x60 [ 2230.281983][T17916] btrfs_mount+0x2b4/0x15e2 [ 2230.286489][T17916] ? fs_parse+0x53c/0xf70 [ 2230.290827][T17916] ? btrfs_remount+0x11f0/0x11f0 [ 2230.295794][T17916] ? selinux_fs_context_parse_param+0x101/0x160 [ 2230.302037][T17916] ? selinux_sb_show_options+0x550/0x550 [ 2230.307673][T17916] ? rcu_read_lock_sched_held+0x110/0x130 [ 2230.313401][T17916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.319641][T17916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.325883][T17916] ? vfs_parse_fs_string+0x111/0x170 [ 2230.331167][T17916] ? vfs_parse_fs_string+0x111/0x170 [ 2230.336448][T17916] ? rcu_read_lock_sched_held+0x110/0x130 [ 2230.342162][T17916] ? kfree+0x1f7/0x220 [ 2230.346230][T17916] ? vfs_parse_fs_string+0x116/0x170 [ 2230.351509][T17916] ? vfs_parse_fs_param+0x540/0x540 [ 2230.356712][T17916] ? btrfs_remount+0x11f0/0x11f0 [ 2230.361642][T17916] legacy_get_tree+0x108/0x220 [ 2230.366408][T17916] ? legacy_get_tree+0x108/0x220 [ 2230.371361][T17916] ? legacy_parse_monolithic+0x11f/0x180 [ 2230.376996][T17916] vfs_get_tree+0x8e/0x390 [ 2230.381426][T17916] do_mount+0x138c/0x1c00 [ 2230.385760][T17916] ? copy_mount_string+0x40/0x40 [ 2230.390696][T17916] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2230.396937][T17916] ? _copy_from_user+0xdd/0x150 [ 2230.401902][T17916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.408142][T17916] ? copy_mount_options+0x280/0x3a0 [ 2230.413356][T17916] ksys_mount+0xdb/0x150 [ 2230.417597][T17916] __x64_sys_mount+0xbe/0x150 [ 2230.422276][T17916] do_syscall_64+0xfd/0x680 [ 2230.426797][T17916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2230.432687][T17916] RIP: 0033:0x45c21a [ 2230.436582][T17916] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2230.456188][T17916] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2230.464627][T17916] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2230.472682][T17916] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 06:56:27 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xfd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2230.480647][T17916] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2230.488617][T17916] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2230.496598][T17916] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) r4 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x81e, 0x400080) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000140)=0x3, 0x4) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f0000000180)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) fsetxattr(r0, &(0x7f0000000240)=@known='trusted.overlay.opaque\x00', &(0x7f0000000280)='aead\x00', 0x5, 0x2) recvmmsg(r7, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 06:56:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x86ddffff]}) 06:56:27 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:27 executing program 0 (fault-call:0 fault-nth:74): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:56:27 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="0c6e68377a7757685d288703d0197838566dd1738bad81", 0x17, r1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000200)=0x8, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x410000) setsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000280)="780a15a7455aa0857b86be3d1e83cefb1cdb6ce463c76df7e3245e", 0x1b) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000002c0)=0x8, 0x4) keyctl$read(0xb, r0, 0x0, 0xc06b495918bc1c02) 06:56:27 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2230.803723][T18063] FAULT_INJECTION: forcing a failure. [ 2230.803723][T18063] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.841739][T18063] CPU: 1 PID: 18063 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2230.849677][T18063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2230.859757][T18063] Call Trace: [ 2230.863092][T18063] dump_stack+0x172/0x1f0 [ 2230.867436][T18063] should_fail.cold+0xa/0x15 [ 2230.872042][T18063] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2230.877861][T18063] ? ___might_sleep+0x163/0x280 [ 2230.882734][T18063] __should_failslab+0x121/0x190 [ 2230.887686][T18063] should_failslab+0x9/0x14 [ 2230.892198][T18063] kmem_cache_alloc_node_trace+0x26d/0x720 [ 2230.898007][T18063] ? vfs_get_tree+0x8e/0x390 [ 2230.902604][T18063] ? do_mount+0x138c/0x1c00 [ 2230.907114][T18063] ? ksys_mount+0xdb/0x150 [ 2230.911533][T18063] ? __x64_sys_mount+0xbe/0x150 [ 2230.916384][T18063] ? do_syscall_64+0xfd/0x680 [ 2230.921070][T18063] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2230.927144][T18063] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2230.933396][T18063] __kmalloc_node+0x3d/0x70 [ 2230.937915][T18063] kvmalloc_node+0xbd/0x100 [ 2230.942431][T18063] btrfs_mount_root+0x12b/0x1220 [ 2230.947387][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.953636][T18063] ? btrfs_decode_error+0x70/0x70 [ 2230.958720][T18063] ? rcu_read_lock_sched_held+0x110/0x130 [ 2230.964445][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.970698][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2230.976951][T18063] ? vfs_parse_fs_string+0x111/0x170 [ 2230.982245][T18063] ? vfs_parse_fs_string+0x111/0x170 [ 2230.987537][T18063] ? rcu_read_lock_sched_held+0x110/0x130 [ 2230.993259][T18063] ? kfree+0x1f7/0x220 [ 2230.997335][T18063] ? vfs_parse_fs_string+0x116/0x170 [ 2231.002630][T18063] ? vfs_parse_fs_param+0x540/0x540 [ 2231.007849][T18063] ? btrfs_decode_error+0x70/0x70 [ 2231.012971][T18063] legacy_get_tree+0x108/0x220 [ 2231.017745][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2231.023994][T18063] vfs_get_tree+0x8e/0x390 [ 2231.028426][T18063] fc_mount+0x17/0xc0 [ 2231.032423][T18063] vfs_kern_mount.part.0+0xd8/0xf0 [ 2231.037549][T18063] vfs_kern_mount+0x40/0x60 [ 2231.042066][T18063] btrfs_mount+0x2b4/0x15e2 [ 2231.046583][T18063] ? fs_parse+0x53c/0xf70 [ 2231.050931][T18063] ? btrfs_remount+0x11f0/0x11f0 [ 2231.055877][T18063] ? selinux_fs_context_parse_param+0x101/0x160 [ 2231.062130][T18063] ? selinux_sb_show_options+0x550/0x550 [ 2231.067774][T18063] ? rcu_read_lock_sched_held+0x110/0x130 [ 2231.073498][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2231.079747][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2231.085996][T18063] ? vfs_parse_fs_string+0x111/0x170 [ 2231.091290][T18063] ? vfs_parse_fs_string+0x111/0x170 [ 2231.096592][T18063] ? rcu_read_lock_sched_held+0x110/0x130 [ 2231.102319][T18063] ? kfree+0x1f7/0x220 [ 2231.106418][T18063] ? vfs_parse_fs_string+0x116/0x170 [ 2231.111713][T18063] ? vfs_parse_fs_param+0x540/0x540 [ 2231.116922][T18063] ? btrfs_remount+0x11f0/0x11f0 [ 2231.121866][T18063] legacy_get_tree+0x108/0x220 [ 2231.126641][T18063] ? legacy_get_tree+0x108/0x220 [ 2231.131592][T18063] ? legacy_parse_monolithic+0x11f/0x180 [ 2231.137239][T18063] vfs_get_tree+0x8e/0x390 [ 2231.141674][T18063] do_mount+0x138c/0x1c00 [ 2231.146370][T18063] ? copy_mount_string+0x40/0x40 [ 2231.151318][T18063] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2231.157570][T18063] ? copy_mount_options+0x280/0x3a0 [ 2231.162786][T18063] ksys_mount+0xdb/0x150 [ 2231.167043][T18063] __x64_sys_mount+0xbe/0x150 [ 2231.171738][T18063] do_syscall_64+0xfd/0x680 [ 2231.176255][T18063] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2231.182171][T18063] RIP: 0033:0x45c21a [ 2231.186081][T18063] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 06:56:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x88470000]}) 06:56:27 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x88480000]}) 06:56:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x88640000]}) 06:56:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x88a8ffff]}) 06:56:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x88caffff]}) 06:56:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0x89060000]}) [ 2231.205705][T18063] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2231.214132][T18063] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2231.222114][T18063] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2231.230088][T18063] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2231.238065][T18063] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2231.246045][T18063] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:28 executing program 4: r0 = epoll_create1(0x0) ioctl(r0, 0x2, &(0x7f0000000140)="5b08b9ca0ad4753c19a03ba6c7d4b138aa7532416044aa6d803034bcd419c524dce6148cc5f9d7ac305fef4577c409b79bebb3035646e7166283122d4a1d4eeb58c04e6a519ed5e2f478905a0d9a7c10487af4c3c4066fb7bd68b8ce09be3746dd0837e8c9d6148b618e33eaa1011f50b249004d") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000080)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 06:56:28 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:28 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 06:56:28 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffa888, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xae020000]}) 06:56:28 executing program 0 (fault-call:0 fault-nth:75): syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000008c0)="8da4363ac0ed4800000000000000004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) [ 2231.737964][T18199] net_ratelimit: 31 callbacks suppressed [ 2231.737974][T18199] dccp_invalid_packet: P.Data Offset(0) too small 06:56:28 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:28 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffca88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2231.788080][T18205] dccp_invalid_packet: P.Data Offset(0) too small [ 2231.847431][T18225] FAULT_INJECTION: forcing a failure. [ 2231.847431][T18225] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.882332][T18225] CPU: 0 PID: 18225 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 06:56:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xba020000]}) [ 2231.890266][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2231.900330][T18225] Call Trace: [ 2231.903633][T18225] dump_stack+0x172/0x1f0 [ 2231.907978][T18225] should_fail.cold+0xa/0x15 [ 2231.912578][T18225] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2231.918398][T18225] ? ___might_sleep+0x163/0x280 [ 2231.923261][T18225] __should_failslab+0x121/0x190 [ 2231.928209][T18225] should_failslab+0x9/0x14 [ 2231.932715][T18225] kmem_cache_alloc_trace+0x2ce/0x750 [ 2231.938094][T18225] ? bd_set_size+0xb0/0xb0 [ 2231.942520][T18225] ? wait_for_completion+0x440/0x440 06:56:28 executing program 1: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\t', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0xfffffdc0) r1 = gettid() keyctl$read(0xb, r0, &(0x7f0000000000)=""/2, 0x2) ptrace$pokeuser(0x6, r1, 0x2, 0x7ff) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000180)={0xf, 0x8, 0x1}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0xc00, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000240)={0x6, 0x4, 0x7ff}) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) [ 2231.947822][T18225] btrfs_alloc_device+0xb4/0x720 [ 2231.952774][T18225] ? btrfs_find_device_by_devspec+0x5b0/0x5b0 [ 2231.958846][T18225] ? blkdev_put+0x98/0x560 [ 2231.963276][T18225] close_fs_devices.part.0+0x1af/0x790 [ 2231.968751][T18225] btrfs_close_devices+0xa0/0x200 [ 2231.973792][T18225] btrfs_mount_root+0xf0c/0x1220 [ 2231.978832][T18225] ? btrfs_decode_error+0x70/0x70 [ 2231.983862][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2231.989586][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:56:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="275a61635e0bcfec7be070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0xc0, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x2, 0x4) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000500)=""/188, 0xbc}], 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/32) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000140)=""/69) tkill(r4, 0x1000000000016) [ 2231.995842][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.001135][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.006444][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.009525][T18313] dccp_invalid_packet: P.Data Offset(0) too small [ 2232.012206][T18225] ? kfree+0x1f7/0x220 [ 2232.012226][T18225] ? vfs_parse_fs_string+0x116/0x170 [ 2232.012242][T18225] ? vfs_parse_fs_param+0x540/0x540 [ 2232.012266][T18225] ? btrfs_decode_error+0x70/0x70 [ 2232.038411][T18225] legacy_get_tree+0x108/0x220 [ 2232.043208][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.049459][T18225] vfs_get_tree+0x8e/0x390 [ 2232.053892][T18225] fc_mount+0x17/0xc0 [ 2232.057881][T18225] vfs_kern_mount.part.0+0xd8/0xf0 [ 2232.063011][T18225] vfs_kern_mount+0x40/0x60 [ 2232.067536][T18225] btrfs_mount+0x2b4/0x15e2 [ 2232.067912][T18319] dccp_invalid_packet: P.Data Offset(0) too small [ 2232.072049][T18225] ? fs_parse+0x53c/0xf70 [ 2232.072076][T18225] ? btrfs_remount+0x11f0/0x11f0 [ 2232.072095][T18225] ? selinux_fs_context_parse_param+0x101/0x160 [ 2232.072112][T18225] ? selinux_sb_show_options+0x550/0x550 [ 2232.072130][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.072146][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.072174][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.087918][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.087939][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.087959][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.087980][T18225] ? kfree+0x1f7/0x220 [ 2232.099862][T18225] ? vfs_parse_fs_string+0x116/0x170 [ 2232.099879][T18225] ? vfs_parse_fs_param+0x540/0x540 [ 2232.099900][T18225] ? btrfs_remount+0x11f0/0x11f0 [ 2232.099915][T18225] legacy_get_tree+0x108/0x220 [ 2232.099929][T18225] ? legacy_get_tree+0x108/0x220 [ 2232.099950][T18225] ? legacy_parse_monolithic+0x11f/0x180 [ 2232.134440][T18225] vfs_get_tree+0x8e/0x390 [ 2232.134459][T18225] do_mount+0x138c/0x1c00 [ 2232.134480][T18225] ? copy_mount_string+0x40/0x40 [ 2232.134497][T18225] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2232.134511][T18225] ? _copy_from_user+0xdd/0x150 [ 2232.134528][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.134543][T18225] ? copy_mount_options+0x280/0x3a0 [ 2232.134562][T18225] ksys_mount+0xdb/0x150 [ 2232.134579][T18225] __x64_sys_mount+0xbe/0x150 [ 2232.134596][T18225] do_syscall_64+0xfd/0x680 [ 2232.134619][T18225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2232.158825][T18225] RIP: 0033:0x45c21a [ 2232.158843][T18225] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 06:56:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xdc020000]}) 06:56:29 executing program 1: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000000c0)='\t', 0x0, 0xfffffffffffffffe) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000012c0)={{0x3, 0x0, 0x5, 0x2, 0x6}, 0x3, 0x7ff}) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r0, 0x1000, 0x76}, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)="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", &(0x7f00000011c0)=""/118) keyctl$read(0xb, r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_open_pts(r1, 0xa0000) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000001280)) [ 2232.158851][T18225] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2232.158866][T18225] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2232.158876][T18225] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2232.158885][T18225] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2232.158892][T18225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2232.158908][T18225] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 06:56:29 executing program 2: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0xffffdd86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:29 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) 06:56:29 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_emit_ethernet(0xffffffffffffffea, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2ce, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x2b6, 0x2}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x0, 0x2d9, 0x3, 0xe0000000]}) [ 2232.346749][ T26] audit: type=1400 audit(1562050589.342:124): avc: denied { create } for pid=18317 comm="syz-executor.4" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 2232.353474][T18422] dccp_invalid_packet: P.Data Offset(0) too small [ 2232.386336][T18423] dccp_invalid_packet: P.Data Offset(0) too small [ 2232.437722][T18225] ------------[ cut here ]------------ [ 2232.443223][T18225] kernel BUG at fs/btrfs/volumes.c:1270! [ 2232.450364][T18225] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2232.456461][T18225] CPU: 0 PID: 18225 Comm: syz-executor.0 Not tainted 5.2.0-rc7 #39 [ 2232.464372][T18225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2232.474439][T18225] RIP: 0010:close_fs_devices.part.0+0x5b9/0x790 [ 2232.480682][T18225] Code: 3c 03 0f 8e 44 01 00 00 48 8b 45 c0 c7 80 20 01 00 00 00 00 00 00 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 26 c4 fe <0f> 0b e8 40 26 c4 fe 0f 0b e8 39 26 c4 fe 0f 0b e9 16 ff ff ff e8 [ 2232.500292][T18225] RSP: 0018:ffff88804f5477a0 EFLAGS: 00010246 [ 2232.506368][T18225] RAX: 0000000000040000 RBX: ffff88805a239040 RCX: ffffc90005e33000 [ 2232.514347][T18225] RDX: 0000000000040000 RSI: ffffffff82ac9cf9 RDI: 0000000000000007 [ 2232.522352][T18225] RBP: ffff88804f547810 R08: ffff88803a8f6000 R09: ffffed1015d06c70 [ 2232.530325][T18225] R10: ffffed1015d06c6f R11: ffff8880ae83637b R12: 0000000000000000 [ 2232.538298][T18225] R13: dffffc0000000000 R14: ffff888097d0fb00 R15: fffffffffffffff4 [ 2232.546283][T18225] FS: 00007f0795b27700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2232.555222][T18225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2232.561811][T18225] CR2: 00007fb25c275db8 CR3: 000000008e82b000 CR4: 00000000001406f0 [ 2232.569784][T18225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2232.577754][T18225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2232.593834][T18225] Call Trace: [ 2232.597144][T18225] btrfs_close_devices+0xa0/0x200 [ 2232.602230][T18225] btrfs_mount_root+0xf0c/0x1220 [ 2232.607186][T18225] ? btrfs_decode_error+0x70/0x70 [ 2232.612309][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.618032][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.624275][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.629567][T18225] ? vfs_parse_fs_string+0x111/0x170 06:56:29 executing program 3: syz_emit_ethernet(0x10b, &(0x7f0000000080)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x15, 0x2c, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x88480000, 0xe80, 0xfd00, 0xe80, 0x200000000000000, 0x81000000], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8864000000000000, 0x0, 0x0, 0xfffffffffffff000, 0x0, 0x8848000000000000]}, {[], @icmpv6=@time_exceed={0x3a, 0x0, 0x0, 0x0, [0x7, 0x4, 0x1000000], {0x0, 0x7, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0x7ffff}}}}}}}}}, 0x0) [ 2232.635364][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.638192][ T3879] kobject: 'loop3' (00000000f5851964): kobject_uevent_env [ 2232.641107][T18225] ? kfree+0x1f7/0x220 [ 2232.641131][T18225] ? vfs_parse_fs_string+0x116/0x170 [ 2232.651752][ T3879] kobject: 'loop3' (00000000f5851964): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2232.652294][T18225] ? vfs_parse_fs_param+0x540/0x540 [ 2232.672931][T18225] ? btrfs_decode_error+0x70/0x70 [ 2232.677963][T18225] legacy_get_tree+0x108/0x220 [ 2232.682732][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.688975][T18225] vfs_get_tree+0x8e/0x390 [ 2232.693396][T18225] fc_mount+0x17/0xc0 [ 2232.697386][T18225] vfs_kern_mount.part.0+0xd8/0xf0 [ 2232.702502][T18225] vfs_kern_mount+0x40/0x60 [ 2232.707014][T18225] btrfs_mount+0x2b4/0x15e2 [ 2232.711525][T18225] ? fs_parse+0x53c/0xf70 [ 2232.715866][T18225] ? btrfs_remount+0x11f0/0x11f0 [ 2232.720995][T18225] ? selinux_fs_context_parse_param+0x101/0x160 [ 2232.727246][T18225] ? selinux_sb_show_options+0x550/0x550 [ 2232.732887][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.738610][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.744861][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.751114][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.756405][T18225] ? vfs_parse_fs_string+0x111/0x170 [ 2232.761697][T18225] ? rcu_read_lock_sched_held+0x110/0x130 [ 2232.767416][T18225] ? kfree+0x1f7/0x220 [ 2232.771676][T18225] ? vfs_parse_fs_string+0x116/0x170 [ 2232.776992][T18225] ? vfs_parse_fs_param+0x540/0x540 [ 2232.782204][T18225] ? btrfs_remount+0x11f0/0x11f0 [ 2232.782313][T18448] dccp_invalid_packet: P.Data Offset(0) too small [ 2232.787140][T18225] legacy_get_tree+0x108/0x220 [ 2232.787154][T18225] ? legacy_get_tree+0x108/0x220 [ 2232.787179][T18225] ? legacy_parse_monolithic+0x11f/0x180 [ 2232.808974][T18225] vfs_get_tree+0x8e/0x390 [ 2232.813398][T18225] do_mount+0x138c/0x1c00 [ 2232.817738][T18225] ? copy_mount_string+0x40/0x40 [ 2232.822686][T18225] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2232.828934][T18225] ? _copy_from_user+0xdd/0x150 [ 2232.833792][T18225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2232.840051][T18225] ? copy_mount_options+0x280/0x3a0 [ 2232.845256][T18225] ksys_mount+0xdb/0x150 [ 2232.849507][T18225] __x64_sys_mount+0xbe/0x150 [ 2232.854197][T18225] do_syscall_64+0xfd/0x680 [ 2232.858715][T18225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2232.864614][T18225] RIP: 0033:0x45c21a [ 2232.868512][T18225] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 9d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 7a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 2232.888125][T18225] RSP: 002b:00007f0795b26a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2232.896553][T18225] RAX: ffffffffffffffda RBX: 00007f0795b26b40 RCX: 000000000045c21a [ 2232.904538][T18225] RDX: 00007f0795b26ae0 RSI: 0000000020000100 RDI: 00007f0795b26b00 [ 2232.912516][T18225] RBP: 0000000000000001 R08: 00007f0795b26b40 R09: 00007f0795b26ae0 [ 2232.920516][T18225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 2232.928490][T18225] R13: 00000000004c86f2 R14: 00000000004df2d8 R15: 0000000000000003 [ 2232.936470][T18225] Modules linked in: [ 2232.954844][ T3879] kobject: 'loop2' (00000000830de636): kobject_uevent_env [ 2232.962368][T18448] dccp_invalid_packet: P.Data Offset(0) too small [ 2232.978528][ T3879] kobject: 'loop2' (00000000830de636): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2232.979665][T18225] ---[ end trace 72428178ab9f3ae6 ]--- [ 2232.998466][ T3879] kobject: 'loop4' (000000003bb57c66): kobject_uevent_env [ 2233.001900][T18225] RIP: 0010:close_fs_devices.part.0+0x5b9/0x790 [ 2233.012772][T18225] Code: 3c 03 0f 8e 44 01 00 00 48 8b 45 c0 c7 80 20 01 00 00 00 00 00 00 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 26 c4 fe <0f> 0b e8 40 26 c4 fe 0f 0b e8 39 26 c4 fe 0f 0b e9 16 ff ff ff e8 [ 2233.020156][ T3879] kobject: 'loop4' (000000003bb57c66): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2233.034244][T18225] RSP: 0018:ffff88804f5477a0 EFLAGS: 00010246 [ 2233.049113][T18225] RAX: 0000000000040000 RBX: ffff88805a239040 RCX: ffffc90005e33000 [ 2233.053128][ T3879] kobject: 'loop0' (000000005b1a1778): kobject_uevent_env [ 2233.057499][T18225] RDX: 0000000000040000 RSI: ffffffff82ac9cf9 RDI: 0000000000000007 [ 2233.064592][ T3879] kobject: 'loop0' (000000005b1a1778): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2233.074640][T18225] RBP: ffff88804f547810 R08: ffff88803a8f6000 R09: ffffed1015d06c70 [ 2233.087911][ T3879] kobject: 'loop3' (00000000f5851964): kobject_uevent_env [ 2233.090718][T18225] R10: ffffed1015d06c6f R11: ffff8880ae83637b R12: 0000000000000000 [ 2233.098747][ T3879] kobject: 'loop3' (00000000f5851964): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2233.108543][T18225] R13: dffffc0000000000 R14: ffff888097d0fb00 R15: fffffffffffffff4 [ 2233.134357][T18225] FS: 00007f0795b27700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2233.147087][T18225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2233.156307][T18225] CR2: 0000000000738000 CR3: 000000008e82b000 CR4: 00000000001406f0 [ 2233.164415][T18225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2233.165772][ T3879] kobject: 'loop1' (000000002bd03a4a): kobject_uevent_env [ 2233.174715][T18225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 2233.179753][ T3879] kobject: 'loop1' (000000002bd03a4a): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2233.187746][T18225] Kernel panic - not syncing: Fatal exception [ 2233.205009][T18225] Kernel Offset: disabled [ 2233.209333][T18225] Rebooting in 86400 seconds..