a909c3738aa0d73691c3790694d81e7ea1940c64f9d60e37c93c7"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x7f, 0x2208c0) r3 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x9, 0x20000) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000000000c67) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) 11:27:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) close(r0) 11:27:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) r2 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) memfd_create(&(0x7f0000000040)='io.stat\x00', 0x1) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(r0, 0x4c, 0x0, 0x7e) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) socket$unix(0x1, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) close(r0) 11:27:23 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r2) close(r2) geteuid() geteuid() write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x3, {0xa, 0x4e23, 0x100000001, @local, 0x3f}, r3}}, 0x38) getgroups(0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee00]) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x7, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000980], 0x0, &(0x7f0000000240), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x1f, 0x5, 0x88ff, 'dummy0\x00', 'vlan0\x00', 'bcsh0\x00', 'veth0\x00', @remote, [0x0, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0xa0, 0xd0}, [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}]}, @common=@redirect={'redirect\x00', 0x8}}, {{{0x0, 0x23, 0x890d, 'bond_slave_1\x00', 'bridge0\x00', 'syz_tun\x00', 'bcsh0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x14}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x2, [{{{0x3, 0x12, 0x8884, 'ifb0\x00', 'ip6_vti0\x00', 'bond_slave_0\x00', 'veth1_to_team\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"81e82f7422cee1fd1ed2a7167d6842fc57d46d25183b89c0a7a2fc9b27b1"}}}, {{{0x0, 0x10, 0x6060, 'rose0\x00', 'dummy0\x00', 'ipddp0\x00', 'bond0\x00', @local, [0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}]}, 0x3d8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8013, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x108) kcmp(0x0, 0x0, 0x4, r2, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x0, 0x7ff, 0x1}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x1000000000000c67) 11:27:23 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x7fff, 0x88200) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e21, @remote}}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) perf_event_open(&(0x7f0000000940)={0x0, 0x70, 0x9, 0x2, 0x5, 0x1, 0x0, 0x8001, 0x2, 0x2, 0x7, 0x20, 0x2819, 0x2, 0x1, 0x9, 0x3, 0x64, 0x3, 0x2, 0x20, 0x6, 0x0, 0x0, 0x15, 0x0, 0x9, 0x4, 0x0, 0x80000001, 0x1, 0x0, 0x1ff, 0xc803, 0xfffffffffffffffc, 0x0, 0x9, 0x7, 0x0, 0x66, 0x7, @perf_bp={&(0x7f0000000340), 0x4}, 0x1000, 0x1, 0x9, 0x1, 0x7ff, 0x2, 0xf8e}, r1, 0x5, r0, 0x1) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:23 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f6367726f757000ac3273b51943f4f6b206d3a6e11617b0b513ea9a2376ddf237a9c275e308cc59a46631af4b0624d52d9c2558128fa0bae9c963fa92cf4fa70fa554f7ca5de16f19428609b5d4ca078c2a223d2b1e6d2aa93e3130a367c384", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:23 executing program 3: socket$rds(0x15, 0x5, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x7fff, 0x4) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) ptrace$setopts(0x4206, r3, 0x0, 0x100008) 11:27:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) close(r0) 11:27:23 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="730af968d20b34b60e12f1418237d23a2e82f952f13d864ae10ab9f62f5ad33f9d873ff260e9d18ed22a0371182cd2e5599d63fe6212bf6d87fe83415f1e3e2fde1d7e46cd5ef6203f2e154e885fad2eb55f4f3d494e666942433157d9e1637140a6c7e43b11bdd0f3e97c3f31142cfc8ee80327e623884e6d37e3f4a0063660f469eac1dcb2c8761ff47f4e9ecbd0e239b3a254975d2ad75c1a76ebf93414aa10f3b20c8437a990165782a5398873ecd336f294702d7d26e04919427ad851277700b33cde8642b2affc7528a4c56f05ceb848"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:23 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xa02, 0x0) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xe10b, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0xfa, "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"}, &(0x7f0000000540)=0x102) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000580)={r2, 0x1}, &(0x7f00000005c0)=0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000140)={0x7, 0x10001, 0x2007, 0x579, 0x77c, {0x101, 0x80}}) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000240)={0x0, @reserved}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x5da5}}, 0x18) r4 = openat$cgroup_int(r3, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000000), 0x1000000000000c67) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000600)={0x18, 0x1, 0x0, {0xfffffffffffff000}}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x9, 0x20, 0x1e46, 0x8}, 0x14) 11:27:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000940)={0xfb1d, "3c56f6b868583164e15004df942f0d1be36a2772c5e5611c73ab2176af0aff44", 0x100, 0x80, 0x6, 0x4, 0x6}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)) 11:27:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000000080003, 0x0) close(r2) close(r2) geteuid() geteuid() write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x3, {0xa, 0x4e23, 0x100000001, @local, 0x3f}, r3}}, 0x38) getgroups(0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee00]) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x7, 0x360, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000980], 0x0, &(0x7f0000000240), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x1f, 0x5, 0x88ff, 'dummy0\x00', 'vlan0\x00', 'bcsh0\x00', 'veth0\x00', @remote, [0x0, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0xa0, 0xd0}, [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}]}, @common=@redirect={'redirect\x00', 0x8}}, {{{0x0, 0x23, 0x890d, 'bond_slave_1\x00', 'bridge0\x00', 'syz_tun\x00', 'bcsh0\x00', @local, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x14}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x2, [{{{0x3, 0x12, 0x8884, 'ifb0\x00', 'ip6_vti0\x00', 'bond_slave_0\x00', 'veth1_to_team\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0xff, 0x0, 0xff], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"81e82f7422cee1fd1ed2a7167d6842fc57d46d25183b89c0a7a2fc9b27b1"}}}, {{{0x0, 0x10, 0x6060, 'rose0\x00', 'dummy0\x00', 'ipddp0\x00', 'bond0\x00', @local, [0xff, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}]}, 0x3d8) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x8013, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x5, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000600], 0x0, &(0x7f0000000000), &(0x7f0000000600)=[{}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x4, 0xfffffffffffffffc}]}, 0x108) kcmp(0x0, 0x0, 0x4, r2, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000140)={0x0, 0x7ff, 0x1}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000040), 0x1000000000000c67) 11:27:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)="696f2e6d617800e3c6a1bc16944d6052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a5b53c0190a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519010000000100000084aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000040)={0x1, 0xde0, 0x6001, 0xfc6, 0x6, {0x100, 0x6}}) 11:27:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) r3 = signalfd(r0, &(0x7f00000000c0)={0x1ff}, 0xffffffffffffffa2) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) write$FUSE_POLL(r3, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x3}}, 0x18) 11:27:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000940)={'filter\x00'}, &(0x7f0000000340)=0x44) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 11:27:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:24 executing program 1: 11:27:24 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xb8, 0x4f, &(0x7f0000000180)="bc34fed610d3ac8ebbd2d298a1d6053faa56c6699eb3fefcc00cd9069687fa20564ef1c901da81f8221251467ce992817ebaa8ba8dd6631a47c20008ea0013ee8412c620fd669a4cfaa470d62276ae9d6fa692b11ebd55122e595a3559753fb53265bebc5044730e41cd2a7894f5c18a679c095e8bc4faac8e3be34e98c71dafda6107c6f7510c98cd4ba653a7db6c33ec2d4217431b54a8456eb3ae088ad60c86086636fe74c792cad60d7e1db932c1d1e84a50042d63aa", &(0x7f0000000240)=""/79, 0x5}, 0x28) openat$cgroup_int(r1, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000340), 0x1000000000000c64) sendto$inet6(r3, &(0x7f0000000380)="6395b1e5d3da50ce700d39e45c4ea1812cca308b136ba6daa505251ee569db3afc734413486c1e2a2c60bb4911334f16882926d0c522466e769b1da5e3025f168c43d3cfda5c0973d4da395ee6dbe7e2af507c79b20c3da7f60dad5a87b5e3f9bdd87bad8bb1a836a7a878322ce195032eab512ea1de8ab74fa3", 0x7a, 0x4000, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x200, 0x0) 11:27:24 executing program 1: 11:27:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:26 executing program 5: 11:27:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f]}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000940)=""/156, &(0x7f0000000280)=0xfffffffffffffc73) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) r2 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(r2, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) r4 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x1, 0x2) write$P9_RATTACH(r4, &(0x7f0000000240)={0x14, 0x69, 0x2, {0x4, 0x4, 0x1}}, 0x14) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0xb5, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffefffffffc}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2b5c860d632234fa643aabc0770e37525b642fa716e10d1300dc3db29a2299e08c77e6"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 11:27:26 executing program 1: 11:27:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 11:27:26 executing program 5: r0 = socket(0x800000000000010, 0x20100000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x208, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 11:27:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000000c0)) sync_file_range(r1, 0x3f, 0x200, 0x6) r3 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'bcsf0\x00', 0x5cf}) r4 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x2, 0x5, [0x4138, 0xfffffffffffffffd, 0x9, 0x0, 0xfc02]}, &(0x7f00000002c0)=0x12) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001740)={r5, 0x6b, 0x30}, &(0x7f0000001780)=0xc) sendfile(r3, r4, &(0x7f0000000000), 0x1000000000000c67) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000040)) writev(r3, &(0x7f00000016c0)=[{&(0x7f0000001840)="28dc977c0f84d5f8e2d46ba456171313fb7d1faee4bb2ac913f88186c973b397299c92e29dc087b2f14f74ac05287bde2598c95634a535781314109a0197f9e3d1ebac41c5615b76d89934ff2f6557f2c0abeccf92aa60dfe8ce9a02a99c728a452321c79a68ebdac64b0132d9d57ebd37a95d7c9e50e36bfd2f373151ef1caa55f2fb88da484984ba7cd0dd5cfa3f55cf358fa4de328754b3794102cdaca5831e52d06e628a43e8b971f1e4073f10c180d43ebbeb1d865739d0bf32a0539c8b77df250af8f3b0639f04b9b3e6b279c25db255f9fda6a37f641694b2", 0xdc}, {&(0x7f0000001940)="893d2f2719637406496261b7e5da4801e38fea0304f05f7a9d05b38d287714ed3cf16480af1ce53dad07523c5cac66e21e844cd5cc9b80a59e37053be24e6fbf41b67beb823bdb8f6e091988544f2a23affb4c27aa6ecf9dab5acf938cc12c7897fea0cbda0d53493ed2ae5394c261a20fde0cfd066a56b223cde9af7db538c26b16a359847d7806eb80969b40bb8e5e4bef89df30448d625ebd88a2caf0fc5e448a0f46e0244c7d4b906ada0b029e680c4c32adecd9942959302406817c7647ea1689ccd80e8096f96450b9dbb6a817c268deb50717994845a2602c8bcdaeb6cadc3b01d4fadda7c2d48706a90470455fb9871f8895e6abb091165361bc4b966eede259ff786a7883f72d665dd35c783f7715d02d1a6ba7f78d2abb74792656b4f76360adf912cfae24c6ededd4d6793d3f512f0b014bfbae68b867390c903b330c925c5ae939e6eb4e7b451226b43be64518fd43b865ce11eee9838287281ce20ecc748dde38652d141166024d4a3a2daea09e41045b0dfc0692ceff0ced3ecaec75890c8a404f94f7388e0594c84bbde836523d40a84119e4021d64b36e2587e7816c7df0cc3f54ae3134a7f36cda84dd54657b865ac5905fa104dca3fb813af7f974734e340b02f2642335e6d368079502595f826e5f7ec8fe53627729325ce589a6506f02740f91a49206614c6bed7439b79f24de48a5f20bb95798211b9a52b510fad1df6b652d61f4af5bfca165a47d873731ffbf2cfd392f330978e09691488433b75d5360687e0ec2b48ae8d689361e4cca7f69087fe4fc8e417162f01d645b28feb1ae9bb3226b4dec855399e6628c5a018db94b02e22ed497f23e78156c3161b7bfaf3173a5ce5eca880cabcc11d065ed58d56be1a23add173a872b912e4fbb264208144f43ee7a65ee0cc316c141248c30de869a331bdd74530a0139d4b88e19cf164a336c576d8fd71d20d40f2bdb4c8e789a2441bef6d46b04d924a92e73cecf99973eb235c63e450b5f47f4ffdfc90058d8eba1e2d96da83e7fabef87d6d7895ae015643f0ef0d57421e6c4baeaddd2613197336e8303c091f6fdba1adceca129d90fcd17bbf6012d67ccffa2e98efb389b8933e27026a3e6b7ef715595b7c7f8247db614e6db213a4874474f9bcc00a3f5c1950adc706a54c4128a0a192972423d90858dfdff86d11b783dedf10ea9623fb10684289982f4417b3f6104c57a10b178684002300f32b58de6994ccc5fb63c5b2e194785213d030e2dbfca77bc07fa31cf8f0eb49077c77dc13a500622f071ccb77cfa0ba1211855731c2b5e731b2c02e0464291b03a4f19361771f3e8e10534b7eede96abba2bed499d0a13b1bb8cab8a440b410f98b279c3ea32cedbcca0290db241b47c0ff7d5d001891f1895501179a776a2b96627b5fe2dc77e19a23ee232c9f37c165d5ca35341aab71d261063ccdb62f0de446e4a6335a036b132887a14a9bab7783b24614172f01e99fd2b00ad69c9448eaa7cb948d0d8041746c023d1198b0f0d7d20d21a97be9e410f3599539c6c29db58c8fdc92a2ff77217354949dd251e1a2023d08837bfd07a0f8fa1a6b6e0243ae798be0377930385a60deaa89b4a7a11a6c3fd121951aa20bf1ebb6af0ced26df8c6392d798949e1c586de295dd1801681942cd8e93802b5bea394380468805f3a087be1ce1db817be1d0f31b4dd35cf2850bb4b98cf30a21954aa0215b967a257863dbdae8a63e81c9d2fe5685c45c93b2ae0c87e1175d7f01ce318871730c03f26b917f58db9fd9e2f832c561bcaacbb9ffc6e8c46979564d6aa39a058ca9a37316bcf2e8d382fb74a5221c3afcef4b7691778d60370d049703bb0dbe800c2d8821961203cf17671e8cde286d771830e566c411ea8615ff85b2462df0a60842f64e48c0574900072a66808d79f2dbad1558218a516d1204c26026104d3274b82ed227272c6ba091699c28317dd830af2d60914982f5afba923c4fe8e776bb55a1b0b4cade6514d1580b4c646603826310a514347a3fb8c1e560c6b275c575132f9d11acaf8e264f56faa18609eea75a0b648dce69397c9c837864f33e5ed6785b6375597652ee6df7582c44a9adba5a566b4fc8725476ae34e6cbef41cecbd90b8eb1b1985346549bdd3601393b951d99599d5425301d52aa00fc96fe8cb05fbd5d613df802e789a988d9918360484c6247a08d9423ff4bc62d5962c05be67a7312d02aba4df3d70727deef28f640fbaad521aea3f5486c7836274592890d7abc35499089dc2049ddb8eed555c21bee0d2b72637bd91b710d573436bc77d72291bb8b8b9dcc803a9c63aac1cbb4b6270e32e95639060b83516462b4d5b6b2d87ac1fdaec9d47a1bccdf4de8a9e85e8d62c36a20b4c286083afd45032703c91ef2fd47b733e1613c168a0e99145777874038209d99b72f2f4961661f884d9d20d5fb9bf6fe9183ed6b2df2299aef6942b83c851a64185ee059adf73921c07d36bdf932e86d1060cf1c178ca9075336e52bc91d4531c3af209ddf5d8c893f2f35a547767f3fa6bc0f339d2c4a7a4b8f455b7206ee20f2247cd459aa3537fd95b0b04e128923c2b5c91eb483df272cefa9187f9ac14207ccf5a548a05052250a43573c448a8a43cf3b64aafb89024d44b77a732e0df9f3226da48152e4620f758ef4ba1e5b46fec480163f736f339bc35db40948ebb2aad1174e57716941c7e23e489444fd25407d1a102f9cd02bedf7a83f3ed3d824dfc3ffce130d4e9eb22b44dbbb93c169c4c9a07ebb8acf05f2b0ee671487a92445f6339c3c9a4bdb891f9669776f5cf94a4888bb61a2d3e7c8fcba9167352eecae5c2619bb16e99046350b036d07637f88f9b6fb96126d4cb4239debd23dad2825d2563fd2c9f27e7c6656824d65bcd36813062b4f65676b30892aaa2315dfb8bc333f7798805a9950b3dab8c0db8d411f602bd5009e53e2e247ec1bf00694ed9a70eaafeaa3d5adf305fb27da213314886c58d2db49d98bf742a39cf48069ca97a6694c6141fa15c29d0204dba11600d18cdbf68e22d654ba5bd7c6a537b28f464a9abd7f9243cb2a0636608433f339a671d84f2d369a5f92b38d037a42f8e27dbce54037753f693968a3dd88cf6da44529a1a8acf86310aa9028604e1f0f9a8535d707a2f23746dd154299f2a01565b4709297470e560091b01dc952dd9862f4dda9fd2e26789aaaa1678c8f15ff0366ba290567a3b0c1eed3a7de6d8dbc25f58124a43099397105c3169b2399619e9951f8d03e7bee59e603a68ea2db0f63f2875c67815efda508616f26361a14613c99ae6d69b21b39f2a37c074ddb4fa59fffb9d9dc39c014502905e55ee863b55e699cf23c83ab28d4d821b4352f62f6c3b90a282067d318bb3ce7fb0373c01076a6d9f668abcc359507f8741bc9d218355e512590b35ad3ea6b0c15e93e6b75350f594f314ec960aac31eb60b55760af6ac2710ef7d98bf69d61ab95804dd4ca1a911904bc0777cbde0e3170b86c960d6b2ce230b916a62863994e28ea9660e6f155c067b1225c30a3ad94be2de52b046cbbeea08a0402df2dff8b21e4ff2d8d01eedc99a0e52668242e0a660673adec756883c02b63272ed33af53722ef770ffa5ffe03f0f9f3c21f42a3b12cccdb784ccee357a8a4777697c7d2dedffd459bc8b42ce1a6536b6a1b2f2d65b6506b2bd62b369844352617f0da6d90eb15ac8af46fb4fec49867447fe04e8230c008997b4a96fcc2f02278f2b5a7f29f1f2db19c9d4499d97d303a1e5d71b00d32c7c53a61e7286b3352cf97fc0b95f990af188513351c3f4964d2bd6870c2c8e1c05f61fbf43f316eccc7695eae8e74e6a0e774f7ef26ac90980021d630f49b1cf74e31af572e245e64a19bff5ceb82197aaedb2a95c45e1e614be6df03a2a3128ac48f9c2cba8bedd4fc940ab6d8fe61809321f0aec20a30fe2e17fe3730507226085c56f254ec9679bdf26206975ce1b8ff8790f253465c6ed0315a3ed6271c97cb6d6bda2e266467c51648e2cdb2832722817643533d09ae9278745cffb8652d927567860f4930fd158094f81ec5a687d7ce6682b0d4515413516ec0456cad75059d3fb2be925ba8c476e892871949a99eb8094d7ebaa78e83b35ba0d5a3955e552663165a88b4cdb65010c1d35154469160213882491fd37c065870e849f4eaae1323b0f9b8408f66631bbe5e490337a7f8301ebc7ae3fb194a85a20185a353dc77177af6a3de1c4bcfa08667309d2361bcd116e2ebe7b7b42023401889a39cd094ed84a1fa0b5d08fca83e96885b65dbba249041a622f8812e7f6a6b305e10eb5593ffa59c96279b8fc393b77d253d419a755bae5c646157cb23d2be03f2ee242c6ac1ac69ed84d1698082296d880289202ed28c5083950b73ab070fb3de8793de7016ce583fe8db92049540ffe5f32f80520027f46f9922438bfafe927393fc3f5127ad14fb80274e46a5e335e4bd6f649b42a3b8861dc7061999be53f4c2f56d9c60f522321e264a853a80d2e831260a5344bdaef41ee9e67e767724bd801cbc96b97db87036c35673e85bfef67edf1dc821749120840f46b29eee1f529db2f18f2ce1ad9c5beecff1784120b255ef9fbcb15373d4193aa94051949af8625dc2a3f981153db74fb12cb83aa938bc22e3c90ac3eb5ede1a706c6a067849bac6d6ae63c1af72ea62dfdd0ede52d04585e245baac3634964872c0b72fd374736ff1f2a47f0cc006fd57270f54d77ea1ca4fc12e1fcaca396bb06c22253bf74c91264de85e7a257f29152a8305703471a9848c3321ff566dffd9ca34e6b326ee4f8572a7edbd6e2d8b84492256df4b731a8d31a46d0982cbb2818c1dccffccaf2adb3fca6907204c3310e9e74c427b16446bb0ef9dffd1c4969aa685f2e6007aa78e90628eeeac0a9f7dde9c3c1dab944e823f478dce0c83883117b9550973fb1b1fd087b4cf3ae4faf7d839b738c8f056bb3f0de7883b200f4970c61bd77e077b5290173a07408a694a6a53a3e8e089c27efa2643a1e9babda72215022e94e7cf4594c2c2047ac442362ecbb40ab0f0b3f7f56bdda5ab8c34e781de9382a5acbd9d5d3b5d8b528066e8f928e8ccf6d6304007d48f67c4752621984099f8744e35b7d463292b28d23513ef03ab80a0d207b6b68e8f8172a7aea97f95b363811fc73c8432cfb726f2fdc26c81b20bf16888c5e12103511fc6f8af56082649ce6f9f844ede0d5b8e54353203b58a550256d058adcb1bec9c2bc0de17f89b2ac90ef5b4827f48dde7ac569b2fe784d7da2ffbfa8eb857fe87ce4e2a77dc2eafb1a7d49fa9ec5c884e33d1ced7fbee39c7e360b76274403bed02eb1491978dabfabe5df21c353019a7616a9484f1990308a511cf974ec52e262971e8c1e1376068fc46593878deb3d7ac1131907d13f8ad730598670953e3888a0af4d41dea06a862e24224d7187a019a5c255fc3ff45d795267a4eb1ae31a48c29a6398dc2e02f5498d33989eacd1f132652dad2ead1b49632fec1974e87094243a27df57cf43b67a9b519783e016bd4868cb75ee884a907020cf73069034e6e64be7a9b55277f60597a6a612ec4571c1d20bfabe0a4ea98be61b36da9d894f905a15429f182a1947c1d410c45406cc640ea621c69cf9c729382e7a47e9e4be78520d0169babc52ab56da17c75c52b1352974ccebc7923cb35064417f6de5401b55eeca3fbbbe9f1be9f81cb7b60872012d4fcded908c23e2a0ee2ba3401de3dfc101a76", 0x1000}, {&(0x7f0000000140)="b033a231253c7239c5a64f84fdffe2f5b67f86a0c546ea365fde28ebe58787f3c893d6201bd98dc78382e32e8c55b3f6fe1e22500c60549a10e4cdec7a9a7e4d53e7b79189b9eebc0ed793badc75a26af1d393f97c2ad387dcbb4868dc017fb984dbc7c1849cc94c4c79726d32002de5ef5e9f21f71dea8e9fbc086b4be1", 0x7e}, {&(0x7f0000000240)="a45f4754bcbb84b4575de662684cfdafa0604ef9c8f3397e3db56159a354f3205092c5dd98d1aac90df4a500aa9254a94a33acd08db8e71b70c0801680ebee63af17b4b65ca49048a9f2a282218c134df0968fa5cd948b24c3a9a072188ae9c35083e452738533", 0x67}, {&(0x7f0000001500)="1477f8fd11b94a6c6b9cb7188b47ff2acd9708a317b7f3ad8d2a971bad35d82cf89f4db2c979abc25a8824c34187ef1e2cb3adb08ac9562972fc4e951e082eb524d91f4e6a5480f54a6056c68fb398147bbb37507254f13a57802507b605a568be857ea3235f227f0557b8df182df69975f13dde9fb14b0c0cd72f0180980e4bc67bd5aef2be1c43d01567245356404e8f5838a88fc83282763a721f84ebc51bcb6a91b82258e1f311f6866048ad5b91eba94397a19683d9", 0xb8}, {&(0x7f00000015c0)="e70760d117884c2b58ea251f122a1364a214ed6c8bea22f5e6f9fe5e63abead2f88d6ea7281e689a2af2f170a6481ebaaa13f506248ef7aaa1ec6cc85af7bd6a25b1a945831a11eb7323a82504f18d2a077e382b87e206f99a918ed78b78b1dd24dfcc3262473667a415aa3ada510bc8e2023355a942934a13dc7ee74d3fd04e4fd6941f3cede82dd17cbfcf9a4169dba296d3671b591f95084029f302c0c6c0dee7a28794f254c4f98e9d62d3f48b810445b216bfde961ffc53570253a542caf1a4be7c7a97", 0xc6}], 0x6) 11:27:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x82, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xffa5) ioctl$TCFLSH(r1, 0x540b, 0x0) 11:27:26 executing program 5: unshare(0x20400) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x200) 11:27:26 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) sync_file_range(r0, 0x4, 0x6, 0x4) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x9}}) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000480), 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 11:27:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7f}) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000940)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:27 executing program 5: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x200000000008) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(pcbc(anubis),rmd128)\x00'}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) memfd_create(&(0x7f0000000380)='*^-{lo\x00', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000500)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00', 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'syz0\x00', &(0x7f0000000180), 0x0, [], [0x80000001, 0x0, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x84000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@loopback, 0x0, 0x0, 0xff, 0xc, 0x734a1d93, 0x1000}, 0x20) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 11:27:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = socket(0xf, 0x0, 0x5) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) [ 519.403646] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.410396] bridge0: port 1(bridge_slave_0) entered disabled state 11:27:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x1000000000000c67) [ 519.515500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:27:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x9) r2 = syz_open_pts(r0, 0x805) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000036c0)={0x8, "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", 0x1000}, 0x1006) truncate(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000003c0)={0x0, 0x0, 0x1000, 0x0, 0xb963}) 11:27:27 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="4fb97359f6282df4d4820c27065cc5bc4bda1ba3bbdcc5e75d1ef842e109593e83210b0022cb14cc0a22eefea5aaff00000000000000000000000000000000000000000000000000000000"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 519.975245] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.981736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.988598] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.994977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.003258] device bridge0 entered promiscuous mode 11:27:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x0, [{r0, 0x0, 0x5}, {r1, 0x0, 0xe00000000000}, {r1, 0x0, 0x1}, {r0, 0x0, 0x1ff}]}) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:27 executing program 0: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(0xffffffffffffffff) 11:27:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 520.076404] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.082956] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.129109] device bridge0 left promiscuous mode 11:27:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) accept$alg(r2, 0x0, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:28 executing program 5: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x200000000008) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(pcbc(anubis),rmd128)\x00'}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) memfd_create(&(0x7f0000000380)='*^-{lo\x00', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000500)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00', 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'syz0\x00', &(0x7f0000000180), 0x0, [], [0x80000001, 0x0, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x84000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@loopback, 0x0, 0x0, 0xff, 0xc, 0x734a1d93, 0x1000}, 0x20) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 11:27:28 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x2, 0x2, 0x5, 0x4, r1}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) 11:27:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) clock_gettime(0x5, &(0x7f0000000040)) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) 11:27:28 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="4fb97359f6282df4d4820c27065cc5bc4bda1ba3bbdcc5e75d1ef842e109593e83210b0022cb14cc0a22eefea5aaff00000000000000000000000000000000000000000000000000000000"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 520.669253] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.675735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.682524] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.688931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.695663] device bridge0 entered promiscuous mode 11:27:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x301102, 0x0) ioctl(r1, 0x4, &(0x7f0000000100)="b54f1ba8b8047507e7f20750c02f418666fd452d72c33d1717f37d72914ca23f6d6e2efef634e777ab1b12f21547786b0b0d4c58c44f32d1b4f0d6050cca29270c345c321683b91d9240c50796bfb9d0354117bc6d4756516e828bedaf359a160e0f7c9cbe1858") setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @multicast2}], 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) [ 520.893265] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.899887] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.998405] device bridge0 left promiscuous mode 11:27:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@v1={0x2, "21a2a93f26675d4c592e2b"}, 0xc, 0x3) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:28 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7db7741d254239ebc825fc39a9435b79c885ebc5bf7dc25bda94dfc4cb0158f659b007"], 0x0) tkill(r0, 0x2c) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:28 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) clock_gettime(0x5, &(0x7f0000000040)) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) openat$cgroup_ro(r2, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) 11:27:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x6, 0x20600) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000140)={0x0, 0xacd, 0x5, &(0x7f0000000100)=0x9}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000400)=0x9) ptrace$peek(0x3, r1, &(0x7f0000000080)) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x2001, 0x4) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)={0x1, 0x4, [@empty, @dev={[], 0x16}, @local, @dev={[], 0xd}]}) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r0, r3, &(0x7f0000000040), 0x1000000000000c67) [ 521.177552] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 11:27:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 521.597146] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.604145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.612756] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.619827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.631848] device bridge0 entered promiscuous mode [ 521.645994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 11:27:29 executing program 5: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/user\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) syslog(0x4, &(0x7f0000000040)=""/24, 0x18) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8010, 0x400) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000080)="8baf09a7cb762fdcb667aef8e3b9b3ebc3f72f4ec5476421380b442c648e4691d77c9d292fef6754914026e6b9fecb68e612b606f5782d99937cd9f14e58292444d19509581917b8099c4d74e59619cfd6c1bf274032a6a0676eeaba5db14947e258e036465d14aaceaba27ae15cfbdb51be4b3bf3aaf076d73815faff2106d0946973778efae066bfa570c0499807a929a506b51ea64376be9151f9a80dc4dee408edd43013e5fda48c20c20a96cb913b88d45e18c05570787ac2dd2a71430de272be76fb2a706cdb5b4c94b69878afd682c7e7fe44c910b1", {0xfff, 0x1, 0x77777f5f, 0x5, 0x80, 0x9, 0x9, 0x10000}}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000340)={0xa30000, 0x79, 0x7fff, [], &(0x7f0000000300)={0x0, 0x1, [], @value64=0x3}}) 11:27:29 executing program 3: r0 = memfd_create(&(0x7f0000000040)='./cgroup\x00', 0x5) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000080)=""/139, 0x8b) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:29 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0xfa, {0x1b6, 0xfffffffffffffffd, 0x7, 0x401, 0x100000001, 0x45d3}, 0x4, 0x3c1}, 0xe) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000940), 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000300)=0x7ff) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:29 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x121000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ba9000/0x4000)=nil) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c80000/0x2000)=nil, 0x2000, 0x10200020006) 11:27:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x3a217f6436a48b1f, 0x0) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x3, 0x2, @thr={&(0x7f00000000c0)="23111b672c6f98b584aaba3da3be01d602cbbd4566d5696774b3f240d737f3db5740875c7e9f5ffa5ea09fe299960e96503bdabe5140aa7372f85a08008ea18e5a25b0a8bf18d31ed6cc10d4f0f8c8c80abca8d375d08c1ec88eeeed917b450fb27223f2af4ab13dd7903538fde4d815deccd6eddba1a543dee85040881d63c5aa7b8f2691d9181b190bfe4bdc1249c99522fb4fc4fddd691f9cdbf4a4ef78f0642b03f638fadfe8750977722ce0b5213a1abf29004c8f97749d044b0dc95200dc", &(0x7f0000000240)="9061a1f7ed12afcb108a1b566eac25d4cb648da2136f76c3855125d4cfc330203d55e83aa3716fcc273e77c98bced1cb1a88089b98aa8846946f9844d79a32643d98c089fa6f1b449ab0d4caafd246b57e3b7f155242c21287b74a95761053aaa202d130d51e168108f8da9d"}}, &(0x7f00000002c0)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) flistxattr(r2, &(0x7f0000000040)=""/102, 0x66) 11:27:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:29 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x1) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000080), &(0x7f0000001080)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x0, 0x0, {0xa, 0x4e22, 0x80000000, @ipv4={[], [], @local}}}}, 0x32) 11:27:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1810}) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x8, {0x7}}, 0x18) 11:27:29 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44a72107130ee55d660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a"}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f00000026c0)=[{&(0x7f00000000c0)={0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, "c95d9d47e4635c995b18ba766a818648cd01f2e3825bee3eb373769cb2c85d7f0bb3aff58d31b0352895601ee239883abfad45a0e8c0f59bf3b52edf3500bb"}, 0x20000120, &(0x7f0000002600), 0x5f}], 0x4924924924926b2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vcs\x00', 0x250000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001680)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x18, r2, 0x904, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x805) sendmmsg$nfc_llcp(r0, &(0x7f0000001580)=[{&(0x7f0000000000)={0x27, 0x1, 0x0, 0x0, 0xffffffffffff9815, 0x1000, "32adbc5b09b9f1cd26d579d4010930810039bb846451506ac6bbbf0d90e477f6baabc4baa1d6be701a3232dc37be69a04ec5cf922c31e82548267aa42cdd1b", 0x1f}, 0x60, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}], 0x1, &(0x7f00000011c0)={0xa0, 0x10e, 0xffffffffffffffff, "7642d2cd0d84e3b973e4606c99a829fde12d2955eb55444713735b01e72345dd15ca117dc4c016c0b46a949dba2e95eff4dfb7f7c45691576e5031ac510bc984a2a4d35d7c61064f5176a92b7e9dbe05c95bb3be6bbf241d48b3c99fcbfcb3b84c44f0539fc25db6daa32f8b9a2829a9c11228d127c2c95c94beb99e036b7b4acb58a85b94586d6cc295900ca0"}, 0xa0, 0x4000000}, {&(0x7f0000001280)={0x27, 0x0, 0x1, 0x6, 0xca, 0x4, "756c8b1535960cfaffd6ca534011dce1936a0720ba2e1c26bf41715184e6ba61332a5f6eddfdff7bcb5b3ef699b4b456b8916a2e04967f796be46d2fbd5ccb", 0x32}, 0x60, &(0x7f0000001480)=[{&(0x7f0000001300)="c19796d872cfa61fddb357d0d946b07c16ccdb7a9243d13474f21f68154ca9775c8068391050dea6bcd02736dd1cb898a01e4c16cbcff776fa3d3f0192618024bd1b3fd4c68d91d24fb91ffc21ef76dc61f13eb105c5191eb2bb446009d0b5f8783185dfb6cc4b3548bb96059e686f40ffb4", 0x72}, {&(0x7f0000001380)="2ac6c2e0cd52a73ccbd88322825294e2b6844ca7bc811a514595384a83b40e3f4597d31a0347f111f99246fa6bef005d42a44c7586c519fd2350e1aa4eb993cd4622ee1eaf420cfcb3f67ed83c93dfde16dfb7f72222532809a37282d96fe5308a16758f3867e3bf3adec86b759de3a779f02a466232fe34bbbef2654f176a848c64e465b4d26b65c3b3035659475f5a1ebf606360b8141b3302d26e3cd72a288f510f3c371ee52ed2fc825455d4e9aba5e2cb6c83e3a5c2672bdc894964dc1312c39c7342183432ec04bf2240aa1b8bb398466135998b6a0a4f663d04dc35a858437ded", 0xe4}], 0x2, &(0x7f00000014c0)={0xa0, 0x111, 0x9, "a8d292961bb1f9b1f9b2d9a65bdaca0c109248bc1797edc2ae4d55c9c69cc6a44087764a61ef616b60c77802394a583847dcbbf8ed2e6b5c0e19dbef56118aa14be62591ac726fafb8980f551fad6b1d66c295295064e4f9d6082eef3e0c3290a4d9c9c2decea625dca040ea656507a1e03b4cb6dcc0579484ee3edb81ca7a89f8833824c87383e7bee0"}, 0xa0, 0x10}], 0x2, 0x8800) 11:27:29 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(r2, &(0x7f0000000300), &(0x7f00000003c0)=0xffffffffffffff36) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x1000000000000c67) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000100)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @rand_addr=0x3}, @in6={0xa, 0x4e20, 0xf5, @empty, 0x9}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x6, @local, 0x80}, @in6={0xa, 0x4e24, 0x639, @mcast1, 0x800}], 0x74) 11:27:30 executing program 5: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3f}, r0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) r2 = memfd_create(&(0x7f00000009c0)="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", 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)='\'', 0x1}], 0x1, 0x81806) lseek(r1, 0x0, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setsig(r3, 0xa, 0x12) set_mempolicy(0x0, &(0x7f0000000140)=0x6, 0x9) r5 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x44000) ioctl$EVIOCGABS20(r5, 0x80184560, &(0x7f00000004c0)=""/112) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000400)=ANY=[@ANYBLOB="0001000000000000870d0000000000000700000004f3000002c4b9001d0000007f000000000000000400000000000000030000000000000000000000000000000000000000000000000200000000000000000000000000000700000000000000040000000000000009000000000000000000000000000000000000000000000093c1dc8f556c58a80000000000000000"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r5, 0x0, 0x0, 0xa6ba0) fcntl$setsig(r2, 0xa, 0x38) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x9c1, 0x0) io_submit(r6, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x8040000a0008000, 0x759, 0x8, 0x1, 0xff01000000000000, r5, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r7, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f0000000180)={r8, &(0x7f0000000100)=""/13}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000580)=[@in={0x2, 0x4e23, @broadcast}], 0x10) r9 = getpid() ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) get_robust_list(r9, &(0x7f0000000380)=&(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)}}, &(0x7f00000003c0)=0x18) fsetxattr$trusted_overlay_redirect(r5, &(0x7f00000005c0)='trusted.overlay.redirect\x00', &(0x7f0000000600)='./bus\x00', 0x6, 0x3) dup3(r3, r4, 0x0) 11:27:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:30 executing program 1: rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7fff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000240)=r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0xc, &(0x7f0000000000)=0x0) r3 = socket$inet6(0xa, 0x1, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140)}]) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 11:27:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0xa97, "1ee29d85904d7e507075a009fb7f9ca5bc7023b9e73e608fa0b21c8f31342bdc", 0x3, 0x1}) sendfile(r1, r2, &(0x7f0000000040), 0x6) 11:27:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000040)={0x44, 0x8f, 0x5, 0x2, 0x7fffffff}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/137, &(0x7f0000000180)=0xfffffee7) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) [ 522.475247] audit: type=1400 audit(1542713250.288:94): avc: denied { map } for pid=21666 comm="syz-executor5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=118164 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 11:27:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:30 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000940)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) socket$alg(0x26, 0x5, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = socket$netlink(0x10, 0x3, 0x1e) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x15, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}}, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(r2, 0x1, 0x3, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="384d87319f41f8183a79457114a258a4982614bd0b394f496755fca01141242482421d7605051df06449f7ce969989af35abcd606f402ae3e509000000fe53f34e19d8397539c3ffdecb21d93691c96e3b554d713372c50ef8419f1b79c87ef8ef8a777427a622a508b1677134f00a26de2e"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:30 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(r2, &(0x7f0000000300), &(0x7f00000003c0)=0xffffffffffffff36) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 522.658745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 11:27:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:30 executing program 3: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x6, {{0x2, 0x4e22, @rand_addr=0x8}}}, 0x88) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x4, 0x101000) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {0x2b, 0x4, 0x100000001, 0x3}, 0x2e, [0x72b2, 0x1e1, 0x100000000, 0x2, 0x404000000, 0x7904, 0x10000, 0x100000000, 0x8, 0x20, 0x1, 0x4a7, 0xe8, 0x7ff, 0x8, 0x9, 0x80000001, 0x6, 0x2c, 0x401, 0x7a8, 0xdd5, 0xfffffffffffffff7, 0x3, 0x2, 0x1, 0x3, 0x7f, 0x12fc, 0x1, 0xffffffffffffffff, 0x626, 0xf189, 0x5, 0xffffffff, 0x0, 0x0, 0x3, 0x4, 0x138, 0xffffffff, 0x8, 0xffffffff, 0x1, 0x5, 0xfffffffffffffffe, 0x6, 0x3, 0x5, 0x1, 0x3, 0x2, 0x9, 0x3, 0x9, 0x80000001, 0x0, 0x6, 0x6, 0x10001, 0x1, 0x3, 0x5, 0x9], [0xfffffffffffffff7, 0x80000001, 0x0, 0x1000, 0x5, 0x1000, 0x7b6, 0x10000, 0x580, 0x3ff, 0x7, 0x0, 0x3, 0x3ae770cc, 0x200000, 0x9, 0x6063, 0x80, 0xffffffffffff0001, 0x8, 0x7, 0x720, 0x4, 0xfffffffffffffff9, 0x0, 0x0, 0x6, 0xbd72, 0x1, 0x6000000000000000, 0xb0, 0xffff, 0x4, 0x1, 0x5, 0x401, 0x6, 0x1, 0x9, 0x1f, 0x0, 0x5, 0x0, 0x5, 0x8, 0xfff, 0x7, 0x2, 0x8, 0x0, 0x200, 0x0, 0x9, 0x8, 0x1814, 0x3, 0xa5e, 0x20, 0x1ff, 0x7b74, 0x6, 0x2, 0x1, 0x7], [0x3, 0x80000000, 0xffff, 0x7f, 0x3f, 0x9, 0x0, 0x2, 0xfffffffffffff801, 0x4, 0x3f, 0x1, 0x3, 0x6c4, 0x10000, 0x6, 0x10001, 0x8, 0x4, 0x7, 0x100000000, 0x8, 0x400, 0xaae, 0x2, 0x4, 0x5, 0x1000, 0x181, 0x6, 0x8, 0x3, 0xff, 0xffffffff, 0x101, 0x2, 0xffffffff, 0x0, 0x5, 0x35, 0x4, 0x81, 0x9, 0xffffffff7fffffff, 0x9f12, 0x67fde981, 0x8, 0x1, 0x60, 0x9, 0x1, 0x8001, 0x7, 0xd5, 0xf600, 0x3, 0x401, 0x2f76bdba, 0x5, 0x7, 0x0, 0x0, 0x593b, 0x1f], [0x7, 0x9, 0x8001, 0x7fffffff, 0x6f09, 0x1, 0x2, 0x1, 0x7, 0x8, 0x6, 0x101, 0x85a5, 0x6, 0x4, 0x6, 0x9, 0x9, 0x3, 0xffffffffffffffff, 0x2, 0xffffffffffffff7f, 0xfffffffffffffff9, 0x7, 0x10001, 0x4, 0x4, 0xfff, 0x5, 0x6, 0x6, 0x4, 0x181d, 0x5, 0x80000001, 0x3cd, 0x2, 0x0, 0x4, 0x1, 0x3, 0x0, 0x8125, 0x100, 0x2, 0x10001, 0x6, 0xab, 0xffff, 0x3, 0x4, 0x80, 0xfff, 0xfffffffffffffff7, 0x358, 0xffffffffe94644cd, 0x1, 0x8, 0x5b1, 0x76, 0x1931a00, 0x0, 0x2eb, 0xb422]}, 0x45c) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x5c3003, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:30 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x0, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:31 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xa, 0x412000) read$FUSE(r0, &(0x7f00000003c0), 0xffffff7a) read$FUSE(r0, &(0x7f00000013c0), 0x11ba) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000000)) read$FUSE(r0, &(0x7f00000033c0), 0x1000) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0xfff}) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@md5={0x1, "8ae4df3133714c5521216885196a073a"}, 0x11, 0x2) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) read$FUSE(r0, &(0x7f00000083c0), 0xfffffdd6) 11:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 11:27:31 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r3 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000040), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in=@remote}, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}}}, 0x128}}, 0x0) 11:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x1, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x210200, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001480)='/dev/rfkill\x00', 0x0, 0x0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001540)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r7 = syz_open_dev$midi(&(0x7f00000025c0)='/dev/midi#\x00', 0x7, 0x81) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000002c40)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r8 = syz_open_dev$vcsa(&(0x7f0000002700)='/dev/vcsa#\x00', 0xc689, 0x41) syz_open_dev$radio(&(0x7f0000002c00)='/dev/radio#\x00', 0x3, 0x2) r9 = syz_open_dev$adsp(&(0x7f0000002a40)='/dev/adsp#\x00', 0x80, 0x40) io_submit(r2, 0xa, &(0x7f0000002b80)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000080)="3dca07508d16080cefcb5423ecc68dfacba759a3ba34450bc3b7c023746028fde7f519b47135c422cff44b2db74bbf290f56bc2f1a742a6543a507ef4e93d3713fad691b47f268589460656a8f44c105dcf60ed789d2d54bafee9991443d96b860d41b945895a72e4645605889764c3b59870b6d2871c129fbc89a15f3e49b44aa9249b11e20bcec06187fcb9e764ae190716c23a2a7557ab0bb2003d6103f1f1cb8afebcc348f4a81b13b180674ad9bbd3a3a82f42a0acb45cfcd87151a754b46f3a62a0d9040dd882d2281", 0xcc, 0x6, 0x0, 0x1, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000240)="879b422f9d5f11fa8121103aa29f5929a53f3d2814aa47b63eb7fcc3baf5e19668172fb7937af4b7694e86fffb18ba75539f76c3b6988b36f2c0a5405334624c0921f5be147a810208a6185b375d496b4a682bc6d0be93e8ab673129ff50d4f4a9047ee7421942794eb88e11ae982c73b4670785833cde763253ed105080d32d241a6aadcb0640df510f7353dbfe5adfc085a71a67443603cf3596b80a516f0b8634fefc", 0xa4, 0x7, 0x0, 0x1, r4}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0xb, 0x0, r1, &(0x7f0000000480)="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", 0x1000, 0x21, 0x0, 0x2, r5}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x401, r0, &(0x7f0000001500)="70e5ad889b1571cfe11ac2a3cb53262254463903bed8f824f0368f40e9c8f79ee3555ead358841f4a7eb49cf3659", 0x2e, 0x80000000, 0x0, 0x3, r6}, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x5, 0x6, r1, &(0x7f00000015c0)="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", 0x1000, 0x0, 0x0, 0x2, r7}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000002640)="c99105a0bc0e71f23ecaf7eaed07d6e1a8ea9a9f7418d6acb748e3c7f200b3a4a7bf092da8613dba7d2de5df17d56afc9132de8f4cfeffa068647fc26bffb0dbb4f9d9c0a14fefbe12737091d8a5d1901d3e972b803f88e5660eeea578aa144f76576c0390f8785582f519da6114e703837ea7ff6283dc273625cb15e09f9845eae9098a1fb61c4ad24110ea8e75583475a99bd5ffbd4c00278523eeaa7bcdcad2fa426bcdede577f559ee3d1c", 0xad, 0x200, 0x0, 0x1, r8}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x5, 0x1ff, r0, &(0x7f0000002780)="033619ca3db36e2100e5909a17b2e07050c5892ff396e7665d4c6e818a424ea48f9ef9b2d4adfbe81fdd9edfffdb40f70c4768827111baa16f69ffa9af261d871f4a631a87c01ff754011a1881192c9ffa8a8d64a7a9277883709c7032aaa33170a0f05e2e65122995625804d62228eb55da52068b4ae75ffdd61c370c37a1f37554337e1d0e8f8c4034e20f19f7e0f0afe160fa3983c02f99b5f3cb610b6dbfaeeefc43237fe5aca29a9eb9dc82518d3249f841e3f2f26e8d4f417e9b7a660d4044ee12b36f69853ecf601b2ead0a3b054b5db63002d5150c3e0ff7fbd2e5", 0xdf, 0x9, 0x0, 0x3}, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x7, 0x100, r0, &(0x7f00000028c0)="ce615aa2fd1a10de25691a9995d7992d624fe5c6567ade9605ea1bc162341889ced448052afd03f9d574b9dbb5fea372e39b36f050269611768321b43870402c746af5cd99c094c561e23f4316d1e7ad06071da149c23889333f4775b441283da23a2874fa02134c182b19690c90ef8a60ed87e0b9905314bc47d1a84300d5b4e6e0f2c39abcda9ec8cd0625140e829b5fefd2f236e53c448818aa021aab84976fea8da29ac17badc79bd2e236766a51e0cd8c90217e851507196125db332c422c23b8e332e2b08000bfd356414bf72b7fdb1992f3f84eec4dbd0594d8c159b25cb86047", 0xe4, 0x2}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000002a00)="613b04536dd8c42b2a380b703584bec85e88e18d34fe8e6a375a604a1b37644857c41562a16c28a5bab2b33bf2d3eff427376455e6e6e28dff4556863e9dd2e8", 0x40, 0x4, 0x0, 0x3, r9}, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0xf, 0x1, r0, &(0x7f0000002ac0)="c31e1ace57f9562592eec7d12ebf5b61605fbb9ab55cb8b0208d8413c235dca2af30b29c46ace93b0c1c1d6952037d3b2b439d727d2d439c2ecdfe7a7793122d3a3e5ea099c32fb9a50f25d49237c91344eb4a37cd7c8568e60a413efbf1a24a14e86e0bf0844dc7890794", 0x6b, 0x7fff}]) r10 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r10, &(0x7f0000000000), 0x1000000000000c67) 11:27:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = dup2(0xffffffffffffffff, r0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000003c0)=0x2) setpriority(0x1, r1, 0x7) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000240)={0x10000000, 0x3, 0x9}) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000400)={@rand_addr, @multicast1}, &(0x7f0000000440)=0xc) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x200000) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000001c0)={0x1, 0x200100000000, 0xa}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in6=@loopback}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000080)=""/240, &(0x7f0000000040)=0x67417cde837d0c27) 11:27:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x4, 0x3, 0x5, 0x7, 0x4181, 0xffff, 0x3, 0x0}, &(0x7f00000000c0)=0x18a) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x4}, 0x8) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@rand_addr, 0x0, 0xff}, 0x0, @in6=@mcast1}}, 0xe8) ioctl$FS_IOC_FSSETXATTR(r1, 0x80487436, &(0x7f0000000000)={0x2, 0x0, 0x7, 0x10000}) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) 11:27:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) close(r0) 11:27:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) r3 = semget$private(0x0, 0x3, 0x420) semtimedop(r3, &(0x7f0000000040)=[{0x1, 0x6, 0x1000}, {0x1, 0x100, 0x800}], 0x2, &(0x7f0000000080)={0x0, 0x989680}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000180)={r4, 0x2}) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) open(&(0x7f00000000c0)='./file0\x00', 0x400001, 0x41) 11:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = dup2(r0, r0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:31 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84001) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000140)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000300)={0x0, 0x2, 0x7, 0x12, 0x1}) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[]}}, 0x0) fdatasync(r1) ioctl$sock_ifreq(r2, 0x8995, &(0x7f00000000c0)={"050054833000fbffffffffffffff00", @ifru_flags=0x1}) r3 = dup3(r2, r2, 0x10080000) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000002c0)=0x20b8) 11:27:31 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000940)="b0cfb05137b1980e4f281369e6cbb4e52f650d043e31d149c10bde4b31fbe22a0748876b854b803829b6cec6f9bfe2733841c76b2fd8fbe832d0075caffaea2dd6b5") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) wait4(r0, &(0x7f0000000340), 0x8, &(0x7f0000000b00)) ioctl$UI_DEV_DESTROY(r2, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) close(r0) 11:27:31 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, &(0x7f0000000080), 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000b40), 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x84000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='\x00', 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636f6d6d69743d3078303030303030303030303030303030302c00a029caa82aa568c790d536a23a58502a439c487d4875a418cafb325b2ba0a856c198297fb29f971ef37eef45270f7ca425e1b8657e9015bd6c4504047b705e41b6fea049cc22bfed7e581b67f8da86e03ea28ea08627e68b14cf267efc7f765294"]) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f00000001c0)="0001000000ff000000000000c9030000ec00000001000800000000000000000000200000005d000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000380)=ANY=[]) 11:27:31 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x0, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x10000}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl(r4, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff88, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xffffff16}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) r7 = openat$cgroup_int(r0, &(0x7f0000000340)='pids.max\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000140)={'bridge0\x00'}) r8 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r7, r8, &(0x7f0000000000), 0x1000000000000c67) 11:27:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xfff}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000180)={r3, 0x4}, 0x8) r4 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.events\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000000000), 0x1000000000000c67) [ 524.107796] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.115011] bridge0: port 1(bridge_slave_0) entered disabled state 11:27:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x6, 0x80, 0x4, 0x7, 0x1, 0x1}, 0x1000000000000000}, 0xa) sendfile(r1, r2, &(0x7f0000000000), 0x1) 11:27:32 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$TIOCGPTPEER(r2, 0x5441, 0xd09) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:32 executing program 3: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20401) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000080)=""/54) r3 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000000), 0x1000000000000c67) [ 524.353702] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 524.394459] EXT4-fs (loop1): bad geometry: block count 65280 exceeds size of device (2 blocks) 11:27:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x2, 0xe, 0x4, 0x2004044, {r3, r4/1000+30000}, {0x1, 0x0, 0x8000, 0x7, 0xc00000000000000, 0x0, "8370cf73"}, 0x6, 0x1, @offset=0x7f, 0x4}) r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000000000), 0x1000000000000c67) 11:27:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a500bdb53c1a90a355b97bba99df4a9a25effe4f35cdbfe70a13c32b28025d489d3c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adee9f0d844af01018e958358b9f54ab00b0f01008e9de11e3a217ca305d2404d1bf3aa4e0886", 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)={0x0, @speck128}) ftruncate(r0, 0x2) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c68) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r1, 0x200}, {r2, 0x2010}, {r1, 0x4180}, {r0, 0x4}, {r2, 0x1002}], 0x5, &(0x7f0000000100)={r3, r4+10000000}, &(0x7f0000000240)={0x80}, 0x8) 11:27:32 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='rdma.max\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x2, 0xe, 0x4, 0x2004044, {r3, r4/1000+30000}, {0x1, 0x0, 0x8000, 0x7, 0xc00000000000000, 0x0, "8370cf73"}, 0x6, 0x1, @offset=0x7f, 0x4}) r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r5, &(0x7f0000000000), 0x1000000000000c67) 11:27:32 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) close(r0) 11:27:32 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000d00), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x197) sendmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f00000006c0)}}, {{&(0x7f0000000740)=@rc, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)}}], 0x2, 0x0) [ 524.955754] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.962662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.971182] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.978100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.998001] device bridge0 entered promiscuous mode [ 525.042088] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.048672] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.068174] device bridge0 left promiscuous mode 11:27:33 executing program 1: sched_setaffinity(0x0, 0xfffffffffffffefb, &(0x7f00000004c0)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x80fe, @empty={[0xe00000002000000, 0x0, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000, 0x0, 0x0, 0x1200000000000000]}}, 0x1c) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001500), &(0x7f0000001540)=0x8) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x402100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000280)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000300)={r5, r6}) r7 = gettid() r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x490000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000340)=""/243, &(0x7f00000001c0)=0xf3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r7, 0x401104000000016) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.apparmor\x00', &(0x7f0000000200)=""/98, 0x62) sendto$inet6(r8, &(0x7f0000000500)="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", 0x1000, 0xd0578063931f1ace, &(0x7f0000000440)={0xa, 0x4e20, 0x619b9a6d, @dev={0xfe, 0x80, [], 0x14}, 0x3f}, 0x1c) 11:27:33 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/rtc0\x00', 0x301, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c00)='io.stat\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d00)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000f00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20020803}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="80060000006b35e7", @ANYRES16=r5, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x20000004}, 0x11) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@ipv4}}, &(0x7f0000000180)=0xe8) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) fstat(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) getresgid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000b80)) r14 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r14, 0x54a2) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="02000000010006000000000002000200", @ANYRES32=r4, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="3b891da3d15adf0b528b5114e58ada842d3a25703de8966eee", @ANYRES32=r7, @ANYBLOB="02de004269089d9451b31d977569f67219acdc8f090ee9fb65f7a7f81a8da331c3bdb8f7e6e658336124485314191bd62b58e973ca82d53f90b599571ed55c754f085ee020f7eadd1ae88e76da1e9ea173bf9ee331b5e6cc211eafc5fe75ed439b224f4f8b6c59561cc5fb8f9567faa48730af62a59b18e810cdaabf54f96a181a1eeea416d68237d7e39f33b6e5f1f068", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000400", @ANYRES32=r10, @ANYBLOB="02000200", @ANYRES32=r11, @ANYBLOB="0209000d118eee62cf6633662204c984ebe87f36c030ecf86e6ea1d78a2206a0fe0ab83006000000747bdff9d81f40bf53e56688b8f85086c39819469fe01ea401a19aaba17b7decabac8b8ec45946d9f602000000b7f488abaae2b95995e6a580fb0bc8d4ddac187f71eedc0587a17ac4e9a863ef750aa8d51ea88193768371cf0a4e04c9baa94d05f81a0f671c334b4dc60dcb901b5db4e272a4f5769a0c8d8805b06a9134ac496866586c5ced66d366153264a1652fc9bea66758519b187004f56e1bd0416fd038ba48e57fbe02500ac74e6245e388a0cc43b5d7aa741f7451df987318dbf110f7a88c10afe8061d27e404c0cd18159216475de9d1d8ae411e217355d96fbc91e1a16c1b2a99d8a9fb38373d795dbf4766f9d0c0929da8ad097c86d7ebb3ca5e7c1e19f1d1b9034ebf4a71a0f06b3046cedbde4fc59f301219b717a71fee2d33db921bff31fe8d90c8b68728d616", @ANYRES32=r12, @ANYBLOB="040000000000000008000400", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="1000029889000000200004e20500000062"], 0x74, 0x1) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) ioctl$TIOCLINUX7(r14, 0x541c, &(0x7f0000000c40)={0x7, 0x7}) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000bc0)={0x0, 0x80000000}) 11:27:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x103000, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x5, 0x2, 0x3, 0xff, 0x880, 0x9, 0x3}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 525.258844] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.265224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.271957] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.278374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.285025] device bridge0 entered promiscuous mode [ 525.362364] IPv6: Can't replace route, no match found 11:27:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(0xffffffffffffffff) 11:27:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x7f, 0x130003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) write$uinput_user_dev(r0, &(0x7f00000012c0)={'syz0\x00', {0x3, 0x0, 0x9, 0xfffffffffffffffd}, 0x4f, [0x1, 0xfff, 0x6, 0x100000000, 0x1, 0x583, 0x1a4dada9, 0x2, 0x8001, 0x1, 0x8, 0x400, 0x5, 0x40, 0x9852, 0x6, 0x9, 0x9, 0x8, 0x0, 0x5, 0x7fff, 0x3, 0x1, 0xfff, 0x3, 0x7d0e, 0x5, 0xef63, 0x100, 0x6, 0x5, 0x5, 0x8000, 0x400, 0x81, 0x3, 0x3, 0xa17, 0x5, 0x4, 0x80000000, 0x1, 0x2, 0x5, 0x4, 0x5, 0xffff, 0x0, 0x8, 0x2, 0x2, 0x3, 0x6df, 0x800, 0x3, 0x401, 0x7ff, 0x5, 0x7, 0x8001, 0x2, 0x80000000, 0x4], [0x908, 0xa8, 0x88, 0xa78a, 0x800, 0xffff, 0x1, 0x6a22, 0x9, 0x9, 0x7, 0x8, 0x9, 0x58, 0x401, 0x401, 0x7, 0xa45, 0x67ba, 0x99, 0x4, 0x1000, 0x4, 0x4, 0x6, 0x7ff, 0x6, 0x6, 0x0, 0x3, 0x4, 0x2, 0xf40, 0x1000, 0x1, 0x0, 0x5, 0x1, 0x401, 0x101, 0x6, 0x8000, 0xae, 0x9, 0x8, 0x9, 0x80000001, 0xffffffffffffff0f, 0x4485, 0x3, 0x1, 0x8000, 0x2, 0x3, 0x3, 0x1, 0x6, 0xfffffffffffffc01, 0x5, 0x0, 0xfffffffffffffff8, 0xc9df, 0xc], [0x401, 0x11f3204b, 0x6, 0xed, 0x7, 0x0, 0x4, 0x8000, 0x9, 0x7, 0x6, 0x5f7, 0x0, 0x4, 0x200, 0x7fff, 0x504, 0x1, 0x40, 0x5, 0x8, 0xfff, 0x0, 0x9, 0x1000, 0xffff, 0x0, 0x4398, 0x9, 0x9, 0x5, 0x0, 0x100000001, 0x7, 0x800, 0x3ff, 0x9, 0x2, 0x5d3, 0x0, 0x2, 0x3ff, 0x1000, 0x3, 0x6, 0x8, 0xffff, 0x8000000000000000, 0x200, 0xa4d4, 0xb17, 0x800, 0x61bf, 0x0, 0x1, 0x9, 0x6, 0x8, 0x3ff, 0x2, 0x3e, 0x1000, 0xfffffffffffffff8, 0x7fffffff], [0x7ff, 0x7fffffff, 0x0, 0x1, 0x9666, 0x4, 0x5f, 0x8, 0x80000001, 0xfffffffffffffbff, 0x80, 0x20, 0x7, 0x100, 0x2, 0xffff, 0x100000001, 0x7, 0x0, 0x8, 0x6, 0x40, 0x20, 0xffff, 0x7fffffff, 0xfffffffffffffffa, 0x101, 0x9, 0x1ff, 0x4, 0x6, 0x7f, 0x5, 0x8, 0xffffffffffffffff, 0x9, 0x5, 0x6, 0x3ff, 0x1, 0x3, 0x4bc6, 0x0, 0x8001, 0x40, 0x81, 0x8, 0x9, 0x9, 0x2628, 0x0, 0x9, 0xc3b, 0x3, 0x8, 0x200, 0x3628000, 0x1, 0x401, 0x5, 0x0, 0x20, 0x6dcc85a3, 0x8]}, 0x45c) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000300)={{0x2, 0x4e21, @remote}, {0x306, @local}, 0x10, {0x2, 0x2004e23, @remote}, 'ip6gretap0\x00'}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0xffffffffffffff65}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x31b}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="b40ef28e5972f44eea180598196edfa1cb6626bc1945066f9cc7308d73f997a5eee1f515080164446da35f24fd8768da7753f063f1a63399a42171caddaf8229e66d11ba45c1fb3d869ad24e9af56f9841fe7f35ecbeaffcde2fc4cc68da55f595c27c42f7825d309312faabed2be9f2fbbff468a33709bb4fb76237fd04f8e48f6dc3b05e67"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:33 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@random="a1f8a32bc6db", @remote, [], {@canfd={0x6558, {{}, 0x0, 0x0, 0x0, 0x0, "62848ab80800059ba6ab7d1f749046bed441226f685c18f62ef15bc8b9076c44b7e0e4b950dc946899d16cc55476a21c010e1d544a69d273cb2ab2b17c09a4ba"}}}}, &(0x7f0000000640)) dup(r1) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/227) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000007c0)={r1, 0x2, 0x6, "89cdb9dc59ee390156098e0952fb49f5e80b4a2fedb8fcbc8615458fe3469fd21ad123e3f178e0556821e0715e2eb47db3efa53dae59fa6cc19dca284d7120a8da870c0e38c53ee72f280d64a5e746789e94f859b347cb9049b68ec11934ca7e2cd6ed6fa081e87cc15cc6aef6251a50fdbc13369d4c67651a23fa91bf4109"}) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="ad56b6c50400aeb995298992ea5600c2", 0x10) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0x8, 0xffffffff00000001, 0x588000000000000, [], &(0x7f0000000140)=0x4}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000780), &(0x7f0000000740)=0x1efac631c56178c) sendmmsg$unix(r2, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0xc4, &(0x7f0000000040)}], 0x500, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={r3, r4, r5}, 0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000480)={0x0, 0xdb, "bceac0c48282bf9a8ad0afebe2bf76c48d8fd03cdb7d1b8ffaeb6473c94715f8c8f20a71a82a20cfc2c2e7a179c6cdd405735e16b224a405639db5df0c21f6f650a28c6b7d7ced8abe77e78ef1100fe2f76684dac73010447d145c28012d38aa4ed99c7cb7b420dcd01c653e6df36324dd52ca08fe40eddee1a7566320ebdc68bef9fe94611d4c6b1d978985c3c8042a00f0243ecbf1e40e6ce2bddd1cdb2d8424369e13dd7c6fc2e7579aa8b881ba0f95872639902ac2183a7fdb22a59d3a71f482f9b644aa1e4bdf3c75a0bbd32c15f9fc7ade72182e2f2ab903"}, &(0x7f00000005c0)=0xe3) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYBLOB="62010068bf1ba6f9bbc3e93fee7627369bc15f63fc770d95785e9da57b626a6266e0b3e57b1736a6e2569beda9cd"], &(0x7f0000000640)=0x8) 11:27:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000}, 0xc) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) getpeername(r0, &(0x7f0000000440)=@hci={0x1f, 0x0}, &(0x7f00000004c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000600)=0xe8) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000bc0)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000cc0)=0xfffffffffffffdcb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002440)={0x0, @dev, @loopback}, &(0x7f0000002480)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000024c0)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002500)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000002600)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000002640)={0x11, 0x0, 0x0}, &(0x7f0000002680)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000029c0)={@mcast1, 0x0}, &(0x7f0000002a00)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002ac0)=0x14, 0x80800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000002b00)={@mcast2, 0x0}, &(0x7f0000002b40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000002e00)={@local, 0x0}, &(0x7f0000002e40)=0x14) r19 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0xa00, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r19, 0x8933, &(0x7f0000002e80)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002ec0)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002fc0)=0xe8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000003000)={@remote, 0x0}, &(0x7f0000003040)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000003080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000030c0)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003140)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003180)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000031c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f00000032c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003300)={'team0\x00', 0x0}) accept$packet(0xffffffffffffff9c, &(0x7f0000003880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000038c0)=0x14) recvmmsg(r0, &(0x7f0000009900)=[{{&(0x7f0000003900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003980)=""/60, 0x3c}], 0x1, &(0x7f0000003a00)=""/38, 0x26, 0x2a5}, 0x1000}, {{&(0x7f0000003a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003ac0)=""/197, 0xc5}, {&(0x7f0000003bc0)=""/162, 0xa2}, {&(0x7f0000003c80)=""/185, 0xb9}, {&(0x7f0000003d40)=""/68, 0x44}], 0x4, &(0x7f0000003e00)=""/184, 0xb8, 0x2}, 0x363fa8e2}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000003ec0)=""/181, 0xb5}, {&(0x7f0000003f80)=""/50, 0x32}, {&(0x7f0000003fc0)=""/178, 0xb2}, {&(0x7f0000004080)=""/192, 0xc0}, {&(0x7f0000004140)=""/123, 0x7b}, {&(0x7f00000041c0)=""/252, 0xfc}, {&(0x7f00000042c0)=""/244, 0xf4}], 0x7, &(0x7f0000004440)=""/4096, 0x1000, 0x9}, 0x81}, {{&(0x7f0000005440)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000005680)=[{&(0x7f00000054c0)=""/138, 0x8a}, {&(0x7f0000005580)=""/254, 0xfe}], 0x2, &(0x7f00000056c0)=""/148, 0x94, 0x2}, 0x22800000}, {{&(0x7f0000005780)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000007b00)=[{&(0x7f0000005800)=""/206, 0xce}, {&(0x7f0000005900)=""/102, 0x66}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f0000007980)=""/234, 0xea}, {&(0x7f0000007a80)=""/85, 0x55}], 0x6, &(0x7f0000007b80), 0x0, 0x200}, 0xa23b}, {{&(0x7f0000007bc0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000080c0)=[{&(0x7f0000007c40)=""/145, 0x91}, {&(0x7f0000007d00)=""/217, 0xd9}, {&(0x7f0000007e00)=""/151, 0x97}, {&(0x7f0000007ec0)=""/210, 0xd2}, {&(0x7f0000007fc0)=""/49, 0x31}, {&(0x7f0000008000)=""/170, 0xaa}], 0x6, &(0x7f0000008140)=""/225, 0xe1, 0x5}, 0x8000}, {{&(0x7f0000008240)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000008300)=[{&(0x7f00000082c0)=""/3, 0x3}], 0x1, 0x0, 0x0, 0x401}, 0x80000000}, {{&(0x7f0000008340)=@nfc_llcp, 0x80, &(0x7f0000008480)=[{&(0x7f00000083c0)=""/169, 0xa9}], 0x1, &(0x7f00000084c0)=""/39, 0x27, 0x1ff}, 0x7}, {{&(0x7f0000008500), 0x80, &(0x7f00000097c0)=[{&(0x7f0000008580)=""/4096, 0x1000}, {&(0x7f0000009580)=""/22, 0x16}, {&(0x7f00000095c0)=""/44, 0x2c}, {&(0x7f0000009600)=""/254, 0xfe}, {&(0x7f0000009700)=""/137, 0x89}], 0x5, &(0x7f0000009840)=""/168, 0xa8, 0x3e}, 0x1}], 0x9, 0x2000, &(0x7f0000009b40)={0x0, 0x989680}) accept4$packet(0xffffffffffffff9c, &(0x7f0000009b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000009bc0)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000a380)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f000000a480)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f000000a4c0)={@loopback, @dev, 0x0}, &(0x7f000000a500)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000b100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f000000b0c0)={&(0x7f000000b140)=ANY=[@ANYBLOB="d00a0000", @ANYRES16=r1, @ANYBLOB="010125bd7000fcdbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="800002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100010008000600", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="7401020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000400000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004006e00000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001006c7300000000000000000000000098a0e35bc600000000000000080003000b000000080004009a00000008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400050001080800000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000004000008000600", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="8801020064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000340004000000020101000000ff01ff01050000005503009c0900000006000100000400007f000100f7ffffff0100ff310300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400e1ffffff08000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000500000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r14, @ANYBLOB="b401020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000900000008000100", @ANYRES32=r18, @ANYBLOB="000102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004004000000008000600", @ANYRES32=r21, @ANYBLOB="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", @ANYRES32=r22, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="e80102003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400c00d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r25, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400060000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r26, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003cd9fa148f440adbe000300000008000400", @ANYRES32=r27, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r28, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r29, @ANYBLOB="08000100", @ANYRES32=r30, @ANYBLOB="400002003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400560004000004000008000100", @ANYRES32=r31, @ANYBLOB="e001020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040050cdf76a6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000004ff02f00400000700048c09000000ff0f805b0700000005000301ff00000007000000020000001363070101010000050000060300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r32, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400cb00000008000600", @ANYRES32=r33, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff0f000008000600", @ANYRES32=r34, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004008100000008000600", @ANYRES32=r35], 0xad0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 11:27:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(0xffffffffffffffff) 11:27:33 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)='memory.high\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x100000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xfd90, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) 11:27:33 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(0xffffffffffffffff) 11:27:33 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x3) r1 = dup2(r0, r0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0xd19, 0x0, 0x7, 0xf23e, 0x9, 0x401, 0x1, 0x8, 0x4, 0x3, 0x80000000000009}, 0xb) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x20, 0x0, 0x2}}, 0x14) r4 = openat$cgroup_ro(r2, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000000), 0x1000000000000c67) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x70, 0x3a, 0x5, 0x3f, 0x2, 0x0, 0x2, 0x50810, 0x0, 0x4, 0xffff, 0x0, 0x380000000, 0x0, 0x6, 0x4990292e, 0x4, 0x9, 0x7, 0x8, 0x9f, 0x7fffffff, 0x81, 0x3, 0x7, 0x3, 0x4, 0x94a, 0x7fffffff, 0x2, 0x5, 0x4, 0x1, 0x0, 0x6, 0x1, 0x4, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x2, 0x5, 0x7, 0x7, 0x7, 0x6, 0xd7}, r1, 0xa, r0, 0x1) [ 525.966441] IPVS: ftp: loaded support on port[0] = 21 11:27:33 executing program 1: ptrace$poke(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x8000) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup(r0) ioctl$KDSKBLED(r2, 0x4b65, 0x4) sendmmsg(r1, &(0x7f0000007e00), 0x26e, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/avc/cache_stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f000000ac80), 0x400000000000302, 0x4008800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100)=0x4, 0x4) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f00000001c0)) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000300), &(0x7f00000003c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='EPL\x00'}, 0x48) socket$inet6(0xa, 0x80002, 0x0) [ 526.045377] device bridge_slave_1 left promiscuous mode [ 526.051884] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.129589] device bridge_slave_0 left promiscuous mode [ 526.135096] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.282163] team0 (unregistering): Port device team_slave_1 removed [ 526.306649] team0 (unregistering): Port device team_slave_0 removed [ 526.338974] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 526.385815] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 526.523066] bond0 (unregistering): Released all slaves [ 527.825755] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.832307] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.840228] device bridge_slave_0 entered promiscuous mode [ 527.885293] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.891820] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.899779] device bridge_slave_1 entered promiscuous mode [ 527.944586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 527.990445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 528.128820] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 528.166277] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 528.337652] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 528.345220] team0: Port device team_slave_0 added [ 528.370456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 528.377533] team0: Port device team_slave_1 added [ 528.407803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 528.454984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 528.497446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 528.525750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 528.785841] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.792240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.798921] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.805261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.812625] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 529.744210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.778276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 529.842272] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 529.931193] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 529.937311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 529.945007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.032932] 8021q: adding VLAN 0 to HW filter on device team0 11:27:38 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000009c0)={0x0, {0x77359400}, 0x4, 0xfffffffffffffffc}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff6dbe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$cont(0x9, r2, 0x8, 0x2) ptrace$cont(0x20, r2, 0xa, 0x0) wait4(r2, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x40, 0x2fe) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x200000, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x164f}}, {@mode={'mode'}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0xf5}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x61, 0x37, 0x61, 0x34, 0x34, 0x0, 0x61], 0x2d, [0x35, 0x36, 0x77, 0x77], 0x2d, [0x77, 0x63, 0x62, 0x77], 0x2d, [0x32, 0x7f, 0x35, 0x73], 0x2d, [0x73, 0x61, 0x79, 0x76, 0x76, 0x7f, 0x61, 0x35]}}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}, {@smackfshat={'smackfshat', 0x3d, 'securityuser'}}, {@smackfshat={'smackfshat'}}]}) connect(r0, &(0x7f00000001c0)=@in={0x2, 0x4e20, @local}, 0x80) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000240)=0x8, 0x4) recvmsg(r1, &(0x7f0000000400)={&(0x7f0000000280)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0xffffffffffffff1b}, 0x2000) sendmmsg(r0, &(0x7f00000002c0), 0xf39e990357e7d3, 0x0) 11:27:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:38 executing program 3: r0 = getuid() setfsuid(r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) 11:27:38 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000461fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) io_setup(0x100000001, &(0x7f0000f69000)=0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0xffffffffffffffb0}]) 11:27:38 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x400142, 0x0) r3 = dup3(r0, r0, 0x80000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0xc0, 0x0) r5 = syz_open_dev$media(&(0x7f0000002540)='/dev/media#\x00', 0x80000001, 0x400000) r6 = syz_open_dev$audion(&(0x7f0000002680)='/dev/audio#\x00', 0x101, 0x800) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000028c0)="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") r7 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x40000, 0x0) io_submit(r1, 0x7, &(0x7f0000002840)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9, r0, &(0x7f0000000080)="cae422792fe7c1a1538247dc4d6ba0317f1064bcf2835569c27f26cfb30b456abe2f9e6a2e070f41a8fd02ea7cfb141e638e1dc84c48b16efcd1c1d6fdac48dcc791927d9b500da3fee7e4562b52a13e181e1708f6cb55571db22ca2e90f22680d4525825060df248d31ca49e6375ce21fa7ea99453fb07982b1c37a06647e2a0f09", 0x82, 0x81, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xa32b, r0, &(0x7f0000000180)="f0e9e0bc7ee7f204b4f04a5a0c7b5e1d8be33762b143a30802830217164f8cb6efb99b47e32e56364d14ba9c1f85e1008cda67d7900569754d7d", 0x3a, 0xffffffff, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f0000000400)="8ac46b91c00c72b21d9a285f959ed6d435225135a744e8e1e2e00a5e079c73225e318fbf11cc2bcd4be18242f217a5bb83559e9fd57b3e88f398fd18c0e270df3ce767c592157a23eb447702ea23bbbf4bef9249e4aa51f58969d5de295fd2dcefc264ba5d2265fa0393bcad2bd4029677cb578ba262efa2b026a7045ff6e6d50a83d847ff57dd20e7e3e6455ec09b4d65d5e8cd342485d9d86734cb946077126f50ecba04a9b703871dfb2eb6e45939814695ae9b6f7c45d82bfb20c8a3435dab7ad9436b5386e0913b48c5f51482f7d6ce6bf17dfbb6cf9efc0aa468c1074164e0eb2fcbfdb5853f6c28bc4edd28b00880de", 0xf3, 0x80, 0x0, 0x1, r3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x7fffffff, r0, &(0x7f0000000500)="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", 0x1000, 0x5, 0x0, 0x0, r4}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000001540)="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", 0x1000, 0xd6b, 0x0, 0x3, r5}, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0xf, 0x3ff, r0, &(0x7f00000025c0)="1f5586230d637416d56dee52c1b5d7aa5451f8540b55fa1dc4b2a59e46d30265a3a1bf7ef5f66a6843be2fe4fee1ee643ea262a886bd8a564c1c0ee840bcdba57c043506cd553ff2317ddcfcbdefdc54a24f425b9c46bf644c677c3773c33e0c9b000f9d93f178bd4f0a2d707c4636cbe6d55a12ac83191c4714cca8419f911404234d7edbe4327b6ba80bf8f6bdbb1728553cf030c51e787841c759410b50859d6f", 0xa2, 0x7, 0x0, 0x3, r6}, &(0x7f0000002800)={0x0, 0x0, 0x0, 0xb, 0x4, r0, &(0x7f0000002700)="ce669b7f92bbb0181280cf380360f56d52cce76084814d43128bc51cb2adf1a61a37cb75554acc5fc1fc31b6af9578947e754d77c2a59fd0841444e5c1186d2fc8834677325047cdf7b1dc5a423bdcd92494208ebe0d400afa4e512a6fe860073849677e3c668546caa709ed39a8a73b6fa40d53b8c74e8a620ad65fbc37e36596fb17fbb2d7f58fe25cd83d", 0x8c, 0x5, 0x0, 0x3, r7}]) r8 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002880)='./cgroup/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r8, r9, &(0x7f0000000000), 0x1000000000000c67) [ 530.651811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:27:38 executing program 5: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440), 0x0, 0xffffffffffffffff}]) r1 = dup3(r0, r0, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'yam0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000001c0)={@local, r2}, 0x14) r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r4, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000001000)}]) socket$inet6_sctp(0xa, 0x5, 0x84) [ 530.732747] FAULT_INJECTION: forcing a failure. [ 530.732747] name failslab, interval 1, probability 0, space 0, times 0 [ 530.796496] CPU: 1 PID: 22189 Comm: syz-executor2 Not tainted 4.20.0-rc3+ #121 [ 530.803883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.813240] Call Trace: [ 530.815855] dump_stack+0x244/0x39d [ 530.819504] ? dump_stack_print_info.cold.1+0x20/0x20 [ 530.824733] should_fail.cold.4+0xa/0x17 [ 530.828842] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 530.833978] ? is_bpf_text_address+0xac/0x170 [ 530.838526] ? zap_class+0x640/0x640 [ 530.842246] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 530.847534] ? rcu_softirq_qs+0x20/0x20 [ 530.851561] ? find_held_lock+0x36/0x1c0 [ 530.855636] ? __lock_is_held+0xb5/0x140 [ 530.859746] ? perf_trace_sched_process_exec+0x860/0x860 [ 530.865229] __should_failslab+0x124/0x180 [ 530.869483] should_failslab+0x9/0x14 [ 530.873298] kmem_cache_alloc_node+0x26e/0x730 [ 530.877904] ? raw_notifier_call_chain+0x2d/0x40 [ 530.882721] ? call_netdevice_notifiers_info+0x3f/0x90 [ 530.888077] ? rollback_registered_many+0xb7f/0x1250 [ 530.893189] ? rollback_registered+0x1e9/0x420 [ 530.893242] ? unregister_netdevice_queue+0x321/0x5e0 [ 530.893346] ? __tun_detach+0x11b8/0x15c0 [ 530.893363] ? tun_chr_close+0xe3/0x180 [ 530.893422] __alloc_skb+0x119/0x770 [ 530.893443] ? netdev_alloc_frag+0x1f0/0x1f0 [ 530.903214] ? mark_held_locks+0xc7/0x130 [ 530.903233] ? kfree+0x11e/0x230 [ 530.903248] ? kfree+0x11e/0x230 [ 530.903265] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 530.903283] ? trace_hardirqs_on+0xbd/0x310 [ 530.903314] ? __devinet_sysctl_unregister.isra.29+0x6d/0xb0 [ 530.903332] ? trace_hardirqs_off_caller+0x310/0x310 [ 530.903355] inet_netconf_notify_devconf+0xea/0x260 [ 530.955467] __devinet_sysctl_unregister.isra.29+0x87/0xb0 [ 530.961104] devinet_sysctl_unregister+0x92/0xf0 [ 530.965871] inetdev_event+0xa61/0x1340 [ 530.969858] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 530.974527] ? wpan_phy_register+0x270/0x270 [ 530.978953] ? inetdev_init+0x590/0x590 [ 530.982959] ? kasan_check_write+0x14/0x20 [ 530.987222] ? up_read+0x225/0x2c0 [ 530.990793] ? up_read_non_owner+0x100/0x100 [ 530.995291] ? netlbl_unlhsh_netdev_handler+0xbc/0x3d0 [ 530.995313] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 531.005679] ? netlbl_unlhsh_free_iface+0x700/0x700 [ 531.005709] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 531.005732] notifier_call_chain+0x17e/0x380 [ 531.005745] ? inetdev_init+0x590/0x590 [ 531.005758] ? notifier_call_chain+0x17e/0x380 [ 531.005777] ? unregister_die_notifier+0x20/0x20 [ 531.015989] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 531.016004] ? rtnl_is_locked+0xb5/0xf0 [ 531.016018] ? rtnl_trylock+0x20/0x20 [ 531.016039] raw_notifier_call_chain+0x2d/0x40 [ 531.016058] call_netdevice_notifiers_info+0x3f/0x90 [ 531.024422] rollback_registered_many+0xb7f/0x1250 [ 531.024446] ? generic_xdp_install+0x590/0x590 [ 531.024466] ? mark_held_locks+0x130/0x130 [ 531.024486] ? zap_class+0x640/0x640 [ 531.024504] ? print_usage_bug+0xc0/0xc0 [ 531.070603] ? print_usage_bug+0xc0/0xc0 [ 531.070626] ? print_usage_bug+0xc0/0xc0 [ 531.070644] ? find_held_lock+0x36/0x1c0 [ 531.070671] ? mark_held_locks+0xc7/0x130 [ 531.070700] rollback_registered+0x1e9/0x420 [ 531.070716] ? lockdep_hardirqs_on+0x341/0x5b0 [ 531.070734] ? rollback_registered_many+0x1250/0x1250 [ 531.078499] ? trace_hardirqs_on+0xbd/0x310 [ 531.078557] ? linkwatch_schedule_work+0x150/0x170 [ 531.078574] ? trace_hardirqs_off_caller+0x310/0x310 [ 531.078592] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 531.078605] ? rtnl_is_locked+0xb5/0xf0 [ 531.078622] ? rtnl_trylock+0x20/0x20 [ 531.136810] ? queue_delayed_work_on+0x130/0x1f0 [ 531.136833] unregister_netdevice_queue+0x321/0x5e0 11:27:38 executing program 1: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x3, 0x0, 0x75, 0x0, 0x8}, &(0x7f00000001c0)=0x98) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mount(&(0x7f0000001500)=ANY=[@ANYBLOB="3d1c7bba95abcca063d744b995481f41ddcd9df6e862d6397ea6f63812050000000000007e030b2388c38252288e23c9ebb713f2d4216e5fe88a6bb26e96830726023c5db3f9cbc307312e378cafc89510fe515453975641351ea17bfecb62ab0d74658f156694f38cfbbe1845093eacce10339cc90759117c377ec0714345942f"], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYBLOB="ea0000006a35a83e701a10440680fdafd60dfb1dfcf8883af356480e785f738a922fcc9aff1da47752304a81a68a48a39abc1b6e3fbad883bd000000360ff4a5af05d63619b336322f4221924f540a77f11467126f882382530e641d55bb124642514bc71086764a2e980e5f3377556c68688414e85ed3df8954548a39a278"], &(0x7f0000000040)=0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) dup2(r1, r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/kvm\x00', 0x101, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) fchown(r4, r6, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000014000/0x4000)=nil, &(0x7f0000015000/0x2000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x3000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f000000e000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f000000e000/0x4000)=nil, &(0x7f0000015000/0x4000)=nil, &(0x7f0000000440)="ae6e36a589a6c042c0310a7483596e5bc9a47001914d5d39bd9c1e205ca06b0d95710ccded04e9a060d928a11822ecaae32b0628d8d56f0de35be62b7986af2c071d91228391f934c35d7720b516199c6222c7cbf8d233795d0cbefebf978d005a1faeed1960697acefd83a91780110c4a02cc5f3a4f0b1a0a83b3c35e986a327e9caaaa29de9e13f2d5c8608cabaf768d", 0x91, r5}, 0x68) 11:27:38 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000012c0)="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", 0x1000) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 531.136852] ? rollback_registered+0x420/0x420 [ 531.136870] ? linkwatch_schedule_work+0x170/0x170 [ 531.136888] ? tun_setup+0x2d0/0x2d0 [ 531.136909] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.165468] ? netif_set_real_num_tx_queues+0x10d/0x710 [ 531.170847] ? __tun_detach+0x6ba/0x15c0 [ 531.174938] __tun_detach+0x11b8/0x15c0 [ 531.178957] ? find_held_lock+0x36/0x1c0 [ 531.183039] ? tun_attach+0x1900/0x1900 [ 531.187051] ? get_pid_task+0xd6/0x1a0 [ 531.190999] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 531.196587] ? locks_remove_posix+0x47d/0x840 [ 531.201139] ? vfs_lock_file+0xe0/0xe0 [ 531.205044] ? zap_class+0x640/0x640 [ 531.208774] ? fsnotify+0x50e/0xef0 [ 531.212425] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 531.217976] ? locks_remove_file+0x3c6/0x5c0 [ 531.222402] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 531.227993] ? ima_file_free+0x132/0x650 [ 531.232102] ? __lock_is_held+0xb5/0x140 [ 531.236189] ? __tun_detach+0x15c0/0x15c0 [ 531.240444] ? __tun_detach+0x15c0/0x15c0 [ 531.244607] tun_chr_close+0xe3/0x180 [ 531.248438] __fput+0x385/0xa30 [ 531.251739] ? get_max_files+0x20/0x20 [ 531.255657] ? trace_hardirqs_on+0xbd/0x310 [ 531.259999] ? kasan_check_read+0x11/0x20 [ 531.264174] ? task_work_run+0x1af/0x2a0 [ 531.268254] ? trace_hardirqs_off_caller+0x310/0x310 [ 531.273367] ? filp_close+0x1cd/0x250 [ 531.277184] ____fput+0x15/0x20 [ 531.280486] task_work_run+0x1e8/0x2a0 [ 531.284397] ? task_work_cancel+0x240/0x240 [ 531.288742] ? copy_fd_bitmaps+0x210/0x210 [ 531.292986] ? do_syscall_64+0x9a/0x820 [ 531.296985] exit_to_usermode_loop+0x318/0x380 [ 531.301580] ? __bpf_trace_sys_exit+0x30/0x30 [ 531.306106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.311658] do_syscall_64+0x6be/0x820 [ 531.315567] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 531.320943] ? syscall_return_slowpath+0x5e0/0x5e0 [ 531.325883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.330740] ? trace_hardirqs_on_caller+0x310/0x310 [ 531.335775] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 531.340809] ? prepare_exit_to_usermode+0x291/0x3b0 [ 531.345847] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 531.350735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 531.355932] RIP: 0033:0x457569 [ 531.359142] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.378054] RSP: 002b:00007f85bf3f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 531.385770] RAX: 0000000000000000 RBX: 00007f85bf3f6c90 RCX: 0000000000457569 [ 531.393046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 531.400352] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 531.407627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85bf3f76d4 [ 531.414929] R13: 00000000004f0b72 R14: 00000000004cce48 R15: 0000000000000005 11:27:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000040), 0x5) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) 11:27:39 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r0) poll(&(0x7f0000000000)=[{r1, 0x2100}, {r0, 0x9016}, {r3, 0x4040}, {r3, 0x8004}, {r3, 0x100}], 0x5, 0x100000001) socket$inet6(0xa, 0x5, 0x96) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000280)) 11:27:39 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x201f, r0, 0x0, 0x7) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x0, 0x0) write$P9_RSTATFS(r1, &(0x7f0000000940)={0x43, 0x9, 0x2, {0x1, 0x80000000, 0x6, 0x5, 0x81, 0x4, 0xffc0000000, 0x9, 0x954d}}, 0x43) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:39 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x1000000000000c67) 11:27:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:39 executing program 2 (fault-call:4 fault-nth:1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) fsetxattr$security_selinux(r0, &(0x7f00000001c0)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:chfn_exec_t:s0\x00', 0xe6, 0x1) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000100)={{0xfffffffffffffff8, 0x7}, 'port1\x00', 0xe0, 0x40, 0x3, 0x2, 0x846, 0x1, 0x8, 0x0, 0x1, 0x1f}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x1000000000000c67) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x400) 11:27:39 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 11:27:39 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), 0xffffffffffffffff) 11:27:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:39 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$inet6_int(r2, 0x29, 0xd9, &(0x7f0000000300)=0x9, 0x4) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:39 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}, [0x63, 0xe69f, 0x18000000000, 0x401, 0x6, 0x200, 0x1, 0x4, 0x2, 0x21d5, 0x7, 0x1963, 0x100000000, 0x200000000, 0x6]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x0, @empty, 0x9}}, 0x8, 0x2000}, &(0x7f0000000400)=0x90) r3 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000000), 0x1000000000000c67) [ 532.122833] FAULT_INJECTION: forcing a failure. [ 532.122833] name failslab, interval 1, probability 0, space 0, times 0 [ 532.158422] CPU: 0 PID: 22277 Comm: syz-executor2 Not tainted 4.20.0-rc3+ #121 [ 532.165805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 532.175158] Call Trace: [ 532.177771] dump_stack+0x244/0x39d [ 532.181420] ? dump_stack_print_info.cold.1+0x20/0x20 [ 532.186646] should_fail.cold.4+0xa/0x17 [ 532.190777] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 532.196059] ? __save_stack_trace+0x8d/0xf0 [ 532.196090] ? zap_class+0x640/0x640 [ 532.196112] ? save_stack+0xa9/0xd0 [ 532.207794] ? save_stack+0x43/0xd0 [ 532.207816] ? find_held_lock+0x36/0x1c0 [ 532.207837] ? __lock_is_held+0xb5/0x140 [ 532.207859] ? kvm_mmu_pte_write+0x6f8/0x11b0 [ 532.224102] ? zap_class+0x640/0x640 [ 532.227842] ? perf_trace_sched_process_exec+0x860/0x860 [ 532.233328] ? check_preemption_disabled+0x48/0x280 [ 532.238369] __should_failslab+0x124/0x180 [ 532.242664] should_failslab+0x9/0x14 [ 532.246502] kmem_cache_alloc_node_trace+0x270/0x740 [ 532.251629] __kmalloc_node_track_caller+0x3c/0x70 [ 532.256578] __kmalloc_reserve.isra.40+0x41/0xe0 [ 532.261354] __alloc_skb+0x155/0x770 [ 532.265102] ? netdev_alloc_frag+0x1f0/0x1f0 [ 532.269532] ? mark_held_locks+0xc7/0x130 [ 532.273728] ? kfree+0x11e/0x230 [ 532.277135] ? kfree+0x11e/0x230 [ 532.280515] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 532.285106] ? trace_hardirqs_on+0xbd/0x310 [ 532.289440] ? __devinet_sysctl_unregister.isra.29+0x6d/0xb0 [ 532.295270] ? trace_hardirqs_off_caller+0x310/0x310 [ 532.300395] inet_netconf_notify_devconf+0xea/0x260 [ 532.305461] __devinet_sysctl_unregister.isra.29+0x87/0xb0 [ 532.311098] devinet_sysctl_unregister+0x92/0xf0 [ 532.315896] inetdev_event+0xa61/0x1340 [ 532.319912] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 532.324509] ? wpan_phy_register+0x270/0x270 [ 532.328928] ? inetdev_init+0x590/0x590 [ 532.332938] ? kasan_check_write+0x14/0x20 [ 532.337182] ? up_read+0x225/0x2c0 [ 532.340738] ? up_read_non_owner+0x100/0x100 [ 532.345175] ? netlbl_unlhsh_netdev_handler+0xbc/0x3d0 [ 532.350461] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 532.355575] ? netlbl_unlhsh_free_iface+0x700/0x700 [ 532.360619] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 532.365830] notifier_call_chain+0x17e/0x380 [ 532.370245] ? inetdev_init+0x590/0x590 [ 532.374238] ? notifier_call_chain+0x17e/0x380 [ 532.378832] ? unregister_die_notifier+0x20/0x20 [ 532.383602] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 532.389143] ? rtnl_is_locked+0xb5/0xf0 [ 532.393151] ? rtnl_trylock+0x20/0x20 [ 532.396987] raw_notifier_call_chain+0x2d/0x40 [ 532.401591] call_netdevice_notifiers_info+0x3f/0x90 [ 532.406730] rollback_registered_many+0xb7f/0x1250 [ 532.411683] ? generic_xdp_install+0x590/0x590 [ 532.416304] ? mark_held_locks+0x130/0x130 [ 532.420551] ? __sched_text_start+0x8/0x8 [ 532.424729] ? zap_class+0x640/0x640 [ 532.428508] ? print_usage_bug+0xc0/0xc0 [ 532.432603] ? print_usage_bug+0xc0/0xc0 [ 532.436727] ? print_usage_bug+0xc0/0xc0 [ 532.440810] ? find_held_lock+0x36/0x1c0 [ 532.444920] ? mark_held_locks+0xc7/0x130 [ 532.449095] rollback_registered+0x1e9/0x420 [ 532.453514] ? lockdep_hardirqs_on+0x341/0x5b0 [ 532.458110] ? rollback_registered_many+0x1250/0x1250 [ 532.463311] ? trace_hardirqs_on+0xbd/0x310 [ 532.467656] ? linkwatch_schedule_work+0x150/0x170 [ 532.472605] ? trace_hardirqs_off_caller+0x310/0x310 [ 532.472626] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 532.472640] ? rtnl_is_locked+0xb5/0xf0 [ 532.472653] ? rtnl_trylock+0x20/0x20 [ 532.472672] ? queue_delayed_work_on+0x130/0x1f0 [ 532.483318] unregister_netdevice_queue+0x321/0x5e0 [ 532.483338] ? rollback_registered+0x420/0x420 [ 532.483356] ? linkwatch_schedule_work+0x170/0x170 [ 532.483376] ? tun_setup+0x2d0/0x2d0 [ 532.514159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.519736] ? netif_set_real_num_tx_queues+0x10d/0x710 [ 532.525128] ? __tun_detach+0x6ba/0x15c0 [ 532.529226] __tun_detach+0x11b8/0x15c0 [ 532.533216] ? find_held_lock+0x36/0x1c0 [ 532.537295] ? tun_attach+0x1900/0x1900 [ 532.541282] ? get_pid_task+0xd6/0x1a0 [ 532.545216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 532.550768] ? locks_remove_posix+0x47d/0x840 [ 532.555279] ? vfs_lock_file+0xe0/0xe0 [ 532.559200] ? zap_class+0x640/0x640 [ 532.562923] ? fsnotify+0x50e/0xef0 [ 532.566570] ? locks_remove_file+0x3c6/0x5c0 [ 532.571015] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 532.576572] ? __lock_is_held+0xb5/0x140 [ 532.580651] ? __tun_detach+0x15c0/0x15c0 [ 532.584833] ? __tun_detach+0x15c0/0x15c0 [ 532.589009] tun_chr_close+0xe3/0x180 [ 532.592823] __fput+0x385/0xa30 [ 532.596147] ? get_max_files+0x20/0x20 [ 532.600043] ? trace_hardirqs_on+0xbd/0x310 [ 532.604388] ? kasan_check_read+0x11/0x20 [ 532.608548] ? task_work_run+0x1af/0x2a0 [ 532.612622] ? trace_hardirqs_off_caller+0x310/0x310 [ 532.617760] ? filp_close+0x1cd/0x250 [ 532.621593] ____fput+0x15/0x20 [ 532.624886] task_work_run+0x1e8/0x2a0 [ 532.628801] ? task_work_cancel+0x240/0x240 [ 532.633138] ? copy_fd_bitmaps+0x210/0x210 [ 532.637390] ? do_syscall_64+0x9a/0x820 [ 532.641401] exit_to_usermode_loop+0x318/0x380 [ 532.646010] ? __bpf_trace_sys_exit+0x30/0x30 [ 532.650523] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 532.656084] do_syscall_64+0x6be/0x820 [ 532.659991] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 532.665384] ? syscall_return_slowpath+0x5e0/0x5e0 [ 532.670322] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:27:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x7a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000004740)=[{{&(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @rand_addr}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/82, 0x52}], 0x1, &(0x7f0000000ec0)=""/210, 0xd2}}], 0x1, 0x0, &(0x7f0000004840)) 11:27:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001400)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed9962f134956ea6884eabba3d0fa993e87a7749eb2cb07c", 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80800, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0), 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000002c0)={0x0, @aes128, 0x1, "2364b6b4d867c328"}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000ffb000/0x4000)=nil}) r6 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.stat\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000140)=0x30) sendto(r4, &(0x7f0000000400)="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", 0x1000, 0x10, &(0x7f0000000240)=@l2={0x1f, 0xca, {0x2, 0x3, 0x0, 0x0, 0x9, 0x2}, 0x8, 0x80000000}, 0x80) sendfile(r1, r6, &(0x7f0000000000), 0x1000000000000c67) 11:27:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000180)={r3, 0x4d55, 0xffffffffffff0001, 0xc673, 0x0, 0x38d, 0x200}) 11:27:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) [ 532.670342] ? trace_hardirqs_on_caller+0x310/0x310 [ 532.670361] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 532.670380] ? prepare_exit_to_usermode+0x291/0x3b0 [ 532.670402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 532.670425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 532.670438] RIP: 0033:0x457569 11:27:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) [ 532.670465] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 532.680329] RSP: 002b:00007f85bf3f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 532.680346] RAX: 0000000000000000 RBX: 00007f85bf3f6c90 RCX: 0000000000457569 [ 532.680355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 532.680364] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 532.680374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f85bf3f76d4 [ 532.680390] R13: 00000000004f0b72 R14: 00000000004cce48 R15: 0000000000000005 11:27:40 executing program 2 (fault-call:4 fault-nth:2): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) socketpair(0xffffffffffffffff, 0x4, 0x4, &(0x7f0000000400)={0xffffffffffffffff}) write$cgroup_type(r1, &(0x7f0000000440)='threaded\x00', 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x1000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = getpid() r5 = perf_event_open(&(0x7f0000001740)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, r4, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x28, &(0x7f0000000380)}, 0x10) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0xe17) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) socketpair(0x5, 0x3, 0x1000000000ff, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@vsock, 0xfffffffffffffef2, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/154, 0xfffffffffffffe95}], 0x1, &(0x7f0000000240)=""/105, 0x69}, 0x0) recvmsg$kcm(r7, &(0x7f0000002e80)={&(0x7f0000002b40)=@hci, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d40)=""/124, 0x7c}], 0x1, &(0x7f0000002e00)=""/79, 0x4f}, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x69) close(r8) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000002c0)='\x00') socketpair(0xb, 0x1fffffffa, 0x200000000000000, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x3f) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000100)={r10, r11}) 11:27:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="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", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@local, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f0000000140)=0xe8) 11:27:40 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) close(r0) 11:27:40 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:40 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) getpgrp(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x84}]}, &(0x7f0000f6bffb)='\a\x00\x00\x00', 0xfffffefffffffffd, 0x24a, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x48) 11:27:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) accept$unix(r3, &(0x7f0000000080), &(0x7f0000000100)=0x6e) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={r3, 0x1, 0x30, 0x81, 0x8}, &(0x7f0000001440)=0x18) r4 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000080)={0x7, 0x0, [{0x1, 0x7, 0x0, 0x0, @msi={0xffffffffffffffc1, 0x5, 0x6}}, {0x1, 0x4, 0x0, 0x0, @sint={0xfff, 0x80000001}}, {0xee, 0x7, 0x0, 0x0, @adapter={0x8, 0x6, 0xc5e4, 0x4, 0xe3cf}}, {0x3, 0x2, 0x0, 0x0, @msi={0x1000, 0x8, 0x8}}, {0x1, 0x2, 0x0, 0x0, @sint={0x0, 0x3f}}, {0x0, 0x1, 0x0, 0x0, @irqchip={0x7, 0xfffffffffffffffd}}, {0x3ff, 0x3, 0x0, 0x0, @irqchip={0x8, 0x1}}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000040)={0x3, 0xffffffffffffff9c}) sendfile(r1, r4, &(0x7f0000000000), 0x1000000000000c67) 11:27:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) close(r0) 11:27:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0xe3, 0xfffffffffffffffd, 0x8, 0xfffffffffffffffc, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000080)="d17f2bec15", &(0x7f00000001c0)='\v'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x6000000000000, 0x2, 0x9, 0x1, 0x1, 0x1f}, 0x2c) close(r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x6) 11:27:41 executing program 1: prctl$PR_GET_PDEATHSIG(0x27, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9356, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080)) 11:27:41 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000300)='/dev/dlm-control\x00', 0x2) recvfrom$packet(r4, &(0x7f0000000940)=""/178, 0xb2, 0x100, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa50f, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x909, 0x4) fchdir(r0) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000100)={0x0, 0x1000}) faccessat(r2, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1700) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:41 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000300)='/dev/dlm-control\x00', 0x2) recvfrom$packet(r4, &(0x7f0000000940)=""/178, 0xb2, 0x100, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)}, 0x20) close(r0) 11:27:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xa0840, 0x96) connect(r1, &(0x7f0000000240)=@nfc={0x27, 0x0, 0x1, 0x1}, 0xff57) r2 = getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)={0x20c, 0xd, 0x6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@generic="da56f3456d9f3078d115c23959d377570525bfc814c3677f13ce2a8683978f718aa0c6091dc964097c9a5ad38b731b88b8c6963f6c6a3b76ee5f6a0895e1471880abfa", @typed={0x8, 0x49, @pid=r2}, @nested={0x1ac, 0x41, [@typed={0xb4, 0x1c, @binary="69516a354f9ceb9d990546655b8f08087611410ecec27de018efa53299b89e8b6f7bf8850c5bc056f4f5d7cb3d6707cce8f87c3d6f8b7e7f1fc5ddb84be75462f82c0a0ccdd127656f8c6c4e586aef3d9688d85c0834cf45e8c103f7050d9729a91ae0731ad3cf895e99ef660e4b493782d0a390339f89f9b78ea5deffe2038040c4de89fb986c70771e0b1256c20fb12dde93a1ed2e784cad11d1a35dfc648c17dfb6a100ef58a0233aa40f32a7f392"}, @typed={0xdc, 0x19, @binary="ede4c1bc9ce72a548ad18e64c67dda2eea37300e58c5f18cbd54fc961efc5f95fdcf62633a65d9aac10535a360f4caf93861c408864c6227720b8cd93b3467a16cf1077a9ed9c6d2cd0ad6696dda442ebd087c7da937c5cb6edde06e82a81c536f7f159c74e3ff5ba834c845abc0a127a8c69499a2b0aa1b06a5057456b0374c912523725ff4cae6b5331fb8ce693fbe788ed670e49cec74019f1a98a564ca0d1f9349716ae5b9c065e0f1d4ebd9ebbfd453d5d428ba8db6a0cd49beeb1e1b823b8665a5dd2138a0a6ddf16c9d446d46fb0e25388e4568"}, @typed={0x8, 0x93, @pid=r3}, @typed={0x8, 0x7b, @ipv4=@rand_addr=0xffffffff00000001}, @typed={0x8, 0x62, @uid}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40}, 0xc040) r4 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r5 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r4, r5, &(0x7f0000000000), 0x1000000000000c67) 11:27:41 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:41 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0xfffffffffffffeb4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5de9e2d89d6b1c68, 0x5, 0x7, 0x9, 0x1, 0x1, 0x7e}, 0x2c) close(r1) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 11:27:41 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000300)=0x10000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) accept4$packet(r3, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000009c0)=0x14, 0x800) bind$can_raw(r3, &(0x7f0000000b00)={0x1d, r4}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0xea6) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(0xffffffffffffffff) 11:27:42 executing program 2: inotify_init1(0x80800) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x10000) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x6, 0x10000, 0x1, 0x1, 0x4, 0x9, 0x80000000000000, 0x4, 0x3f, 0x81, 0x8000, 0x3, 0x2, 0x361, 0x2, 0x21}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000840)="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", &(0x7f0000000140)="2c96dd17d732012255330b"}, 0x20) close(r2) 11:27:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000080)={0xfa10000, 0x1800000, 0x9, [], &(0x7f0000000040)={0xb90b7f, 0x1316, [], @value64=0x7c}}) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x365f, 0x7, 0x1f, 0x3f, 0x2, 0x2, 0x3, 0x5, 0x224, 0x38, 0x1d2, 0x8000, 0x3, 0x20, 0x1, 0x8, 0xff0, 0x3ff}, [{0x7, 0x5, 0x4, 0x1, 0x2, 0x81, 0x7ff, 0x8}, {0x3, 0x3, 0x3, 0x1ff, 0xfffffffffffff44b, 0xd87, 0x8, 0x4}], "081ee12cecc2d7ad47fc4171c36783d386cec6525c65f3", [[], [], [], [], [], [], [], []]}, 0x88f) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x6}}, 0x20) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000240)={0x2, 0xf9b, 0x300f, 0x4, 0x800, {0x3, 0x8}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x0, @mcast2, 0x9}, {0xa, 0x4e21, 0x1, @empty, 0x9}, r3, 0x8}}, 0x48) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000280)={0xa, {0x4, 0x5, 0x0, 0x3}}) socket$nl_crypto(0x10, 0x3, 0x15) 11:27:42 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x6bdfb243, 0x2000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:42 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = getpid() gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000000)='#eth0keyringtrusteduser{+self:\x00', 0x2, 0x108, &(0x7f0000000040)={0x6, 0x200, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0xfff, 0x3}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x4, 0x0) ioctl(r2, 0x8912, &(0x7f0000000200)="0a5cc80700315f85714070") r3 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff8, 0x4000) accept4$inet(r3, &(0x7f0000000300)={0x2, 0x0, @loopback}, &(0x7f00000003c0)=0x10, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in, @in=@loopback}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000240)=0xe8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) gettid() pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@pptp={0x18, 0x2, {0x0, @rand_addr=0xffff}}, {&(0x7f0000000480)=""/183, 0xfffffffffffffee5}, &(0x7f0000000280), 0x4c}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)="2e2f6367726f75702e6e65742f78797a300f", 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) getresuid(&(0x7f0000000380), &(0x7f00000001c0), &(0x7f0000000340)) r5 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x8000) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) prlimit64(r1, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x40000000002, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x8, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 11:27:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='nfs\x00', 0x202000, &(0x7f0000000280)='^\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) 11:27:42 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:42 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x100004, 0x2008, 0xfffffffffffffffd}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 534.649975] FAULT_INJECTION: forcing a failure. [ 534.649975] name failslab, interval 1, probability 0, space 0, times 0 [ 534.694707] CPU: 0 PID: 22432 Comm: syz-executor0 Not tainted 4.20.0-rc3+ #121 [ 534.702131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 534.711488] Call Trace: [ 534.711516] dump_stack+0x244/0x39d [ 534.711541] ? dump_stack_print_info.cold.1+0x20/0x20 [ 534.711577] should_fail.cold.4+0xa/0x17 [ 534.711610] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 534.717830] ? is_bpf_text_address+0xac/0x170 [ 534.717874] ? zap_class+0x640/0x640 [ 534.717889] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 534.717905] ? rcu_softirq_qs+0x20/0x20 [ 534.717926] ? find_held_lock+0x36/0x1c0 [ 534.749744] ? __lock_is_held+0xb5/0x140 [ 534.749773] ? perf_trace_sched_process_exec+0x860/0x860 [ 534.757904] __should_failslab+0x124/0x180 [ 534.757924] should_failslab+0x9/0x14 [ 534.757943] kmem_cache_alloc_node+0x26e/0x730 [ 534.767609] ? raw_notifier_call_chain+0x2d/0x40 [ 534.775993] ? call_netdevice_notifiers_info+0x3f/0x90 [ 534.776008] ? rollback_registered_many+0xb7f/0x1250 11:27:42 executing program 1: r0 = socket$inet6(0xa, 0x80807, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x6, &(0x7f0000000180), 0x90) [ 534.776026] ? rollback_registered+0x1e9/0x420 [ 534.786067] ? unregister_netdevice_queue+0x321/0x5e0 [ 534.786084] ? __tun_detach+0x11b8/0x15c0 [ 534.786112] ? tun_chr_close+0xe3/0x180 [ 534.786130] __alloc_skb+0x119/0x770 [ 534.786148] ? netdev_alloc_frag+0x1f0/0x1f0 [ 534.812975] ? mark_held_locks+0xc7/0x130 [ 534.812994] ? kfree+0x11e/0x230 [ 534.813009] ? kfree+0x11e/0x230 [ 534.813026] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 534.813044] ? trace_hardirqs_on+0xbd/0x310 [ 534.813063] ? __devinet_sysctl_unregister.isra.29+0x6d/0xb0 [ 534.813085] ? trace_hardirqs_off_caller+0x310/0x310 [ 534.848199] inet_netconf_notify_devconf+0xea/0x260 [ 534.853243] __devinet_sysctl_unregister.isra.29+0x87/0xb0 [ 534.858878] devinet_sysctl_unregister+0x92/0xf0 [ 534.863668] inetdev_event+0xa61/0x1340 [ 534.867652] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 534.872238] ? wpan_phy_register+0x270/0x270 [ 534.876635] ? inetdev_init+0x590/0x590 [ 534.880600] ? kasan_check_write+0x14/0x20 [ 534.884822] ? up_read+0x225/0x2c0 [ 534.888368] ? up_read_non_owner+0x100/0x100 [ 534.892769] ? netlbl_unlhsh_netdev_handler+0xbc/0x3d0 [ 534.898036] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 534.903140] ? netlbl_unlhsh_free_iface+0x700/0x700 [ 534.908403] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 534.913589] notifier_call_chain+0x17e/0x380 [ 534.918029] ? inetdev_init+0x590/0x590 [ 534.921996] ? notifier_call_chain+0x17e/0x380 [ 534.926571] ? unregister_die_notifier+0x20/0x20 [ 534.931316] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 534.936850] ? rtnl_is_locked+0xb5/0xf0 [ 534.940835] ? rtnl_trylock+0x20/0x20 [ 534.944642] raw_notifier_call_chain+0x2d/0x40 [ 534.949217] call_netdevice_notifiers_info+0x3f/0x90 [ 534.954309] rollback_registered_many+0xb7f/0x1250 [ 534.959250] ? generic_xdp_install+0x590/0x590 [ 534.963839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 534.969376] ? zap_class+0x640/0x640 [ 534.973141] ? print_usage_bug+0xc0/0xc0 [ 534.977198] ? print_usage_bug+0xc0/0xc0 [ 534.981257] ? __switch_to_asm+0x34/0x70 [ 534.985307] ? print_usage_bug+0xc0/0xc0 [ 534.989357] ? find_held_lock+0x36/0x1c0 [ 534.993408] ? mark_held_locks+0xc7/0x130 [ 534.997550] rollback_registered+0x1e9/0x420 [ 535.001952] ? lockdep_hardirqs_on+0x341/0x5b0 [ 535.006521] ? rollback_registered_many+0x1250/0x1250 [ 535.011749] ? trace_hardirqs_on+0xbd/0x310 [ 535.016088] ? linkwatch_schedule_work+0x150/0x170 [ 535.021039] ? trace_hardirqs_off_caller+0x310/0x310 [ 535.026138] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 535.031676] ? rtnl_is_locked+0xb5/0xf0 [ 535.035658] ? rtnl_trylock+0x20/0x20 [ 535.039448] ? queue_delayed_work_on+0x130/0x1f0 [ 535.044221] unregister_netdevice_queue+0x321/0x5e0 [ 535.049226] ? rollback_registered+0x420/0x420 [ 535.053806] ? linkwatch_schedule_work+0x170/0x170 [ 535.058741] ? tun_setup+0x2d0/0x2d0 [ 535.062467] ? preempt_schedule+0x4d/0x60 [ 535.066626] ? netif_set_real_num_tx_queues+0x10d/0x710 [ 535.071983] __tun_detach+0x11b8/0x15c0 [ 535.075949] ? find_held_lock+0x36/0x1c0 [ 535.080004] ? tun_attach+0x1900/0x1900 [ 535.083977] ? get_pid_task+0xd6/0x1a0 [ 535.087884] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 535.093409] ? locks_remove_posix+0x47d/0x840 [ 535.097900] ? vfs_lock_file+0xe0/0xe0 [ 535.101781] ? zap_class+0x640/0x640 [ 535.105504] ? fsnotify+0x50e/0xef0 [ 535.109131] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 535.114672] ? locks_remove_file+0x3c6/0x5c0 [ 535.119097] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 535.124624] ? ima_file_free+0x132/0x650 [ 535.128718] ? __lock_is_held+0xb5/0x140 [ 535.132785] ? __tun_detach+0x15c0/0x15c0 [ 535.136924] ? __tun_detach+0x15c0/0x15c0 [ 535.141073] tun_chr_close+0xe3/0x180 [ 535.144880] __fput+0x385/0xa30 [ 535.148206] ? get_max_files+0x20/0x20 [ 535.152108] ? trace_hardirqs_on+0xbd/0x310 [ 535.156415] ? kasan_check_read+0x11/0x20 [ 535.160598] ? task_work_run+0x1af/0x2a0 [ 535.164649] ? trace_hardirqs_off_caller+0x310/0x310 [ 535.169749] ? filp_close+0x1cd/0x250 [ 535.173541] ____fput+0x15/0x20 [ 535.176813] task_work_run+0x1e8/0x2a0 [ 535.180746] ? task_work_cancel+0x240/0x240 [ 535.185094] ? copy_fd_bitmaps+0x210/0x210 [ 535.189332] ? do_syscall_64+0x9a/0x820 [ 535.193311] exit_to_usermode_loop+0x318/0x380 [ 535.197885] ? __bpf_trace_sys_exit+0x30/0x30 [ 535.202378] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 535.207930] do_syscall_64+0x6be/0x820 [ 535.211820] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 535.217187] ? syscall_return_slowpath+0x5e0/0x5e0 [ 535.222112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.226943] ? trace_hardirqs_on_caller+0x310/0x310 [ 535.231973] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 535.237005] ? prepare_exit_to_usermode+0x291/0x3b0 [ 535.242038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 535.246890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 535.252075] RIP: 0033:0x457569 [ 535.255371] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 535.274382] RSP: 002b:00007f597ad3ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 535.282087] RAX: 0000000000000000 RBX: 00007f597ad3ac90 RCX: 0000000000457569 [ 535.289356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 11:27:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @remote, 0xf736}}, 0x4, 0x5, 0x9, 0x1, 0xa1}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r2, 0x5, 0x30}, &(0x7f0000000280)=0xc) openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000002c0)={0x40, 0x31775f59, 0x15, 0x2, 0x2, @stepwise={{0x8}, {0x0, 0x9}, {0x6, 0xb0}}}) 11:27:43 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000940)=&(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) [ 535.296621] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 535.303893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f597ad3b6d4 [ 535.311180] R13: 00000000004f0b72 R14: 00000000004cce48 R15: 0000000000000004 11:27:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"00ac730000000000ec973f820f7c4000", 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x480, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000001c0)='\v', 0x2}, 0x20) close(r0) [ 535.340148] audit: type=1400 audit(1542713263.148:95): avc: denied { getrlimit } for pid=22422 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 11:27:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) 11:27:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f0000000040)='\v'}, 0x20) close(r0) 11:27:43 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa02, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/157, 0x10ce, 0x9d}, 0x20) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xfffffffffffffffc, @empty, 0x5366}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r1}}, 0x48) 11:27:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f63670900757000620765d7a688494920c6426f432e0b0f28f01381f1c67f92b4c7a56fe5bbe42b16c15443c5f08b96b07c00cd700bc908d1d1563e4278625eb6fe31809a58e6b16b433391daadea326e74c341d8308b05dc9ca9403218690dc07e44ef77545c708fadff541ee0295b5fbe27e4d69d6ac16efa713c961348cd71ee934abe10e127441550238057d82436bcde1833778112", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c63) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000140)=""/201) rt_sigreturn() 11:27:43 executing program 1: msgsnd(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7ea65f3419"], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) msgrcv(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000b95c1cb85901822f41e2359eb6c7d8143acb2ed8905119e90e9c63cdf905aaef786942be0e477dfc402c1d2ca1e9f53d7ab417192f57abfbe8d8e64759233a0348505ca35f01d9ef6657fb1597d355c2d2b8667cd29d9c7dfc4c45ae770fa9472453e60923a0ae00da5161ad85784fbfa9cb39d9fe67513ad3db2fa68139fb9a35480983b2a2c87691cd26c9d6fd9dc1191a7ff2ebe22ad9989be7a3406d27edb1369ce12d5d176faeb07125f6cd662296ef09f05a61dacf756b9800399f5ed7"], 0x1, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6c6, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xffffffff, 0x208, 0xb6c5, 0x7fff, 0x0}, &(0x7f0000000200)=0x10) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000340)='jfs\x00', &(0x7f0000000380)='./file0\x00', 0x80000000, 0x2, &(0x7f0000000580)=[{&(0x7f00000003c0)="4b6a4d2c4359d07187c7ab33042ecb8405d504d5f5e668a8de24880aaa7fe9eb710061738806b65ce40d5a403b35642076dce3569ff09669f1871e13f48edac2281c494abe73a7c6e03d97b22c90cd435b622b5360af19975acd11cf592fb3ec4e73b60033a74a2a021585de8d54364cad5ebf9af92727e637fa1b0518d7b4286223993c50ca3a57c3527d698a7622678da6690eb3922b8fd898fb751699c49b26e8dd38", 0xa4, 0x299000000000000}, {&(0x7f0000000480)="a4b5fcb62dc54458b944b653ae56e1017490e493a4a6026d28714fe19d46aae204e715a44a6df4cb7e7c94c746e2e4a138f9ce1e4b72a422e9164947a51995c72367e4de9b19c7f917660c89b56caa4ab3c9d331ae47535f735aff0cfe1e14c29265cab7a61256531a9f47bc404e3198e3402410efff691b6b3cbdf23d281c94959adfff877bdc7ebc71b809b7c9c2bb5f2f0744ad98a90a32c7979fb205e206d9f333f941a102d7bee87d2f4fa609e488890f26067876a6e99402602f26707a273d244581cc13da6e6da788b35da5cb6a47a031af7edd66b5d35b409f", 0xdd, 0x4}], 0x20, &(0x7f0000000700)={[{@grpquota='grpquota'}], [{@fsmagic={'fsmagic'}}, {@fsmagic={'fsmagic'}}, {@euid_eq={'euid', 0x3d, r4}}, {@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r5}}, {@smackfsfloor={'smackfsfloor'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r6}}, {@permit_directio='permit_directio'}]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000300)=0x84) 11:27:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r2) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$int_out(r0, 0x2, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000100006, &(0x7f0000000100)=0x1, 0xffffffffffffff20) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x812) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xfd54) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0xff9a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) socket$packet(0x11, 0x3, 0x300) 11:27:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0xffffffff80000001, 0x8}, 0x33) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) close(r0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xfffffff, 0xb6, 0x3ff, [], &(0x7f00000000c0)={0x990a2f, 0x81, [], @value=0x3}}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) 11:27:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) fsetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="4f6e00000028000000000000000000000057a2f90f3c2018a6e9901a027466ca03e4d1332f467d2c33a6a049ce00729a1aede94471277c36765281038e7d3f0cc26092f4bc6070d2ae5c7c7150bf07b33849ead56e496a0c86f6f55869dfe6e0c73f50651d6f861badd14c7a0f4fe16b773dac913c6199b67f2e8a77d57b61633d250de558edb729c3324fc33e38233b0c5f440e40ebb318d628de16028e3f43f296c83d2044e29bff3080549b2e44117aa467f8ed22ccff4c74b1da4a4f8398d0c06c4ae0ee8a299d8267fe2b8648a606deafdaad0988580b1c984d0c598ac1c91db3ac263e4d8d"], &(0x7f0000000140)="00ac730000000000ec973f820f7c4000", 0x10, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x2000000000) close(r0) ioctl$int_in(r1, 0x5473, &(0x7f0000000040)=0x6) 11:27:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000540)="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", 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$void(r0, 0x5451) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x1000000000000c65) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000000c0), 0x17d) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4040, 0x0) 11:27:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000200)=ANY=[@ANYBLOB="fe0000007811e6b4ab5e261179ab929d72e81ea7dc92ee2574cfc4fbb4b174cab500bf116225a723ba070000000000000031fb71d49c348474d7f7d2f5aea902de3c6146f910ccef04f564537a0135a7d7e1141dff164b77eeebe65803c88357ec15104a4bbd3b1e13c2515146f136dd4f26df56b1f0a9f816fee4abf04a6339dd4222de206255b855da111a03192a6e6cef9dc5b7f784abfdbfb2d0f8b44273994ae9ccfd668f7001cfa3cd6d39554f8bc179b1e186bc74f1be0ab86e79e4b71489816c143152a26c9e31f66efe9ef99304c6248c5621e8a1c47c532ed8545d3112fadd1df81381c4930992ae41ad6ae5b36d358d03b8934c"]) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x98b7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180), &(0x7f00000000c0)='\v'}, 0xfffffffffffffe31) close(r0) 11:27:44 executing program 5: preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)=""/108, 0x7c4}, {&(0x7f0000000500)=""/65, 0x41}, {&(0x7f0000000580)=""/250, 0xfa}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="0d03bd", 0x3, 0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x28000, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYBLOB="b5000000ee0cd74c227ff3f7885ba14d17b5ff4f4f0aedef73a3991a56623dd3943db5a7e72c946911404ddc2bb351d3295791157b015680cbeb8b1c4dd4f5c460e14a60d944c84694c4de1f3c192c6b4d1b050338f11cc40000000003b4b3bb35b9bf74358ed3d67b8024882a1567a764b6bc87ced81043d123be95788afb5c127d6d54a7c9d50200000090b2b5871c94d565f74d708e8bc24661f78342e0215993e5396a4d10d05064283685240c4dd0dd"], &(0x7f0000000140)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:27:44 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0xb3, 0x7, 0x5}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:44 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x2, 0x2) write$P9_RFSYNC(r0, &(0x7f0000000340)={0x7, 0x33, 0x1}, 0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="711200a5133314e941045617a03e27d1fe7ffcbcba382b37bccf"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/kvm\x00', 0xfffffffffffffffd, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000140)={r2, 0x10}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x600, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:44 executing program 1: syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) mkdir(&(0x7f00000004c0)='./file0/file0\x00', 0x80) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000500)='/dev/midi#\x00', 0x0, 0x200000) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x20000) r4 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x97b, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000180)=""/7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x88000, 0x0) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() r8 = geteuid() mount$fuse(0x0, &(0x7f0000000440)='./file0/file1\x00', &(0x7f0000000540)='fuse\x00', 0x20000, &(0x7f0000000680)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@appraise_type='appraise_type=imasig'}, {@subj_user={'subj_user', 0x3d, '/dev/sg#\x00'}}, {@uid_lt={'uid<', r8}}]}}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000480)=0x4) rmdir(&(0x7f0000001540)='./file0/file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ppoll(&(0x7f00000001c0)=[{r9}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) umount2(&(0x7f0000000340)='./file0\x00', 0x0) r10 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r10, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) accept4$llc(r4, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000400)=0x10, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e23, @multicast2}], 0x20) 11:27:44 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="a96011469166afec5bead8beefab3fc1a8980e3221415793f83824a45252525f08b80a92925da7dc567d79a6f871ddb078fb4177506dd758c11abf479bafa823ec5823fc655e97874328d6db606321aeb772a0f188a6b6d8d2f05396161b6e88dbb5a53d921f6332ba4dbeb1bdee4a7575ba2f2d272fd662f3a497425a3a041c"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:44 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000500)={r1, 0xb3, "9031ba045180c102f210fde8795689e99a08674bf8b04b3a7b02a7a802d33d66636a0a4a774c5dba2015d090e5cac4676701c487fd2656a295be77aa573a2da99ecf59840037341024fb49fccc6d5556d2d016c73e80c761d3700fb55baac568ba9112a3b99f52ae5665a1cc5c6b5585babafe35aea0630b1547a08bbba20f950e907fbbd52e7a7067c01dcecc484ba3f4d4a2d664ee56f70daf401f19fb1508816a3debf1f3f6032959477924c40c0b2a8d29"}, &(0x7f00000002c0)=0xbb) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80004, 0x0) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000400)="a885879d387426a5a7a7e47fd4a60d736da7f32af7d4e0a929feddcbbf89c8d550e3f45bac591a91be20b1d66fa57aa42a6f6ca85ef6d9b43d73906fd22168893166b6c2fc321b8b8fba2cc4ff169fac240c15212e57f3da40733a26b811ecf002ce65e75caa1bb1a600bd0babd749fede5eb66238bb95ff0dfc9f37052aab860b9e5a40c3ceebce2f0648ea45492a11b01be49fe6a26d82251ed080137ec426ea98d8df7db7ca3d097e3fc068aa40fb2d308335ae7c388e112409edabb5b930527d48e8") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x30, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={r3, 0xfffffffffffffc01}, &(0x7f00000001c0)=0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000000), 0x1000000000000c67) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) 11:27:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) close(r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 536.871786] Unknown ioctl 35299 [ 536.880226] Unknown ioctl 35077 [ 536.897636] Unknown ioctl 35299 11:27:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)="9fe74800c68111417374617400", 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"6272696467653102000700", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xe, 0x1, 0x4, 0x5, 0x4, 0xffffffffffffffff, 0x1}, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000180)="4c8728e248a63fad0a1f4a47e083b92072ea622e1bceb094f1018ead87161ad27e00071bbddd060716504ef4f11496f91d8e2be7b8c9b62ca1", &(0x7f0000000240)='\v'}, 0xa0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000140)={0x2000000000000000, 0x6003, 0x3640, 0x5}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x22001, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x9, 0xe4}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0x52}, 0x8) 11:27:44 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket(0xc, 0x2000000000000804, 0x80000000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000001c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e00200e87e0000010000000000000000"], 0x1) r3 = dup3(r1, r2, 0x80000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='em0self/cgroup\x00') 11:27:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000140), 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) write$selinux_user(r2, &(0x7f0000000040)={'system_u:object_r:dmesg_exec_t:s0', 0x20, 'root\x00'}, 0x27) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) close(r1) 11:27:45 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x20002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) r3 = getpid() write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, 0x6, 0x2, 0x8001}, 0xa) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=r3) readahead(r2, 0xfffffffffffffffe, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r5, r6, &(0x7f0000000240), 0x1000000000000c67) 11:27:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ae146da60f297347b637820f7c4000", 0xc1fd}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) process_vm_readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/111, 0x6f}, {&(0x7f00000007c0)=""/20, 0x14}, {&(0x7f0000000800)=""/143, 0x8f}], 0x9, &(0x7f0000000dc0)=[{&(0x7f0000000980)=""/139, 0x8b}, {&(0x7f0000000a40)=""/194, 0xc2}, {&(0x7f0000000b40)=""/26, 0x1a}, {&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f0000000c80)=""/173, 0xad}, {&(0x7f0000000d40)=""/105, 0x69}], 0x6, 0x0) r2 = dup2(r0, r0) r3 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xc3b7, 0x40) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000001000)={0x1, 0xfffffffffffffbff}, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/ppp\x00', 0x200000, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x80400, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x482a00, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000f80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000f40)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000fc0)={0xb, 0x10, 0xfa00, {&(0x7f0000000e80), r6, 0x3}}, 0x18) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000002c0)=""/181) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) ftruncate(r0, 0x7fff) r2 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(r2, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(r1, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="76151945e553fd3bfe1a62bd33e63c7cf28e8b66edd69a4753c41402028cd7438cddaa9a6f9fe5ab3b2804e1c07a80948d2ed21853aa663c199a30"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x200000000000000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000940)={0xed, 0x9, 0xffff, 0x6, 0xc, 0x6, 0x4659}, 0xc) 11:27:45 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x40) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000040)={0x5, 0x1, 0x1657}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000002c0)=0xbc17e0c, 0x4) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000004540)={0x0, 0x0, 0x0, 0x8, 0x0, 0x47}) socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r3 = socket(0x0, 0x0, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) write$FUSE_ENTRY(r2, &(0x7f00000004c0)={0x90, 0x0, 0x2, {0x1, 0x2, 0x0, 0xff, 0x22, 0x8, {0x2, 0x7, 0x1001, 0x101, 0x7, 0x0, 0x1, 0x3, 0x1, 0x3ff, 0x101, r4, r5, 0x35e8, 0x4}}}, 0x90) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)="6d656dde4c916e1a260605dc19d090ff07", 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000480)={"73797a6b616c6c65723000000500"}) close(0xffffffffffffffff) 11:27:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x2100, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0xffff, 0x73576f77, 0x3, @discrete={0x5, 0x80000001}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0xa8b9, @mcast2, 0x2}}, 0x131, 0x1, 0x80, 0x3, 0xffffffffffffff4d}, &(0x7f0000000080)=0x98) prctl$PR_SET_TSC(0x1a, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @multicast1}}, [0x3, 0x400000000000000, 0x5, 0xfff, 0xfffffffffffffff8, 0x7, 0x10001, 0x3, 0x2, 0x5, 0x336, 0x1, 0xffffffffffff8001, 0x7, 0x5]}, &(0x7f00000000c0)=0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:45 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0xffffffffffffffff, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(r2, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/209, 0xd1}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000240)=""/82, 0x52}], 0x6, &(0x7f0000002580)=""/4096, 0x1000, 0x6}, 0x6}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003580)=""/104, 0x68}], 0x1, &(0x7f0000003600)=""/67, 0x43, 0x8}, 0xfffffffffffffff7}, {{&(0x7f0000003680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004700)=""/84, 0x54, 0x2}, 0x1ff}], 0x3, 0x2100, &(0x7f0000004840)={0x0, 0x989680}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000004880), 0x4) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) bind$rds(r3, &(0x7f00000048c0)={0x2, 0x4e24, @rand_addr=0xa14}, 0x10) 11:27:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x7c, 0x0, [0x80040000010]}) 11:27:45 executing program 5: socketpair$unix(0x1, 0x20000000003, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000001, 0x90000) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x0, 0x7f}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x20000040, 0x0, 0x0, 0x20000040, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x78) 11:27:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r3) flock(r1, 0x8) sendfile(r0, r1, &(0x7f0000000000), 0x1000000000000c67) 11:27:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000deff00ecb13f820f7c4002", 0xc1fe}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0xffffffff80000000, 0x6}, 'port0\x00', 0x8, 0xa0001, 0x9640, 0x9, 0x3, 0x100000000, 0x1, 0x0, 0x1, 0x1f}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x20e, 0x0, 0x1, 0x8, 0x0, r1}, 0xfffffd4f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x15b) close(r0) 11:27:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000), &(0x7f0000000300)=0x4) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 11:27:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', r3}) r4 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000000000), 0x1000000000000c67) 11:27:45 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000300)="d45b4185174c954de1f39361d4fd85a8e93b53af1e274a015569e4b925a3e831dd512b7bf6fea41d93591be9", &(0x7f0000000b00)="90833fd4ed68f3a8de8b7c28f5c38512c0032080b98d005e39d5635d270d7e518cbf59414c95f5cd2d9ea739c6a36c4096c30ee505a3eee8f48e87a036ac868a1c340f7492e3019c9c47ea5f03fa064eb4e9b24396a8f5ff4520628d83a7b32bd196441353da00350dfe5ddb5d39b44534a2fb9225eab1c38f9212aa423a151b7861170f30a64f66c4b8eb9e0a714aad1f9aa1ecab2c25f23949b9b09d916e42dc5fab90aab63e07509884d8d12926825c01125e7604cfaefff7fa44f5c8fba51358f7c7d1655ef5e16e682f2d672a3a17276744f90fdcef062cd34ceaa5e7ffafa57a53b263c8c4908f584401", 0x2}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000ec0)={0x0, 0x9}, &(0x7f0000000fc0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001000)={0x0, 0xfbf}, &(0x7f0000001040)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000011c0)=[{&(0x7f0000000940)=@in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @local}, 0x81}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000c00)="3f607eb5dd6f0403761868038b8cfd702fb0ccb2fed98fef2fd24aabaa0922a5c5efd60585fb1fe8d33cf2ca86ba986aba7159b001031d49ee72378f3e2317fd08db8c2c3f204043659e2acc9eb5878874a5522ad14225f253e0733b77768e986ff47d3b6c7240a6fdeb1c7ea8e3d140eda23cda222d3bec03b20f63d7d6357e3f5892fabee3223b5647135b4d632350d14b1d41dc98b3e5859a04e2d44b1207b1ddafff2b11ba98a405710dfd9d41a9a63406d0e8a52a94ac801ccd60d2bca96eeed2227bc5769fa57f6bbca115676f869f5b87e75bdf952610f20aaa7e2ac4819f96c5249107f628c855b36bdc8d792c1fe92cde", 0xf5}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000980)="f213fa89152f759a1f8eb754433307387243f518c508ae96b2ed7d2092bd8e075ad0edfeea803e8136268598e2b5f97f4dbbfa1695dab376bf982dcbb3095003c0dbe6a49afd77dfce13180a94c5d21a0253094008b714562ec905c9c9bf45", 0x5f}, {&(0x7f0000000d00)="6d6c50b0ac617d46b3a679238fa1b49548de3ea401b44033979b2620c92352c3cf3aeecef590238defc3edb3ad43b40543a9347cbb0528aa6f81dac2e6e4df85f01d67a7943f9f7eb68cbe666d8370b8", 0x50}], 0x4, &(0x7f00000022c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x0, 0x100, 0x400, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x6000000000000000, 0x7f, 0x5, 0x4}}, @dstaddrv6={0x20}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8206, 0x7ff, 0x4, r6}}, @init={0x18, 0x84, 0x0, {0x400, 0x3, 0x6, 0x7fffffff}}], 0xf0, 0x4000040}], 0x1, 0x40) 11:27:45 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4003, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:46 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0xffffffffffffffff, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(r2, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:46 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2000003) ioctl(r0, 0x1000008913, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0xffffffffffffffc5) sendto$inet(r1, &(0x7f0000000200), 0xffffffffffffffc3, 0x2000800d, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x14, 0x7000028, 0x4, 0xf401, 0x14280000000000]}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'filmer\x00'}, &(0x7f0000000000)=0x78) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x389756b1353686c0, 0x120, 0x0, 0x19c) 11:27:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x7fff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = dup(r0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_proto_private(r2, 0xffffffffffffffff, &(0x7f0000000040)="4828f79f7bbafff07a99d564adf397db8e69d8e43eceab3ee5508d9069ad2e8860b007d7fc9d5eb2886bc79801e268e246874b0c786bef035cfbcc4b65241f54889379c4cf5f644725686628acebdbca81b988477fb3a16360ec479c") close(r0) sched_yield() 11:27:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @dev}, &(0x7f0000000080)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@rand_addr=0xfffffffffffffeff, @in6=@local, 0x4e20, 0x3f, 0x4e20, 0x5, 0xa, 0xa0, 0x20, 0x0, r2, r3}, {0x401, 0x4, 0xfffffffffffffffb, 0x7ff, 0x3, 0x3, 0x1, 0x100}, {0x2, 0x1, 0x200}, 0x7ff, 0x6e6bbc, 0x2, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d2, 0xff}, 0x2, @in=@multicast1, 0x3502, 0x4, 0x3, 0x5, 0x6, 0x2, 0x7fffffff}}, 0xe8) r4 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000000000), 0x1000000000000c67) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x7f, @multicast2, 0x4e22, 0x4, 'nq\x00', 0x2c, 0x5, 0x46}, 0x2c) 11:27:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r0) 11:27:46 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x16, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x8000, 0x0) accept$alg(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) io_setup(0x6339, &(0x7f0000000300)=0x0) io_destroy(r4) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="584dd35ed6a50e0000001df0eb8b477876533cb300000006e50b70ec6998147037"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:46 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000300)="d45b4185174c954de1f39361d4fd85a8e93b53af1e274a015569e4b925a3e831dd512b7bf6fea41d93591be9", &(0x7f0000000b00)="90833fd4ed68f3a8de8b7c28f5c38512c0032080b98d005e39d5635d270d7e518cbf59414c95f5cd2d9ea739c6a36c4096c30ee505a3eee8f48e87a036ac868a1c340f7492e3019c9c47ea5f03fa064eb4e9b24396a8f5ff4520628d83a7b32bd196441353da00350dfe5ddb5d39b44534a2fb9225eab1c38f9212aa423a151b7861170f30a64f66c4b8eb9e0a714aad1f9aa1ecab2c25f23949b9b09d916e42dc5fab90aab63e07509884d8d12926825c01125e7604cfaefff7fa44f5c8fba51358f7c7d1655ef5e16e682f2d672a3a17276744f90fdcef062cd34ceaa5e7ffafa57a53b263c8c4908f584401", 0x2}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000ec0)={0x0, 0x9}, &(0x7f0000000fc0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001000)={0x0, 0xfbf}, &(0x7f0000001040)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000011c0)=[{&(0x7f0000000940)=@in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @local}, 0x81}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000c00)="3f607eb5dd6f0403761868038b8cfd702fb0ccb2fed98fef2fd24aabaa0922a5c5efd60585fb1fe8d33cf2ca86ba986aba7159b001031d49ee72378f3e2317fd08db8c2c3f204043659e2acc9eb5878874a5522ad14225f253e0733b77768e986ff47d3b6c7240a6fdeb1c7ea8e3d140eda23cda222d3bec03b20f63d7d6357e3f5892fabee3223b5647135b4d632350d14b1d41dc98b3e5859a04e2d44b1207b1ddafff2b11ba98a405710dfd9d41a9a63406d0e8a52a94ac801ccd60d2bca96eeed2227bc5769fa57f6bbca115676f869f5b87e75bdf952610f20aaa7e2ac4819f96c5249107f628c855b36bdc8d792c1fe92cde", 0xf5}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000980)="f213fa89152f759a1f8eb754433307387243f518c508ae96b2ed7d2092bd8e075ad0edfeea803e8136268598e2b5f97f4dbbfa1695dab376bf982dcbb3095003c0dbe6a49afd77dfce13180a94c5d21a0253094008b714562ec905c9c9bf45", 0x5f}, {&(0x7f0000000d00)="6d6c50b0ac617d46b3a679238fa1b49548de3ea401b44033979b2620c92352c3cf3aeecef590238defc3edb3ad43b40543a9347cbb0528aa6f81dac2e6e4df85f01d67a7943f9f7eb68cbe666d8370b8", 0x50}], 0x4, &(0x7f00000022c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x0, 0x100, 0x400, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x6000000000000000, 0x7f, 0x5, 0x4}}, @dstaddrv6={0x20}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8206, 0x7ff, 0x4, r6}}, @init={0x18, 0x84, 0x0, {0x400, 0x3, 0x6, 0x7fffffff}}], 0xf0, 0x4000040}], 0x1, 0x40) 11:27:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") syz_emit_ethernet(0xfffffffffffffe34, &(0x7f0000000000)={@remote, @broadcast, [{[], {0x8100, 0xcff9, 0x3}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4305, 0x8}}}}}, 0x0) 11:27:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1b1e00002200010000000000000800000200000004000300"], 0x18}}, 0x0) 11:27:46 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe1, 0x7, 0x1, 0x3, 0x0, 0x10001, 0x3f, 0x1, 0x2, 0x2, 0x0, 0x10001, 0x81, 0x5, 0x1, 0x1c}}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000040)=""/167) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) close(r1) 11:27:46 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x2, 0x4) socketpair$inet(0x2, 0x0, 0x8001, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept(r2, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000140)=0x80) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x0, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x81, 0x40000) connect$rds(r3, &(0x7f00000004c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000340)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x7, 0xcc0}, 0xc) getpeername$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f00000002c0)=0x1c) kexec_load(0x201ef1c0, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1d710b000, 0x1000000}], 0xc0b1102000000000) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = socket$inet6(0xa, 0x803, 0x3) ioctl(r5, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x1, 0x4) 11:27:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x80) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x800, {{0x2, 0x4e23, @multicast1}}}, 0x88) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000004c0)={r3, 0x80000, r1}) r4 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) r6 = getegid() fchown(r1, r5, r6) r7 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r4, r7, &(0x7f0000000000), 0x1000000000000c67) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000400)=0x4) 11:27:46 executing program 0: socketpair(0xd, 0x3, 0x81c6, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000180)={0x6, 0x7, 0x3, 0x6, 0x3, 0x6}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r2) 11:27:46 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000300)="d45b4185174c954de1f39361d4fd85a8e93b53af1e274a015569e4b925a3e831dd512b7bf6fea41d93591be9", &(0x7f0000000b00)="90833fd4ed68f3a8de8b7c28f5c38512c0032080b98d005e39d5635d270d7e518cbf59414c95f5cd2d9ea739c6a36c4096c30ee505a3eee8f48e87a036ac868a1c340f7492e3019c9c47ea5f03fa064eb4e9b24396a8f5ff4520628d83a7b32bd196441353da00350dfe5ddb5d39b44534a2fb9225eab1c38f9212aa423a151b7861170f30a64f66c4b8eb9e0a714aad1f9aa1ecab2c25f23949b9b09d916e42dc5fab90aab63e07509884d8d12926825c01125e7604cfaefff7fa44f5c8fba51358f7c7d1655ef5e16e682f2d672a3a17276744f90fdcef062cd34ceaa5e7ffafa57a53b263c8c4908f584401", 0x2}, 0x20) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000ec0)={0x0, 0x9}, &(0x7f0000000fc0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000001000)={0x0, 0xfbf}, &(0x7f0000001040)=0x8) sendmmsg$inet_sctp(r2, &(0x7f00000011c0)=[{&(0x7f0000000940)=@in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @local}, 0x81}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000c00)="3f607eb5dd6f0403761868038b8cfd702fb0ccb2fed98fef2fd24aabaa0922a5c5efd60585fb1fe8d33cf2ca86ba986aba7159b001031d49ee72378f3e2317fd08db8c2c3f204043659e2acc9eb5878874a5522ad14225f253e0733b77768e986ff47d3b6c7240a6fdeb1c7ea8e3d140eda23cda222d3bec03b20f63d7d6357e3f5892fabee3223b5647135b4d632350d14b1d41dc98b3e5859a04e2d44b1207b1ddafff2b11ba98a405710dfd9d41a9a63406d0e8a52a94ac801ccd60d2bca96eeed2227bc5769fa57f6bbca115676f869f5b87e75bdf952610f20aaa7e2ac4819f96c5249107f628c855b36bdc8d792c1fe92cde", 0xf5}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000980)="f213fa89152f759a1f8eb754433307387243f518c508ae96b2ed7d2092bd8e075ad0edfeea803e8136268598e2b5f97f4dbbfa1695dab376bf982dcbb3095003c0dbe6a49afd77dfce13180a94c5d21a0253094008b714562ec905c9c9bf45", 0x5f}, {&(0x7f0000000d00)="6d6c50b0ac617d46b3a679238fa1b49548de3ea401b44033979b2620c92352c3cf3aeecef590238defc3edb3ad43b40543a9347cbb0528aa6f81dac2e6e4df85f01d67a7943f9f7eb68cbe666d8370b8", 0x50}], 0x4, &(0x7f00000022c0)=[@sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x0, 0x100, 0x400, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @init={0x18, 0x84, 0x0, {0x6000000000000000, 0x7f, 0x5, 0x4}}, @dstaddrv6={0x20}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8206, 0x7ff, 0x4, r6}}, @init={0x18, 0x84, 0x0, {0x400, 0x3, 0x6, 0x7fffffff}}], 0xf0, 0x4000040}], 0x1, 0x40) 11:27:46 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = syz_open_dev$usb(&(0x7f0000000940)='/dev/bus/usb/00#/00#\x00', 0x3, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e23, 0xf8, @mcast1, 0xfffffffffffffff8}}}, &(0x7f0000000980)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000bc0)={r2, @in={{0x2, 0x4e21, @broadcast}}, [0x2, 0xfff, 0x9, 0xbbfe, 0x100000000, 0x1, 0x661f11b7, 0x5, 0x7, 0xffffffffffffffe0, 0x3, 0x5, 0x81, 0x200]}, &(0x7f00000009c0)=0x100) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="ae62cef2d891e81c5e775760d5ae9f0079d8fae90cab8d3e4153b108994c000000000100000071121787274853081b2218e3fece8355c578836b58af8ec956f8b17c6f5744c9926941954ec48a"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x600, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:46 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000140)=""/119, &(0x7f00000001c0)=0x77) r2 = openat$cgroup_int(r1, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x3ff}, 0x8) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x6, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x5, 0x3, [0xfff, 0xd6, 0x400]}, &(0x7f0000000080)=0xe) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x4}, 0x8) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000280)=0x20, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x2, &(0x7f0000000140)='^\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) rt_tgsigqueueinfo(r4, r5, 0x15, &(0x7f0000000240)={0xc, 0x6, 0x3, 0x9}) 11:27:47 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x16, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x8000, 0x0) accept$alg(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) io_setup(0x6339, &(0x7f0000000300)=0x0) io_destroy(r4) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="584dd35ed6a50e0000001df0eb8b477876533cb300000006e50b70ec6998147037"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:47 executing program 5: lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='security.ke{ringmd5sum\x00'], &(0x7f0000000080)='*em1\x00', 0x5, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003480)=[{{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000002700), 0x0, &(0x7f00000027c0)=""/243, 0xf3, 0xffffffffffffffff}}], 0x1, 0x10040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = add_key$user(&(0x7f0000001300)='user\x00', &(0x7f0000001340)={'syz', 0x2}, &(0x7f0000001380)="eb9d6303fc363a522a48d706bbb9fd52bda2fc53faa3e04b826034875742a01508b52900b992b931055f131c7d1c684f2f5b48a54e347a7862e781735a56bead2dd45b879c453a0316190bf7e520daa347904af46eb09e50c04de94073a4ed29a1e626f57db894d17fa1cbffe677f5467d2a6728f7878e2361cb093af4f0fb609c9824b499c0f3996ff4445792cb7691ed54d2ed630f6dcd4987ea8a2bb14f2a6b5a5f5ab6d150276659387594ba6d43516dcf17c84dfbd2330d1a8cbbb992182047", 0xc2, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f0000001480)='keyring\x00', &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r3, 0x4, r4) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000140)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40100, 0x0) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_default\x00', &(0x7f0000000300)=""/4096, 0x1000) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000001c0)) tkill(r2, 0x1000000000016) 11:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) 11:27:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8, 0x0, r2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)='\x00'}, 0x20) close(r0) 11:27:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:47 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="71e67a15cd", 0x5) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x4, 0x4) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000004e40)=[{{&(0x7f00000002c0)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/12, 0xc}], 0x1}}], 0x1, 0x0, 0x0) 11:27:47 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000180)={0x0, {}, 0x441, 0xffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='7/cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000000000), 0x1000000000000c67) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000100)=0x5) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{}, {}]}) 11:27:47 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b00)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@multicast1, @in=@multicast2, 0x4e21, 0x0, 0x4e23, 0x100000001, 0xa, 0xa0, 0x80, 0x3b, r3, r4}, {0x80, 0x9, 0x4, 0xffffffff, 0xad0d, 0x80000000, 0xff, 0x1f}, {0xfa5, 0x1, 0x9, 0x6}, 0x100, 0x6e6bb6, 0x0, 0x1, 0x1}, {{@in=@remote, 0x4d2, 0xff}, 0xa, @in, 0x0, 0x0, 0x1, 0x6, 0x7, 0x8, 0x3}}, 0xe8) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:47 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8000, 0x4, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000280)="2adb05dcc4f0dc3e1c73a1115fb289a3b3fe22f6e2049a2d7e93f5a0ac9811c1aa9edbefdfa26717a5759e0814467e9a298929a7ae87f6958290e11dde1b2e9c6c839a386164766e3522e555a979713c34cc34a2a712d536a87438d43ae597ff789a", &(0x7f00000001c0)='\v'}, 0x20) close(r1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0xa0000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffffffffffff8000}, &(0x7f00000000c0)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x1f, 0x101, 0x4, 0x7, 0x2, 0x1, 0x6}, 0x2c) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000140)={r4, 0x6, 0x1db}, 0x8) 11:27:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f32f6e927356367", 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x1000000000000c67) 11:27:47 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)) 11:27:47 executing program 1: r0 = socket$inet6(0x10, 0x100080002, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f0000000000)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a6007b200a84302910000003900090023000c00020000001b0005000b00fc000000c78b80082314e9030b9d566885b16732009b84e7b1df136ef75afb0000000000000000", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='irlan0\x00') socket$can_raw(0x1d, 0x3, 0x1) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) 11:27:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) socketpair$inet6(0xa, 0x3, 0x99, &(0x7f00000001c0)={0xffffffffffffffff}) accept4(0xffffffffffffffff, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x80, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@mcast2, 0x6, r2}) r3 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000440)='/dev/dmmidi#\x00', 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="fc842c26878a62f9114ddc50424c285573ff46fde7a3d7b7c4d6dfe406fd01f6f8ab9bfb20ec849c943ff92b27675b86e99deff417d06c1a6423ad060142a326611fb0a9007882f23ba4ed929e3cd348dd430d8936a3a55d24", 0x59, r4) sendfile(r0, r3, &(0x7f0000000000), 0x1000000000000c67) 11:27:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) [ 540.144271] hfsplus: session requires an argument [ 540.162413] hfsplus: unable to parse mount options [ 540.181006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.187603] IPv6: NLM_F_CREATE should be set when creating new route [ 540.194171] IPv6: NLM_F_CREATE should be set when creating new route [ 540.237324] hfsplus: session requires an argument 11:27:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)="4c6f2e7374618700", 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000000), 0x1000000000000c67) 11:27:48 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x538b, 0x6}, 0xfffffffffffffe0a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) [ 540.274974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 540.288374] hfsplus: unable to parse mount options 11:27:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@rand_addr, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x7}, [{0x2, 0x4, r1}, {0x2, 0x1, r2}, {0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x5, r5}, {0x2, 0x4, r6}], {0x4, 0x6}, [{0x8, 0x4, r7}, {0x8, 0x1, r8}, {0x8, 0x4, r9}], {0x10, 0x2}, {0x20, 0x7}}, 0x6c, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x80, 0x0) getsockopt$inet_mreqn(r11, 0x0, 0x20, &(0x7f0000000a40)={@multicast1, @multicast1}, &(0x7f0000000a80)=0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r10, &(0x7f0000000980)="4167883e52efe4d6db15dddf91fbf34fcbf24e6d60eb9275b695adb7ddd55cdac2ed3a1dff1597932b950538b4a5f175822fe448069378a2a8ad455b4d90dce67be40cb0886b2e38d25eccf3bfc0f60785e3b0ca2280eb41a2c1cf229ce2a5d4abf0573bb2f69bfbe9b6554430bf8af0272891c25716", &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:48 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)) 11:27:48 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(r2, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(r0, 0xfffffffbfffffffd, 0x4, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000340)={0x1f, 0x2, 0x1f, 0x4, 0x9}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x8) 11:27:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/164, 0xa4}], 0x1, &(0x7f00000006c0)=""/200, 0xc8}, 0x0) accept$alg(r2, 0x0, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000180), 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r0, &(0x7f00000001c0), 0x288, 0x400001) 11:27:48 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)="2e2f63670600000000", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000340)="696f2e6d617800e3c6a1bc1694706052fb71636dab87f6b67931756f4718d4c82a523684fbfb553c6430fbc7b94142e83351f1daed56ac269c9286207493b4a58dbdb53c1a90a355b97bba99df289a25ef0e4f35cdbfe70a13c32b283c02837c5330ed0f393ac8b5a0220078e91fe9ee17882519e39d9d7c502cb52b84aa1c5a64b1666adec7f0d844af01018e958358b9f54ab00b0f43d38e9de11e3a217ca325d2404d1bf3fef194ff6c7e18ed", 0x2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x3, 0x2f, &(0x7f00000000c0)="e14f13d0a55b84ad7b6dec8167af21410b86babc973b89f6979bed279b27fd2b444ce7f09399421d7cbe0b51f39cd2"}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0x7fffffff, 0x9, 0x3}) r3 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) write$apparmor_exec(r2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x7) r4 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r4, &(0x7f0000000000), 0x1000000000000c67) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f00000001c0)=0x1, 0x4) [ 540.648479] hfsplus: session requires an argument 11:27:48 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000940)='/dev/mixer\x00', 0x200, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000980)={0x7, 0x7b, 0x2}, 0x7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xfb) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="a7bead720523f677f9b55a315b838feeb4c856d5c8de5caf9e96c6bdfbd1a7e3274d47e012218ee75640965c678dcbb585b29c8d2cd03d3e90474a4b4d6f44375217670066a0e8325c"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x80100, 0x0) close(r1) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x2000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x7ff, 0x4) 11:27:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x33c) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x10) [ 540.669260] hfsplus: unable to parse mount options 11:27:48 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x60, &(0x7f0000000000)={0x0, @remote, 0x0, 0x0, 'dh\x00', 0x0, 0x3}, 0x2c) 11:27:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0\x00', 0x4000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:48 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)) 11:27:48 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x420000, 0x0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x101, 0x401) ioctl$TCFLSH(r1, 0x80045440, 0x709000) [ 541.007161] hfsplus: session requires an argument 11:27:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r0, 0x89f4, &(0x7f0000000040)={'sit0\x00', @ifru_ivalue}) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x6, 0x400) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) 11:27:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) close(r0) 11:27:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) close(r0) [ 541.039678] hfsplus: unable to parse mount options 11:27:49 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)) 11:27:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000680)={0x2, 0x0, @loopback}, 0x1a) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote, [0x8000a0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x1a4}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}], 0x6}}], 0x48}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000180)={0x0, @speck128, 0x2, "d758ffe26af551a1"}) 11:27:49 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:49 executing program 3: fanotify_mark(0xffffffffffffffff, 0x111, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="2e2f66692e65318c00") perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75842e7304007400", 0x2761, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:27:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 541.386294] rdma_op 0000000072970cff conn xmit_rdma (null) [ 541.386845] hfsplus: session requires an argument [ 541.411546] rdma_op 0000000086a8f3b4 conn xmit_rdma (null) 11:27:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac730000000000ec973f820f7c4000", 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 541.440820] hfsplus: unable to parse mount options 11:27:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0x40086602, &(0x7f0000000140)={&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)) 11:27:49 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:49 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$9p(r2, &(0x7f0000000080)="b8fca638dbfa44fcddb5b06a2cdc0117ce8045360c86ed41f42339156f2c1f4d29f22387caa719aad70d", 0x2a) write$9p(r2, &(0x7f00000000c0)="b743a20024c7fb6c38d001e93d5d34543d30c9d218f2c711b95ba6b2c90058b3038c3e58579cfa20ba6f934748e52e0dc3a1323cbd286729fcb79197f76f7e50864467fb7e3cc0eadca7aeb174ecf8bfc2a82c994036bff7a3cc973a565cc5ceee80ed400fefcbe3f515156cd915803eeee8a684d9611eedbd27d0", 0x7b) ioctl$SG_GET_PACK_ID(r2, 0x227d, &(0x7f0000000180)) 11:27:49 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xa0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)) 11:27:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x80, 0x0) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000004c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000e40)=0xe8) getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ec0)={0xffffffffffffffff, r0, 0x0, 0x2, &(0x7f0000000e80)='^\x00', 0xffffffffffffffff}, 0x30) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[@ANYBLOB="3b080cb8a35d"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000006340)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1e12, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x18a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x20000) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040)=0xffffffff, 0xc000, 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @reserved}, 0x10) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0x2) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00010, 0x1, &(0x7f00000000c0)=0x37000000, 0x1, 0x2000000000002) accept4$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f00)={{{@in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000001000)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) [ 541.780642] hfsplus: session requires an argument 11:27:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x10000002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x10000, 0x4, 0xb}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x4}, 0x1) close(r0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1f, 0xd37f415d45b4d81b) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2a414, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) [ 541.824030] hfsplus: unable to parse mount options 11:27:49 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000940)=0x2) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="7dc49218284fbcb2635e735b47bd394771b59ac354707b7b2a08d66786620e6ceb57465ae42d4298ad66a43157904a"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:49 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:49 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) [ 542.206943] hfsplus: session requires an argument 11:27:50 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$void(r1, 0xc0045878) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'syz_tun\x00'}) [ 542.238385] hfsplus: unable to parse mount options 11:27:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x4, 0x9}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000040)={0x8000, 0x31303553, 0x3, 0x81, 0x2, @stepwise={{0x5, 0x9}, {0x0, 0x8}, {0x1ff, 0x4}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) 11:27:50 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000540)={0x20, 0x5, 0x1000}, 0x4) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:50 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000002c0), 0xc, &(0x7f0000023ff0)={&(0x7f0000000280)={0x14, 0x20, 0xaff, 0x0, 0x0, {0x3803}}, 0x14}}, 0x0) 11:27:50 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) syz_open_procfs(0x0, &(0x7f0000000200)="0000000000000000ff000000000000") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_pts(0xffffffffffffffff, 0x488000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) r3 = dup2(r1, r2) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0xfffffffffffffedf) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x50) getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000500)=@random={'os2.', 'bdev*\'*\x00'}, &(0x7f0000000600)=""/162, 0xa2) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)="988b55c7", 0xffffffffffffffb9) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000005c0)={{r4, r5/1000+10000}, {0x77359400}}) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x3fffffff}}, 0x10) [ 542.561141] hfsplus: session requires an argument [ 542.566042] hfsplus: unable to parse mount options 11:27:50 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) [ 542.875666] hfsplus: session requires an argument [ 542.881229] hfsplus: unable to parse mount options 11:27:50 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000240)={0x4000000000000002, "01099d5809b43d650802cae9d9cf560a0a777e37d8d130b7da2d19ccd4d1ff54", 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="0fafd728", 0x4, r0}, 0x68) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x7d, 0x4, 0x3edc, 0x20, 0xffffffffffffffff, 0x6}, 0x2c) [ 543.638891] device bridge_slave_1 left promiscuous mode [ 543.644420] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.699167] device bridge_slave_0 left promiscuous mode [ 543.704660] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.771576] team0 (unregistering): Port device team_slave_1 removed [ 543.781797] team0 (unregistering): Port device team_slave_0 removed [ 543.793265] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 543.862923] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 543.948554] bond0 (unregistering): Released all slaves 11:27:51 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x100, 0x0) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) close(r0) 11:27:51 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:51 executing program 3: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) syz_open_procfs(0x0, &(0x7f0000000200)="0000000000000000ff000000000000") write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000300), 0x12) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280), &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_open_pts(0xffffffffffffffff, 0x488000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) r3 = dup2(r1, r2) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(0xffffffffffffffff, &(0x7f0000003000), 0xfffffffffffffedf) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x100001, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0x50) getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000500)=@random={'os2.', 'bdev*\'*\x00'}, &(0x7f0000000600)=""/162, 0xa2) read$FUSE(0xffffffffffffffff, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)="988b55c7", 0xffffffffffffffb9) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) futimesat(r3, &(0x7f0000000140)='./file0/file1/file0\x00', &(0x7f00000005c0)={{r4, r5/1000+10000}, {0x77359400}}) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x0, @local={0xac, 0x14, 0x3fffffff}}, 0x10) 11:27:51 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x15) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200002, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000140)={0xff, 0xffffffffffff5cb4, 0x5}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) close(r0) 11:27:51 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") recvmsg(0xffffffffffffff9c, &(0x7f0000001280)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/167, 0xa7}], 0x1, &(0x7f0000000280)=""/4096, 0x1000, 0x3}, 0x1) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000012c0), 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000013c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001380)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001400)='/dev/rfkill\x00', 0x200, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000001440)={0x12, 0x10, 0xfa00, {&(0x7f0000001340), r3, r4}}, 0x18) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x4018aee1, &(0x7f0000000140)={0x0, 0x2000000001, 0x2}) [ 544.208944] hfsplus: session requires an argument [ 544.226592] hfsplus: unable to parse mount options 11:27:52 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}, {&(0x7f0000000340)="bc4276a716a788f314ea761baf1fc02ca686dbe821a83cd67df6e28f50e2d83d841811826acfcf2896fa3fb39a810a7044829f6ec1f75f28ee5eee863123da59a93f2440934154e1418fe0e0aafd6d37d8656d8474f752423261da80a9e062a971a87890baaa4f8ce666feaf109368d7b8df201cc9f630ace74e190fca403784da4a034dc2db4e5f6e8f", 0x8a}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:52 executing program 1: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="10d86bafd7e90317e918ffe4000000009260c44227e6c25e15ca00f6424bc3e3db784ba6f47b8b7e4a9bd577d108f686b7c29f20242c1fde61cdbbd69546f27c7dbb4ec93464e554bf4c1b5949428ee5ad"], 0x10}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @dev}, &(0x7f00000000c0)=0xc) 11:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x82000, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0x6aa8, 0x12e7, 0xfee, 0x3, 0x9, 0x1000}) 11:27:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x3800}) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3, 0x410001) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x800) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={r3, 0x50b, 0x3, 0x0, 0xfffffffffffffffa, 0x1, 0xffffffffffff751e}) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="020027bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 544.494806] hfsplus: session requires an argument 11:27:52 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x103) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800490000280000000000119078ac141400ac1423bb0e0090780000000000000000000000000000000043c4184063451c1eb363ab2cc45c22aab765ade4ceea1bf38e71a5cb338b0f58cd899b0202704aba39c1cb8b821a30133b71fa331adc0d7dbcf7fb2058bd060fcae7af00f83624d296f94169e28653833515d16dfc495884241524fc650d9c62c756745413ac6b2bc917a8030c1b2db69c4be6762a8e0decfd272a5a2dc8d68dbfaf2b831d37b216997ce29d81cada251ba050a38c8f4a34527224ed16fa0e0f257f9baf1e8849"], &(0x7f0000000040)={0x1}) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xfff, 0x6, 0x401, 0x2, 0x2, 0x3e, 0x9, 0x298, 0x38, 0xe1, 0x8, 0x200, 0x20, 0x1, 0xfff, 0xfffffffffffffff8, 0x4}, [{0x70000007, 0x100000001, 0x3f, 0x1000, 0x5, 0x3, 0xc7}, {0x5, 0x3, 0x3f, 0x80000001, 0xfffffffeffffffff, 0x5b14, 0x1ff, 0x7}], "f81178a9c9daa9de8df1b6ed51dbc913d5607539c85d8310cbde1afe3054fab1d6b11015069d16e363e960ea98d71036315da187ea9aaec24e88edfe6c2cc79272fa44434c3dfbe88f274679914b9fd0cb5d603c160f0ba493271f238268", [[], [], [], [], [], [], [], [], []]}, 0x9d6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x100, 0x2, 0x3, 0x4, 0x0, 0x96, 0x8}, 0x20) [ 544.538552] hfsplus: unable to parse mount options [ 544.541064] IPVS: ftp: loaded support on port[0] = 21 11:27:52 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}, {&(0x7f0000000280)="0e6ce499017b82e5f2bd0c5b29e625fdc4ee5d7a15cb2a7bef4c7c71b4e80535190cdbc0c125b34e69d74750e44b1a986d329f283e0800e7cbff0df0d5198e524fe1f3b49bb157bc98bdb29a15b273e24534d5547136acc2c728cc81640e90fe9ecc29e89347b113311d7508aab3e7089ff598e9ebf9f4c250f87aa7a10f11851f0822bfa3f81bd0e18046b97d95cefe3e3d42e131f3e5e1e85dc29a6e824036ca", 0xa1, 0x9}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:52 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x0, @addr=0x6}, 0x8, 0x7, 0x3ff}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0xffffff36) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2, 0x8e8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x6}}, 0x10) 11:27:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) fcntl$getflags(r0, 0x40a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080)="e5a701ecf330547bd6d9b59436256ff0fb322d2c5596038d0bca4aef329455e390d3549758de4f20683eb6a2bd26cb3f7d0433f90436265293e90962aa97bf86b7a1e9b36a844e93886c32c08ec09bf992402e40aec974618130cf3550d9d3748ab9521baeabfe8d06", &(0x7f00000001c0)='\v'}, 0xfffffffffffffc28) 11:27:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1000000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000080)) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000140)={0x1d000, &(0x7f00000000c0), 0x8, r2, 0x4}) close(r0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) [ 544.841279] hfsplus: session requires an argument [ 544.851510] hfsplus: unable to parse mount options [ 545.744165] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.750946] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.758987] device bridge_slave_0 entered promiscuous mode [ 545.805827] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.812332] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.821364] device bridge_slave_1 entered promiscuous mode [ 545.865233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 545.910887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 545.992826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 546.039142] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 546.083924] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 546.090822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.124976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 546.131835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.226207] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 546.235046] team0: Port device team_slave_0 added [ 546.279154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 546.286370] team0: Port device team_slave_1 added [ 546.312593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.340511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.368781] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 546.375772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.385118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.407799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 546.414936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.423717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.680656] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.687008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.693689] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.700088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.707309] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 547.138401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.643607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.732733] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 547.821985] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 547.828429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.835432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.926213] 8021q: adding VLAN 0 to HW filter on device team0 11:27:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xff, 0x400240) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000380)={{0x5, 0x7, 0x0, 0x3, '\x00', 0x3}, 0x1, [0x7, 0x2, 0x2, 0x4, 0xf6, 0x3, 0x5f, 0x7, 0x3, 0x7fffffff, 0xc9, 0x5, 0x3f, 0x10000, 0x5, 0x7f, 0xfff, 0x1ff, 0x0, 0x80000001, 0x1, 0x2, 0x6005, 0x7, 0x8, 0x400, 0xfffffffffffffffc, 0xfffffffffffffff7, 0x3, 0x8000, 0x101, 0x6, 0x6, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x8001, 0x4, 0x1ff, 0x7fff, 0x2, 0x5, 0xc1c9, 0x10000, 0x7fffffff, 0x8001, 0x3, 0xa1, 0xfffffffffffffffd, 0x4, 0x40, 0x0, 0x5, 0x38, 0x8d1a, 0x0, 0x1, 0x53, 0x1ff, 0x400, 0xa1f2, 0x2, 0x1, 0xffffffff, 0x7fff, 0xca, 0x20, 0x5, 0x5, 0x0, 0x5, 0x0, 0x5, 0x10001, 0x2, 0x0, 0x800, 0x10001, 0x76599789, 0x100000001, 0x10000, 0x4f3, 0x7fff, 0x1, 0x3ff, 0x4, 0x4, 0x1, 0x1, 0x9, 0x0, 0xfffffffffffff1d9, 0x8001, 0x8000, 0x6b, 0x1000000000, 0x8, 0x80000001, 0xa468, 0x40, 0x8, 0x58, 0x5, 0x3, 0xff, 0xe39, 0x798c0574, 0x3, 0x81, 0x3f, 0x9, 0x2d2e, 0x7, 0x7fff, 0x401, 0x6de9, 0x5, 0x80000001, 0x7, 0x1, 0x7fffffff, 0x9, 0x8, 0x5, 0x3, 0x2, 0xa8c8], {0x0, 0x1c9c380}}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)) fcntl$setstatus(r1, 0x4, 0x800) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000008002, 0x0) 11:27:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0x99) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000014c0), &(0x7f00000041c0)=0x4) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000000)="e7e2ddd146933e8b2af81bd36c7983ebce837b42ec07c42fb5ac26880aaad9be1a5d9fc3967a4b54d9184aace46988c1b13b1c9bfd7ce729e6853eaceeb61762926cea04cba0b89db48b87990f6dd936a04bd1a737019d66953825a191f8199bbd18560e3299efe47f9714d37b856a8379e420b776c5df58870c7cb7a982a0c6202b097651f729b4f7c7364762e5c9c2d2e0c8bd4464334697f7a55b7904e0cf7ed7168d") 11:27:56 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="ce06e4ccc42e10c10cf42950447eb059ba1a83a575f781e410878a62a44c91982164f6197669fc64d26719e6ea297d8fa9915a3a8fe807703630337d7c4a834343a4b66636862834a1273eec0ac7f68d36bdd695c63425062a0ad49341bd145d75829400cdf8ff47cf91d05ee18db4a72fdaeefc8288389235aa692991743d30cbb80f8b025993c0ddc2e0fa8e30bd22a79fdb041d7ae144fa38728249a688ff6fd53f7690fa68b4b7ef0d713c75fce6d4f1772826e68fad7fc6114cf3", 0xbd, 0x1}], 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766361c6d2cf8600000000000042fd00", 0x2c209}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x8, 0x800, {0xc0, 0x2, 0x2}, 0x220c0000, 0x6, 0x6, 0xc00000, 0x10, "766361c6d2cf8600000000000042fd00", 0x7, ':wlan0$', 0x7, '[system'}}, 0x58) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:56 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getsockopt$nfc_llcp(r2, 0x118, 0x4, &(0x7f0000000b00)=""/224, 0xe0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0xfffffe14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"000500", 0x1000}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) fgetxattr(r0, &(0x7f0000000140)=@random={'btrfs.', '/dev/net/tun\x00'}, &(0x7f0000000180)=""/4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:56 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) prctl$PR_SET_SECUREBITS(0x1c, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) [ 548.562463] hfsplus: session requires an argument [ 548.571565] hfsplus: unable to parse mount options 11:27:56 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dmesg_exec_t:s0\x00', 0x22, 0x2) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x540, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r2) 11:27:56 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x808080, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:56 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) move_pages(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240), 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0xffffff80, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1, 0x30, 0x4, 0x8}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x700, @local, 0x3}}, 0x6, 0x3, 0x6, 0x2, 0x9}, &(0x7f00000001c0)=0x98) 11:27:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0xbbb, 0xfffffffffffff890, 0x3ff, 0x1, 0x10, 0x3d}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200000, 0x0) close(r0) 11:27:56 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x5, 0x2) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000940)=""/86) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) [ 548.844890] hfsplus: session requires an argument [ 548.859438] hfsplus: unable to parse mount options 11:27:56 executing program 1: syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x8000101842, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000480)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000004c0)={r3}) r4 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x396, 0x0, 0x7}, {0x406}]}) r5 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r5, 0x0) r6 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) setns(r1, 0x6000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000003c0)={{0x76, 0x2, 0x8001, 0xfffffffffffffff9, 0x2, 0xaf}, 0x400, 0x2, 0x400, 0x7, 0xabef, "50687ad246f2436c4023cca150f0d6e94ccd8e33e85abfbdf2f4b565d3de04594c6eb18e5088a6068f8155eb2419a5a0f85e3c527c3ccb227e07c1338c5cf66df9b87ff85008dc6b0176ddac055f87788e176fe9f0ff1f02a39e0c31ce7af557f9f27f2e050780a2c807be4fe47d82223d6b688ef75540ed714c41ee04c4393f"}) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r7, 0x1, &(0x7f0000001940)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001840)="4396cfb8a302b251afc28e386b2c6e7b55fa8a0e0167d4693695dfa1a8c4c3451135b405a5103adf9fa4de4d42171434", 0x30, 0x0, 0x0, 0x1}]) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f00000000c0)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000600)={0x1, {{0x2, 0x4e22, @multicast1}}}, 0x88) 11:27:56 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2000) read$eventfd(r0, &(0x7f0000000040), 0x8) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x7006, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x9, 0x7, 0x73}) 11:27:56 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}, {@force='force'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:56 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) close(r0) [ 549.077682] hfsplus: session requires an argument [ 549.102539] hfsplus: unable to parse mount options 11:27:56 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) 11:27:57 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}, {@nodecompose='nodecompose'}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:57 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x501000, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0x6}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x101}]}, &(0x7f0000000980)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={r2, 0x2a}, 0x8) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000b40)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="f2cd7269d19e8c3cef8195e003f6c4974b83130a3af28d8e226f911f84544197e5a670664c1acf8eff7f53e0b7c1dec1985f0cfefdc8dbf3"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:57 executing program 3: recvfrom$inet(0xffffffffffffffff, &(0x7f0000000380)=""/117, 0x75, 0x0, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet6(0xa, 0x0, 0x5) accept(r0, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000200)={0x0, 0x9}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key(&(0x7f00000006c0)='trusted\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740), 0x0, 0xfffffffffffffffb) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000740)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x0, 0x5, @mcast1, 0xfffffffffffffff8}, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x1}, @in={0x2, 0x4e20, @multicast2}], 0x58) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000680)=[{&(0x7f00000005c0)="2d7ee9b749ac69d4c0be3604fb812416ba68fa55583dc1fdd27eea628fbdebaacca8a54314b7ed182b1d75eccfd038c0bb53bdc2e223c8bf3a0d8fcc8017536988ead90933d50794e226a9882f6c03d3eaea511b9ae0d495ace7e02c707f85e0b59094c9733b5b5b7cb911dcef5c6e0a8c8674422662f03d23d18caaf4ce6bc4612644d6c7f94eee1b61eb2beb4917", 0x8f}], 0x1, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) exit(0xffffffffffffffea) ioctl$KDSETMODE(r1, 0x4b3a, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000240)) 11:27:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x7, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x3, 0x3) pread64(r0, &(0x7f0000000040)=""/91, 0x5b, 0x1c) dup3(r0, r0, 0x80000) 11:27:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) fcntl$addseals(r1, 0x409, 0x4) r2 = dup3(r1, r0, 0x80000) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f00000000c0)={0x400, 0xe1e2, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000080)=0xa281) [ 549.477737] hfsplus: session requires an argument [ 549.508544] hfsplus: unable to parse mount options 11:27:57 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000008, &(0x7f0000000940)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000b00)={{0xa, 0x2, 0x101, 0x101, 'syz1\x00', 0x1000}, 0x0, 0x10000101, 0x3, r0, 0x1, 0xc9ce, 'syz0\x00', &(0x7f0000000300)=['syz1\x00'], 0x5, [], [0x80000001, 0x1, 0x40, 0x3]}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="3b50ee079b4dde97e9ac2039954a11ebbee95268795d1facabdd533d647a36838bab70ebed63445fc7ae2c646e177005dc4bf71bae62b069ff2d0ca81aee2ac3edf113e5e92da4cc8df44071558aa077f8222d84bf548ddf2fde46a085bb14e315a5345702e7e303f0e15ac5a5dd98091e084d1b11e8ade23a28881973377ad2c5b53386c748170859a2ef9fc52d8de96bb1e151f250c173fcedf752490f3627f88f04576af6d598ad0963d2306d5e4324fc9a9e9b744dfb23ff52e3d6d7814a68edc851faec5b05cb743a11e3c5e237"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:57 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}, {@part={'part', 0x3d, 0x1}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:57 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x501000, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0x6}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x101}]}, &(0x7f0000000980)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={r2, 0x2a}, 0x8) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000b40)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="f2cd7269d19e8c3cef8195e003f6c4974b83130a3af28d8e226f911f84544197e5a670664c1acf8eff7f53e0b7c1dec1985f0cfefdc8dbf3"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x6) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0x3, 0x2, 0x5, 0x3, 0xfbd}, 0x7ff, 0x8}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) [ 549.734180] hfsplus: session requires an argument [ 549.749681] hfsplus: unable to parse mount options 11:27:57 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}, {@type={'type', 0x3d, "8cecfa89"}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x3, 0x4, 0x804, 0x0, 0xffffffffffffffff, 0x7}, 0xffffff28) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'team_slave_1\x00', 0x110}) 11:27:57 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x440, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r2, 0x808c563d, &(0x7f0000000940)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x810c5701, &(0x7f0000000b00)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(r2, &(0x7f0000000c40)=ANY=[@ANYRESDEC], 0xfffffffffffffe28) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:27:57 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000200)={{0x10000, 0x80000000}, 'port1\x00', 0x8, 0x120008, 0x0, 0x0, 0x3, 0x2, 0xfff, 0x0, 0x7, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='Y'}, 0xfffffffffffffd28) close(r0) [ 549.978578] hfsplus: session requires an argument [ 549.986693] hfsplus: unable to parse mount options 11:27:58 executing program 3: r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r1 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x3, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x6, 0x8, 0x23}, {0x3, 0x0, 0x9ae, 0x80007}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000001780)={r3, 0x1, 0x6}, 0x10) r4 = gettid() getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000015c0)={0x0, 0x8e, "299a7a59ac487869580ad80d92661e30bc65d6d3d1d4149373012d278e7c4fd3026656467ecdfd4b396870db71dd04cb24cac022846a3eb4bcdfb6685799b4fa83cb5cc7a56820714bf0a4779d4a163f42bdccba04f27128ce0aefdc7534252c324600cb897f0ee44ce747e43dad08223686c4f649a097faf6ab079cb323bd4d75a1ca751ac0cd1c9b44435957c2"}, &(0x7f0000001680)=0x96) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000016c0)={r5, 0xfffffffffffffffc, 0x30}, &(0x7f0000001700)=0xc) prctl$PR_SET_PTRACER(0x59616d61, r4) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x5e80, 0x4040) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000000)=""/202) setsockopt$llc_int(r0, 0x10c, 0x8000000007, &(0x7f0000000200)=0x1fe, 0xffffffffffffffa0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000013c0)={0x2, 0x0, [{0x7000, 0x1000, &(0x7f00000002c0)=""/4096}, {0xf000, 0xfa, &(0x7f00000012c0)=""/250}]}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000001580)={0x8, 0xfffffffffffffc01, 0x7, 0x3b, &(0x7f0000001440)=""/59, 0xa5, &(0x7f0000001480)=""/165, 0x39, &(0x7f0000001540)=""/57}) 11:27:58 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}, {@type={'type', 0x3d, "5668e4e8"}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) close(r0) 11:27:58 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x501000, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000940)={0x0, 0x38, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0x6}, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x101}]}, &(0x7f0000000980)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={r2, 0x2a}, 0x8) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000b40)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="f2cd7269d19e8c3cef8195e003f6c4974b83130a3af28d8e226f911f84544197e5a670664c1acf8eff7f53e0b7c1dec1985f0cfefdc8dbf3"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) 11:27:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8800) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000200)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond_slave_0\x00', 0x1002}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x424400, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f00000000c0)) close(r0) 11:27:58 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="e4a14abf1beca75aa8ac4240f1b2332f9c7bb3900330cb8df24b05b80d4f3fc09ae7247451b4a17c1e49463bbd9b00e3a0999f25f3e8d4c8b7ab8904689c5c9b39d4463594d9033a40e1d046317935dbae8fb2550e33f0e13425f8bf4972c60d2ac0fff9e5f221b5df91c3d483a743fe4fc869a699ef6d7624f82c3407b3e23418da1e"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 550.369889] hfsplus: session requires an argument [ 550.389764] hfsplus: unable to parse mount options 11:27:58 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:27:58 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x32, 0x240002) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) uselib(&(0x7f0000000100)='./file0\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r3, 0x6, 0x1}, 0x10) close(r0) 11:27:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0xffffffa5}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x6d2a, 0x4) 11:27:58 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = dup(0xffffffffffffffff) sendto$unix(r2, &(0x7f0000000180)="568761e5090f505b8cbcb55aa0696472084a32d20b018d7f06066ee9d1c55cab578ed06cbc286dbdc66da0ddc1059d8180e82e78757ebbee16661eb5ef64ebe49f58d3f89e9bdb40ea98d030cf4e9d51403b52cc3c2c2c42ea9b9f090d01f7baae431fff5592fcaea6bad1099b14bbb3e7de1b4593f7ef3cc13829dc95", 0x7d, 0x40000, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0bc5351, &(0x7f00000000c0)={{}, 'port0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r6, 0x0) connect(r5, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/unix\x00') sendfile(r5, r7, &(0x7f0000000000), 0x800000bf) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r8 = memfd_create(&(0x7f0000000e40)="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", 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) setpgid(r9, r10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000070000000000000000000000000000040000000000000040000000800000000000000800000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x6c) execveat(r8, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x1000}}, 0x20) 11:27:58 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x6}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x1, 0x2, 0x200, 0x401, 0x3, 0x9, 0x6, 0x3, r1}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffffffffffffff0, &(0x7f0000000000)) [ 550.646768] hfsplus: session requires an argument [ 550.679902] hfsplus: unable to parse mount options 11:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000180)=0xb2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000140)=0x100000001) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') 11:27:58 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:58 executing program 3: r0 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa71249a63885a29fb0529b46fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r0, 0x0) futex(&(0x7f0000000000)=0x1, 0x400000085, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000100)=0x2, 0x0) [ 550.872413] hfsplus: unable to parse mount options 11:27:58 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e22, @multicast1}}) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x800000010f, 0x82, &(0x7f00004ad000), &(0x7f0000000140)=0xffffffffffffff53) 11:27:58 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:58 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a0100023c126285718070") syz_open_dev$sndseq(&(0x7f0000000340)='/dev/snd/seq\x00', 0x0, 0x102) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind(r1, &(0x7f0000000180)=@can={0x1d, r2}, 0x80) 11:27:58 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(r2, &(0x7f0000000380), &(0x7f0000000340)=0x14) write$selinux_context(r2, &(0x7f0000000300)='system_u:object_r:default_t:s0\x00', 0x1f) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="ae3b00ff29b7d43d6bc4996c73abbde85ae8b44d967ff1d4e98e6f5f5a2c6dddffe76fa10460cd1423f615fdcf1b52a77b7c8bf6df5481f26c946a2b925a2c914e482690e3409545c376d6b028f83da204faaed2a1b52b36898c61b7409ae6fb508ef315e070d199b3c7568d70802301eb0121ce44ab956b71bd299b62606de440353d113674096258e2646d9dfd9bd7507a15da87faac907a3e37e36c524bbbb8383e646f448d009add5c0735a45a62d426529786122676a105c00be67fb6062ee74202ca6495b6d49192fc8587fa013a519194b58a95bf72aca9d00c28026d60ff04d37615cd5940af9d81dd739f84609acc889e44f13bbb"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 551.141811] hfsplus: unable to parse mount options 11:27:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000640)='/dev/sequencer2\x00', 0x8100, 0x0) accept4$llc(r0, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x10, 0x80800) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x10, 0x0, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000080)={0x4, 0x7, "4fa420e272b0411d230cd815b19c56f735b18e5c65cc35a3b9b2e859487efaa0", 0x8, 0x20, 0x800, 0xf852, 0x11}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f0000000000), &(0x7f00000001c0)='\v', 0x3}, 0xffffffffffffff91) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4, 0x6, [0xd67, 0x2, 0x1000, 0x7, 0x4, 0x755]}, &(0x7f0000000180)=0x14) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000340)=""/140) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000540)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)={r5, 0x73, 0x3, [0x4000, 0x8, 0x2]}, &(0x7f0000000240)=0xe) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000700)={{0x7, @name="ed627078b0f339bba6d7f4d97496bf69530e5ec1b7919763a661bdae671207ff"}, "632d6022bf9ac02dee1413a0855d5ce88374d0f794c62d5fd0840472d43c6f02", 0x3}) close(r1) write$tun(r3, &(0x7f0000000440)={@void, @void, @mpls={[{0xfff, 0x3f, 0x401, 0xafb}, {0x10000, 0x8, 0x80, 0x7}, {0x8, 0xd87, 0x6, 0x3}, {0x8, 0x1000, 0x7, 0x800}], @ipv6={0x400, 0x6, "dc97d6", 0xb0, 0x32, 0xf7, @loopback, @ipv4={[], [], @remote}, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0xc861, 0x80000000, "500c79e4675945577dce5f7a12c303fff7c557d8b1d321b9be872d4a7227a3d1dc0c80f9c5e0c717ee6cd3e29d171ed818ffc5dfe66fc83cc41329c50d253e424fe91b80d367a357812d93457e068bcefbb80140403b17f79da4610cd30c95f3a6e3bd7ca434294e8dad530dd6b7a29fd4044a79f48e29dad9cb2026da7e8e17839527da8627fa8871a0dc40e257f33d4dcede9ff9aca5f052504cc4757e0928d28d0bb62595d778"}}}}}, 0xe8) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000280)) 11:27:59 executing program 1: semtimedop(0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x77359400}) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0xa59, 0x0, 0xde6a, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x41, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x80000000}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x800000080a, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000034000b00e4dba9e721786d702d0e88b56fc66b4df6d24b53f9995663f4c6ec320d1a445e1e3c548f59c16c5075c456c0915e4431cd76ec58"], &(0x7f0000000100)=0x58) r3 = socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = accept4(r3, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x0, "e91f7189591e9233614b00"}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={"7465616d5f736c6176655f3000000300", 0x200008000005}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@remote}, 0x20) r5 = socket$inet(0x2, 0x200000002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f0000000440)={'TPROXY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'}, &(0x7f0000000400)=0xfffffffffffffc85) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000300)={0x5, 0x8, 0x4, 0x1000, {0x0, 0x2710}, {0x0, 0x1, 0x1, 0x2, 0xffffffff, 0x5, "910c8fbe"}, 0x20, 0x3, @offset=0x1, 0x4}) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000180)=""/173) 11:27:59 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @mcast2, 0x1}, @in6={0xa, 0x4e22, 0xf52, @dev={0xfe, 0x80, [], 0x12}, 0x1}], 0x38) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)=[0x580]) close(r0) 11:27:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080)=0x6, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:27:59 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) [ 551.487156] hfsplus: unable to parse mount options 11:27:59 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session'}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) 11:27:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = dup(0xffffffffffffffff) sendto$unix(r2, &(0x7f0000000180)="568761e5090f505b8cbcb55aa0696472084a32d20b018d7f06066ee9d1c55cab578ed06cbc286dbdc66da0ddc1059d8180e82e78757ebbee16661eb5ef64ebe49f58d3f89e9bdb40ea98d030cf4e9d51403b52cc3c2c2c42ea9b9f090d01f7baae431fff5592fcaea6bad1099b14bbb3e7de1b4593f7ef3cc13829dc95", 0x7d, 0x40000, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0bc5351, &(0x7f00000000c0)={{}, 'port0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r6, 0x0) connect(r5, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/unix\x00') sendfile(r5, r7, &(0x7f0000000000), 0x800000bf) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r8 = memfd_create(&(0x7f0000000e40)="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", 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) setpgid(r9, r10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000070000000000000000000000000000040000000000000040000000800000000000000800000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x6c) execveat(r8, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x1000}}, 0x20) 11:27:59 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) syz_mount_image$btrfs(&(0x7f0000000300)='btrfs\x00', &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f0000000980)=[{&(0x7f0000000b00)="ebc84acc1ead3d31272f14c108821a66cf076711dbca5715e7a289f2340054565f745e573b673921782b8d85cd2103fee2ccc2cba25eef5aba1db2ae6a21f47211cbe21cd7a97c76f0eed55d23f15837dd13fde77000ca048179c16fa722240884221028051c92f8d040e84e153f1a8305f170afa00d071b1bce9269373af7400aea90f6ad2a8dd767036ca71a3a9bba76320c1461d7168671a894069cfa399575f47126327dc59b696cc9d74ccbe00bdf3259719de62fed2e99a25da5f6a11613badb6a453eaebcc42483ffd97b9569b9751ac478fb202847c6421827263465ca5001aeea", 0xe5, 0x2}, {&(0x7f0000000940)="0c068f0581418dbc6cbf876e1dc659caa114726d7fbef540b8a93eb740d39710ff7cadd9e51d38a7961fac66e8fc6c7f85a1ef8e118cefc2f9", 0x39}], 0x1000000, &(0x7f0000000c00)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@thread_pool={'thread_pool', 0x3d, 0xfff}}, {@nossd='nossd'}, {@datacow='datacow'}, {@commit={'commit', 0x3d, 0x7}}, {@acl='acl'}, {@space_cache_v2='space_cache=v2'}]}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c80)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000d00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40060200}, 0xc, &(0x7f0000000cc0)={&(0x7f00000012c0)={0xc4, r3, 0x400, 0x80000000, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400000000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x33}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) [ 551.632853] hfsplus: unable to parse mount options 11:27:59 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session'}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) [ 551.806498] hfsplus: unable to parse mount options 11:27:59 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session'}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}, {@appraise_type='appraise_type=imasig'}]}) [ 552.065458] hfsplus: unable to parse mount options 11:28:00 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\%\\'}}]}) 11:28:00 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) [ 552.250284] hfsplus: session requires an argument [ 552.257217] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 552.261856] hfsplus: unable to parse mount options 11:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8, 0xfffffffffffffffc}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140)="23dee17baef26b768758e34c6693799acb6cd61e32306c070ca1e3d84a9c5550fa41b27df7f1190f1ad0c18d1b525b27ea22bd78d11eac59ebc323fcb3242a762183503f51e5b57b570fb6cd8a08bb947669d7fa05cf9d5989d6a0ebc83d08a9e86803669316537c0cc02c27787f", &(0x7f0000000080)="825950db6600000000000002", 0xfffffffffffffffc}, 0x20) close(r0) 11:28:00 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0xffff, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="241b6b5259f753d0a66279af212eaa4523255905089906d77cfdb941aae9e89dd06c7fb3076be888abf3e72e3cad8e5eb816504df4537a5bea8b08f95a31f87f43843d66c6ee428e2f0b25c369572f662a5142069385b799832200587ab2956058c932b86e2679e7a8900cc7cc6f42671beb6ef6bd2ec9d5c563eeb9025ee188f63e8fd5f41141c864a9936a5f8d582b50aa7b2eea2b41939ce1476db43c4eff2284b744502a15306179ecd5c6df7e43efe6"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) 11:28:00 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(r2, &(0x7f0000000380), &(0x7f0000000340)=0x14) write$selinux_context(r2, &(0x7f0000000300)='system_u:object_r:default_t:s0\x00', 0x1f) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="ae3b00ff29b7d43d6bc4996c73abbde85ae8b44d967ff1d4e98e6f5f5a2c6dddffe76fa10460cd1423f615fdcf1b52a77b7c8bf6df5481f26c946a2b925a2c914e482690e3409545c376d6b028f83da204faaed2a1b52b36898c61b7409ae6fb508ef315e070d199b3c7568d70802301eb0121ce44ab956b71bd299b62606de440353d113674096258e2646d9dfd9bd7507a15da87faac907a3e37e36c524bbbb8383e646f448d009add5c0735a45a62d426529786122676a105c00be67fb6062ee74202ca6495b6d49192fc8587fa013a519194b58a95bf72aca9d00c28026d60ff04d37615cd5940af9d81dd739f84609acc889e44f13bbb"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 552.469010] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 552.480516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 11:28:00 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000080)={[0x1, 0x1f001, 0x5000, 0x100000], 0x3, 0x9, 0x8}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) 11:28:00 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 11:28:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = dup(0xffffffffffffffff) sendto$unix(r2, &(0x7f0000000180)="568761e5090f505b8cbcb55aa0696472084a32d20b018d7f06066ee9d1c55cab578ed06cbc286dbdc66da0ddc1059d8180e82e78757ebbee16661eb5ef64ebe49f58d3f89e9bdb40ea98d030cf4e9d51403b52cc3c2c2c42ea9b9f090d01f7baae431fff5592fcaea6bad1099b14bbb3e7de1b4593f7ef3cc13829dc95", 0x7d, 0x40000, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0bc5351, &(0x7f00000000c0)={{}, 'port0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r6, 0x0) connect(r5, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/unix\x00') sendfile(r5, r7, &(0x7f0000000000), 0x800000bf) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r8 = memfd_create(&(0x7f0000000e40)="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", 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000280)=0x0) setpgid(r9, r10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460000000000070000000000000000000000000000040000000000000040000000800000000000000800000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x6c) execveat(r8, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f00000001c0), 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111, 0x1000}}, 0x20) 11:28:00 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0xffffffffffffffff, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) sendfile(r3, r0, &(0x7f0000000300), 0xffffffffffff7fff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"00ac73e000000000008000820f7c5000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0)="54e084593eb63f189a1293", &(0x7f00000001c0)="ae"}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_wait(r2, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x4) close(r0) 11:28:00 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1bbd465cab0dab82f81c6b3428910cf4644755dfa76ca514e339e2a1eef3e4ef74df2f15da88227d5f9a0b00ae4cf95b5fc2e67748909b94"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 552.651053] hfsplus: session requires an argument [ 552.655931] hfsplus: unable to parse mount options 11:28:00 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}], [{@pcr={'pcr', 0x3d, 0x8}}, {@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x75, 0x77, 0x66, 0x33, 0x64, 0x30, 0x33], 0x2d, [0x35, 0x0, 0x7d, 0x7e], 0x2d, [0x33, 0x64, 0x73, 0x31], 0x2d, [0x35, 0x35, 0x0, 0x32], 0x2d, [0x0, 0x34, 0x77, 0x35, 0x66, 0x3d, 0x76]}}}]}) 11:28:00 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(r2, &(0x7f0000000380), &(0x7f0000000340)=0x14) write$selinux_context(r2, &(0x7f0000000300)='system_u:object_r:default_t:s0\x00', 0x1f) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="ae3b00ff29b7d43d6bc4996c73abbde85ae8b44d967ff1d4e98e6f5f5a2c6dddffe76fa10460cd1423f615fdcf1b52a77b7c8bf6df5481f26c946a2b925a2c914e482690e3409545c376d6b028f83da204faaed2a1b52b36898c61b7409ae6fb508ef315e070d199b3c7568d70802301eb0121ce44ab956b71bd299b62606de440353d113674096258e2646d9dfd9bd7507a15da87faac907a3e37e36c524bbbb8383e646f448d009add5c0735a45a62d426529786122676a105c00be67fb6062ee74202ca6495b6d49192fc8587fa013a519194b58a95bf72aca9d00c28026d60ff04d37615cd5940af9d81dd739f84609acc889e44f13bbb"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'veth1_to_bond\x00', 0x1002}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0xbc, 0x0, 0x8}, 0x2c) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x80000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:00 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='\v'}, 0x20) close(r0) [ 552.950599] hfsplus: session requires an argument [ 552.955521] hfsplus: unable to parse mount options 11:28:00 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) 11:28:00 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}], [{@pcr={'pcr', 0x3d, 0x8}}]}) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @empty, 0x7}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x0, @mcast2}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0xc}, 0x7576}], 0x48) sendto$inet(r2, &(0x7f0000000040)="800367ab554ecd28ee3e718430e27a84bd57ba441ed9fc870c66ddbda74d81d12b8270713b65acf4234cc2", 0x2b, 0x44, 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, 0x1f6) [ 553.207037] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 553.215297] hfsplus: session requires an argument 11:28:01 executing program 3: capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000001fe8)={0x20000fffffffc, 0xffffffffffffffff}) r0 = getpgrp(0x0) setpriority(0xfffffffffffffffe, r0, 0x1) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x9, 0x8000) connect$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) [ 553.259301] hfsplus: unable to parse mount options 11:28:01 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000100)=0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000014000b09000001e3ff00ffffdc656c6f", @ANYRES32=r2, @ANYBLOB="14000200fe80000000000000000000000000000014000100ff0100000000000000000000000000010800080000040000"], 0x48}, 0x1, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 11:28:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x400380) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xe, 0x24, 0xfffffffffffffffb, 0x8, 0x0, r1, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0x7, 0xb77, 0x3, 0x8, 0x1, 0x2, 0x2, 0x2]}) 11:28:01 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:01 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0xfffffffffffff006) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000000)=0xdf8, 0x4) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="0800060000000000080008000000ffff76dfe6b2684af468b2332d8251b4c15d74ebdd5037bcd26177f88acb2df8974b6e7e26c1f4b46b1b660db10f683bab7cd8582923be530fb0855d5dc2d0df10f2880a6fdab0d749567882dc8c000000000000000000000000"], &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="06004f000100080003000180f7ffe6937cbf44c15aedc82edec180b8c9a9b019744d8259fdfe4c277f009a644dbf628164d2fb6d504ca167a56ef10939063104565a9a51b4c5e31c9e531aa4d9c08c9bdecde8"], &(0x7f00000001c0)=0x12) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x9}, 0x1c) 11:28:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)="01"}, 0x20) close(r0) [ 553.542606] hfsplus: session requires an argument 11:28:01 executing program 1: semget(0xffffffffffffffff, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000080)=""/205) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = open(&(0x7f0000000500)='./file0\x00', 0x3, 0x100) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x0, 0x600, 'wrr\x00', 0x20, 0xfffffffffffff0b5, 0x67}, 0x2c) r5 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000640)=0x3, 0x8) r6 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000380)=0x8, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth0_to_bridge\x00'}, 0x18) sendfile(r3, r6, &(0x7f00000000c0), 0x6) pselect6(0x40, &(0x7f0000000100)={0x3f, 0xfffffffffffffffc, 0x5, 0x200, 0x401, 0x2, 0x607153fe, 0x100000001}, &(0x7f0000000140)={0x5, 0x1, 0xc53, 0x401, 0x9, 0x2, 0xd75c, 0x100}, &(0x7f0000000180)={0x2197, 0xbc, 0x40, 0x400, 0x3, 0x7, 0xfffffffffffffffc}, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f00000002c0)={&(0x7f0000000280)={0x2}, 0x8}) ioctl(r4, 0x800000000008982, &(0x7f0000000080)) signalfd4(r5, &(0x7f00000003c0)={0x4}, 0x8, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r9 = socket(0x10, 0x1, 0x0) ioctl(r9, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x8180, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000480)=[@vmwrite={0x8, 0x0, 0x8, 0x0, 0x8e, 0x0, 0x5, 0x0, 0x1000}, @cstype3={0x5, 0x6}], 0xffffffffffffe0a) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)=ANY=[@ANYRES16=r7, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES32=r4], @ANYRESOCT=r3]) 11:28:01 executing program 3: r0 = socket$inet6(0xa, 0x800000001, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x400004000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) sendto$inet6(r1, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xfe7c) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) write$binfmt_elf32(r1, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRES64=r2], @ANYBLOB="3c4db38476197fda32d54c"], 0x25) socket$xdp(0x2c, 0x3, 0x0) r3 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) r4 = accept4(r0, &(0x7f0000000140)=@l2, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r10 = getegid() mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r11, 0x11b, 0x1, &(0x7f00000016c0), &(0x7f0000001740)=0x60) fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r5}, {0x2, 0x0, r6}, {0x2, 0x1, r7}, {0x2, 0x6, r8}], {0x4, 0x5481040563b6a124}, [{0x8, 0x6, r9}, {0x8, 0x1, r10}], {0x10, 0x3}, {0x20, 0x5}}, 0x54, 0x1) shutdown(r1, 0x1ffffffffffffff) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x400000, 0x0) write$P9_RREADLINK(r12, &(0x7f00000002c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) [ 553.564686] hfsplus: unable to parse mount options 11:28:01 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000080)=0x7f, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) 11:28:01 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='net/dev_mcast\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="294716688fcbf00d95c43865a0b761fca74662fcc8607ef2c327e5d1eecc61e414132ec07a65dfb2b8827e92c858692f1f626bdb266e6e1b2f947f0d57db0b904a785094c8b7c34c8cd2483ef3661c86c4ece1c4866f793c358089a21009c6087a86f100a4c4f35b7de351ea90b00d0bb61075fd46ea6cbae38d07d5cbcd40c2e6935d"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000200)={{0x3, @name="ebd2b86ba5911b011117b0a27519ac0dd5ad2c6547c3d1ba4d752d719210081d"}, "cc42c7c3e5256e49f169cb8ccb32ab15b180f01602b0cc13f374350792622665", 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x4, 0xfffffffffffffffc, 0x8, 0x0, 0xffffffffffffffff, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000000c0)={0xad, 0x73575753, 0x5, 0x1f, 0x3, @stepwise={{0x3, 0x100000001}, {0x6, 0x79}, {0x4, 0x7}}}) 11:28:01 executing program 5 (fault-call:0 fault-nth:0): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 553.878901] FAULT_INJECTION: forcing a failure. [ 553.878901] name failslab, interval 1, probability 0, space 0, times 0 [ 553.918361] CPU: 0 PID: 23831 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 553.925756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 553.935114] Call Trace: [ 553.937753] dump_stack+0x244/0x39d [ 553.941447] ? dump_stack_print_info.cold.1+0x20/0x20 [ 553.946660] ? lock_downgrade+0x900/0x900 [ 553.950854] should_fail.cold.4+0xa/0x17 [ 553.954947] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 553.954972] ? lock_downgrade+0x900/0x900 [ 553.954993] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 553.955047] ? proc_fail_nth_write+0x9e/0x210 [ 553.955066] ? proc_cwd_link+0x1d0/0x1d0 [ 553.964327] ? find_held_lock+0x36/0x1c0 [ 553.964368] ? perf_trace_sched_process_exec+0x860/0x860 [ 553.964408] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 553.964430] __should_failslab+0x124/0x180 [ 553.964449] should_failslab+0x9/0x14 [ 553.964472] __kmalloc+0x2e0/0x760 [ 554.005064] ? strncpy_from_user+0x5a0/0x5a0 [ 554.009493] ? fput+0x130/0x1a0 [ 554.012777] ? do_syscall_64+0x9a/0x820 [ 554.016760] ? __x64_sys_memfd_create+0x142/0x4f0 [ 554.021617] ? do_syscall_64+0x9a/0x820 [ 554.025611] __x64_sys_memfd_create+0x142/0x4f0 [ 554.030295] ? memfd_fcntl+0x1910/0x1910 [ 554.034388] do_syscall_64+0x1b9/0x820 [ 554.038286] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 554.043660] ? syscall_return_slowpath+0x5e0/0x5e0 [ 554.043682] ? trace_hardirqs_on_caller+0x310/0x310 [ 554.043700] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 554.043793] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 554.043812] ? __switch_to_asm+0x40/0x70 [ 554.053770] ? __switch_to_asm+0x34/0x70 [ 554.053793] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:28:01 executing program 5 (fault-call:0 fault-nth:1): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:01 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x3, 0x7, 0x7, 0x6, 0x919, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(r3, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000300)={r0, 0x0, 0xff, 0x517, 0x100000001}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000940)={0x7ff, 0x5, 0x7}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) [ 554.053817] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.053830] RIP: 0033:0x457569 [ 554.053847] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.053856] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 554.053871] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000457569 [ 554.053880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 554.053890] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 554.053900] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fb5435a06d4 [ 554.053910] R13: 00000000004c51cb R14: 00000000004d8fb0 R15: 0000000000000003 [ 554.164324] FAULT_INJECTION: forcing a failure. [ 554.164324] name failslab, interval 1, probability 0, space 0, times 0 11:28:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x400, 0x8000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x6, @ipv4={[], [], @local}, 0x10000}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x7, @remote, 0x5}, @in6={0xa, 0x4e22, 0x8, @loopback, 0xafe2}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={r3, 0x6}, &(0x7f0000000240)=0x8) [ 554.235495] CPU: 1 PID: 23840 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 554.242877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.252284] Call Trace: [ 554.254894] dump_stack+0x244/0x39d [ 554.258548] ? dump_stack_print_info.cold.1+0x20/0x20 [ 554.263787] should_fail.cold.4+0xa/0x17 [ 554.267879] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 554.273013] ? zap_class+0x640/0x640 [ 554.276775] ? __lock_acquire+0x62f/0x4c20 [ 554.281036] ? lock_downgrade+0x900/0x900 [ 554.285261] ? check_preemption_disabled+0x48/0x280 [ 554.290301] ? find_held_lock+0x36/0x1c0 [ 554.290341] ? expand_files.part.8+0x571/0x9a0 [ 554.290358] ? perf_trace_sched_process_exec+0x860/0x860 [ 554.290378] ? find_held_lock+0x36/0x1c0 [ 554.290406] __should_failslab+0x124/0x180 [ 554.299078] should_failslab+0x9/0x14 [ 554.299096] kmem_cache_alloc+0x2be/0x730 [ 554.299118] ? shmem_destroy_callback+0xc0/0xc0 [ 554.299135] shmem_alloc_inode+0x1b/0x40 [ 554.299152] alloc_inode+0x63/0x190 [ 554.299167] new_inode_pseudo+0x71/0x1a0 [ 554.299183] ? prune_icache_sb+0x1c0/0x1c0 [ 554.308678] ? _raw_spin_unlock+0x2c/0x50 [ 554.308698] new_inode+0x1c/0x40 [ 554.308724] shmem_get_inode+0xf1/0x920 [ 554.308759] ? shmem_encode_fh+0x340/0x340 [ 554.308775] ? lock_downgrade+0x900/0x900 [ 554.308792] ? lock_release+0xa00/0xa00 [ 554.308805] ? perf_trace_sched_process_exec+0x860/0x860 [ 554.308823] ? usercopy_warn+0x110/0x110 [ 554.316862] __shmem_file_setup.part.50+0x83/0x2a0 [ 554.316902] shmem_file_setup+0x65/0x90 [ 554.316920] __x64_sys_memfd_create+0x2af/0x4f0 [ 554.316936] ? memfd_fcntl+0x1910/0x1910 [ 554.316964] do_syscall_64+0x1b9/0x820 [ 554.325752] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 554.325771] ? syscall_return_slowpath+0x5e0/0x5e0 [ 554.325790] ? trace_hardirqs_on_caller+0x310/0x310 [ 554.325807] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 554.325825] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 554.325841] ? __switch_to_asm+0x40/0x70 [ 554.333525] ? __switch_to_asm+0x34/0x70 [ 554.333548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.333571] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.333583] RIP: 0033:0x457569 [ 554.333599] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 554.333607] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 554.341893] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000457569 [ 554.341903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 554.341913] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 554.341923] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fb5435a06d4 [ 554.341932] R13: 00000000004c51cb R14: 00000000004d8fb0 R15: 0000000000000003 11:28:02 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) syz_open_procfs(r0, &(0x7f0000000300)='net/dev_mcast\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="294716688fcbf00d95c43865a0b761fca74662fcc8607ef2c327e5d1eecc61e414132ec07a65dfb2b8827e92c858692f1f626bdb266e6e1b2f947f0d57db0b904a785094c8b7c34c8cd2483ef3661c86c4ece1c4866f793c358089a21009c6087a86f100a4c4f35b7de351ea90b00d0bb61075fd46ea6cbae38d07d5cbcd40c2e6935d"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:02 executing program 5 (fault-call:0 fault-nth:2): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:02 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x5) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfc], [], @dev}}, 0x1c) [ 554.697261] FAULT_INJECTION: forcing a failure. [ 554.697261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 554.709099] CPU: 0 PID: 23857 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 554.716488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 554.725856] Call Trace: [ 554.728472] dump_stack+0x244/0x39d [ 554.732112] ? dump_stack_print_info.cold.1+0x20/0x20 [ 554.737320] ? zap_class+0x640/0x640 [ 554.741072] ? print_usage_bug+0xc0/0xc0 [ 554.745154] should_fail.cold.4+0xa/0x17 [ 554.749242] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 554.754360] ? find_held_lock+0x36/0x1c0 [ 554.758441] ? get_mem_cgroup_from_mm.part.62+0x204/0x880 [ 554.763989] ? lock_downgrade+0x900/0x900 [ 554.768172] ? check_preemption_disabled+0x48/0x280 [ 554.773807] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 554.778761] ? kasan_check_read+0x11/0x20 [ 554.782921] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 554.788205] ? zap_class+0x640/0x640 [ 554.791918] ? rcu_softirq_qs+0x20/0x20 [ 554.795941] ? rcu_read_unlock+0x16/0x60 [ 554.800020] __alloc_pages_nodemask+0x366/0xea0 [ 554.804736] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 554.809681] ? kasan_check_read+0x11/0x20 [ 554.813875] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 554.818899] ? __lock_is_held+0xb5/0x140 [ 554.822975] ? rcu_read_unlock+0x33/0x60 [ 554.827069] ? trace_hardirqs_off+0xb8/0x310 [ 554.831512] cache_grow_begin+0xa5/0x8c0 [ 554.835587] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 554.841136] ? check_preemption_disabled+0x48/0x280 [ 554.846160] kmem_cache_alloc+0x66b/0x730 [ 554.846183] ? shmem_destroy_callback+0xc0/0xc0 [ 554.846198] shmem_alloc_inode+0x1b/0x40 [ 554.846216] alloc_inode+0x63/0x190 [ 554.862788] new_inode_pseudo+0x71/0x1a0 [ 554.866890] ? prune_icache_sb+0x1c0/0x1c0 [ 554.871142] ? _raw_spin_unlock+0x2c/0x50 [ 554.875315] new_inode+0x1c/0x40 [ 554.878706] shmem_get_inode+0xf1/0x920 [ 554.882731] ? shmem_encode_fh+0x340/0x340 [ 554.886979] ? lock_downgrade+0x900/0x900 [ 554.891147] ? lock_release+0xa00/0xa00 [ 554.895135] ? perf_trace_sched_process_exec+0x860/0x860 [ 554.900607] ? usercopy_warn+0x110/0x110 [ 554.904870] __shmem_file_setup.part.50+0x83/0x2a0 [ 554.909813] shmem_file_setup+0x65/0x90 [ 554.913799] __x64_sys_memfd_create+0x2af/0x4f0 [ 554.918483] ? memfd_fcntl+0x1910/0x1910 [ 554.922584] do_syscall_64+0x1b9/0x820 [ 554.926492] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 554.931872] ? syscall_return_slowpath+0x5e0/0x5e0 [ 554.936837] ? trace_hardirqs_on_caller+0x310/0x310 [ 554.941873] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 554.946895] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 554.946911] ? __switch_to_asm+0x40/0x70 [ 554.946925] ? __switch_to_asm+0x34/0x70 [ 554.946947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 554.946971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 554.946983] RIP: 0033:0x457569 [ 554.947000] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:28:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 554.947010] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 554.957754] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000457569 [ 554.966630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 554.966640] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 554.966650] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fb5435a06d4 [ 554.966659] R13: 00000000004c51cb R14: 00000000004d8fb0 R15: 0000000000000003 [ 555.057132] hfsplus: session requires an argument [ 555.072337] hfsplus: unable to parse mount options 11:28:02 executing program 3: r0 = socket$unix(0x1, 0x805, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0xce666e322954966d) setresgid(0x0, r3, 0x0) setregid(0x0, r3) 11:28:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="89000000f8ffffffd94047d5d8b867e554ccc1a57dabed8bed4b85d0144a56f4bf2cc548a0f3b69b30017f10b2dd076a06dd67d54a3e13464bdfc8f6b6986b7f560f177364ee3586dfdd7a0ef257fff0e53c4574dda8249ce58f8c36f2b8c4ced1758b3085d4204b38b9559ff9ed63ea8c2c62d767cb2f177302000000121fbb5f8239200c8e56d46ef23951979c5d5901b7a08843e46e3cfd0ef7813402122e23e9b6423ea91987450e52fa76df0457a472ebd7955c46558c57db827a5a420cd5a41f73e47994efc60637dfc5c9915a4ba12d6c733144f72d2eb882b2b5f6363f4987ebb9ba489b81a95aba34377394f9c40e2d353f7ab71e0ee5b5ed17cbb76fe2014f3d14ec22e30cf076ce12235b7ab100eb530bea15cc63d296b6d5f0ce3a2a463f30d200dc72228e7910337085000000000000"], &(0x7f00000000c0), 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:03 executing program 5 (fault-call:0 fault-nth:3): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 555.229368] FAULT_INJECTION: forcing a failure. [ 555.229368] name failslab, interval 1, probability 0, space 0, times 0 [ 555.248281] CPU: 0 PID: 23876 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 555.255657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.255665] Call Trace: [ 555.255691] dump_stack+0x244/0x39d [ 555.255747] ? dump_stack_print_info.cold.1+0x20/0x20 [ 555.255783] should_fail.cold.4+0xa/0x17 [ 555.255807] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 555.255830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.255861] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 555.255882] ? rcu_pm_notify+0xc0/0xc0 [ 555.255909] ? find_held_lock+0x36/0x1c0 [ 555.255949] ? perf_trace_sched_process_exec+0x860/0x860 [ 555.255981] __should_failslab+0x124/0x180 [ 555.256003] should_failslab+0x9/0x14 [ 555.256018] kmem_cache_alloc+0x2be/0x730 [ 555.256038] ? mpol_shared_policy_init+0x235/0x650 11:28:03 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000027020924729f58f20003000000fe80000000f60000000000000000001f20000000000000007e000000b246000000000000000000000000000015000000000000000000000000000000000000f81e4a0000000000000000000000000000000500000000000000000000000800000000000000000000000000000100000000000000d2337e4d33d987a04d9298c78eaf05ca781736ac7848fd00537d5ea510bd231b019777799f00000000000000000000000000000000000000b956565c87120000000000000000000000"], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0x7, &(0x7f0000000580)='system\x00', 0xffffffffffffffff}, 0x30) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x1ff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={r4, 0x0, 0x0, 0xfffffffffffff547, 0x8}, &(0x7f0000000540)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400480, 0x21) socket$inet_dccp(0x2, 0x6, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000000880)=0xc) [ 555.256057] ? current_time+0x72/0x1b0 [ 555.256080] __d_alloc+0xc8/0xb90 [ 555.256103] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 555.256120] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 555.256231] ? ktime_get_coarse_real_ts64+0x22e/0x370 [ 555.256256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.355694] ? timespec64_trunc+0xea/0x180 [ 555.359983] ? inode_init_owner+0x340/0x340 [ 555.364322] ? _raw_spin_unlock+0x2c/0x50 [ 555.368493] ? current_time+0x131/0x1b0 [ 555.372480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 555.378048] ? __lockdep_init_map+0x105/0x590 [ 555.382574] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 555.388128] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 555.393696] d_alloc_pseudo+0x1d/0x30 [ 555.397521] alloc_file_pseudo+0x158/0x3f0 [ 555.401776] ? alloc_file+0x4d0/0x4d0 [ 555.405617] ? usercopy_warn+0x110/0x110 [ 555.409705] __shmem_file_setup.part.50+0x110/0x2a0 [ 555.414779] shmem_file_setup+0x65/0x90 [ 555.418783] __x64_sys_memfd_create+0x2af/0x4f0 [ 555.423460] ? memfd_fcntl+0x1910/0x1910 [ 555.427548] do_syscall_64+0x1b9/0x820 [ 555.431468] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 555.436860] ? syscall_return_slowpath+0x5e0/0x5e0 [ 555.441808] ? trace_hardirqs_on_caller+0x310/0x310 [ 555.446842] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 555.451879] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 555.458570] ? __switch_to_asm+0x40/0x70 [ 555.462633] ? __switch_to_asm+0x34/0x70 [ 555.466471] IPVS: ftp: loaded support on port[0] = 21 [ 555.466705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.466747] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.481938] RIP: 0033:0x457569 [ 555.485146] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.504077] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 555.511781] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000457569 [ 555.519072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 11:28:03 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000002c0)="527e6d41463034fe4d6a14b4856059af649b2d07a703fc71fc5296a387a02c45f4070dddbfd10c837a", 0x29) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000800)="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", 0x1000) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) flistxattr(r3, &(0x7f0000000180)=""/11, 0xb) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r2, r3, 0x0, 0x10000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) inotify_rm_watch(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6=@ipv4={[], [], @rand_addr}}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000980)=""/93) [ 555.526344] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 555.533602] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fb5435a06d4 [ 555.540870] R13: 00000000004c51cb R14: 00000000004d8fb0 R15: 0000000000000003 11:28:03 executing program 5 (fault-call:0 fault-nth:4): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 555.649054] audit: type=1800 audit(1542713283.458:96): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=17058 res=0 [ 555.715361] audit: type=1804 audit(1542713283.468:97): pid=23889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir007231757/syzkaller.JjzQSN/429/file0" dev="sda1" ino=17058 res=1 [ 555.743315] FAULT_INJECTION: forcing a failure. [ 555.743315] name failslab, interval 1, probability 0, space 0, times 0 [ 555.755217] CPU: 1 PID: 23895 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 555.762597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.771951] Call Trace: [ 555.771979] dump_stack+0x244/0x39d [ 555.772004] ? dump_stack_print_info.cold.1+0x20/0x20 [ 555.772071] should_fail.cold.4+0xa/0x17 [ 555.778761] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 555.778794] ? rcu_pm_notify+0xc0/0xc0 [ 555.778825] ? zap_class+0x640/0x640 [ 555.778842] ? memset+0x31/0x40 [ 555.778859] ? zap_class+0x640/0x640 [ 555.778879] ? find_held_lock+0x36/0x1c0 [ 555.778910] ? perf_trace_sched_process_exec+0x860/0x860 [ 555.778925] ? lock_downgrade+0x900/0x900 [ 555.778948] __should_failslab+0x124/0x180 [ 555.788313] should_failslab+0x9/0x14 [ 555.788330] kmem_cache_alloc+0x2be/0x730 [ 555.788356] __alloc_file+0xa8/0x470 [ 555.788377] ? file_free_rcu+0xd0/0xd0 [ 555.797376] ? d_instantiate+0x79/0xa0 [ 555.797395] ? lock_downgrade+0x900/0x900 [ 555.797418] ? kasan_check_read+0x11/0x20 [ 555.797436] ? do_raw_spin_unlock+0xa7/0x330 [ 555.804402] ? do_raw_spin_trylock+0x270/0x270 11:28:03 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x6) recvfrom(r0, &(0x7f0000000240)=""/182, 0xb6, 0x10040, &(0x7f0000000300)=@rc={0x1f, {0x2, 0x1, 0x9, 0x4, 0x100, 0x1}, 0x6a}, 0x80) fcntl$dupfd(r1, 0x0, r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @empty, @dev={0xfe, 0x80, [], 0x19}, 0x8, 0xfd, 0xffffffffffffffff, 0x0, 0x8, 0x40, r2}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e20, @dev}}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x1a03, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) [ 555.804423] alloc_empty_file+0x72/0x170 [ 555.804441] alloc_file+0x5e/0x4d0 [ 555.817655] ? _raw_spin_unlock+0x2c/0x50 [ 555.817680] alloc_file_pseudo+0x261/0x3f0 [ 555.817701] ? alloc_file+0x4d0/0x4d0 [ 555.817736] ? usercopy_warn+0x110/0x110 [ 555.829911] __shmem_file_setup.part.50+0x110/0x2a0 [ 555.829935] shmem_file_setup+0x65/0x90 [ 555.829954] __x64_sys_memfd_create+0x2af/0x4f0 [ 555.829970] ? memfd_fcntl+0x1910/0x1910 [ 555.830012] do_syscall_64+0x1b9/0x820 [ 555.837855] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 555.837876] ? syscall_return_slowpath+0x5e0/0x5e0 [ 555.837896] ? trace_hardirqs_on_caller+0x310/0x310 [ 555.837914] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 555.837937] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 555.849866] ? __switch_to_asm+0x40/0x70 [ 555.849881] ? __switch_to_asm+0x34/0x70 [ 555.849904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 555.849927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 555.849943] RIP: 0033:0x457569 [ 555.863078] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.863087] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 555.863117] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000457569 [ 555.863127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 555.863136] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 555.863144] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fb5435a06d4 11:28:03 executing program 5 (fault-call:0 fault-nth:5): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 555.863153] R13: 00000000004c51cb R14: 00000000004d8fb0 R15: 0000000000000003 [ 555.900549] audit: type=1804 audit(1542713283.578:98): pid=23893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir007231757/syzkaller.JjzQSN/429/file0" dev="sda1" ino=17058 res=1 11:28:03 executing program 3: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080), 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000002c0)="527e6d41463034fe4d6a14b4856059af649b2d07a703fc71fc5296a387a02c45f4070dddbfd10c837a", 0x29) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000000800)="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", 0x1000) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)) flistxattr(r3, &(0x7f0000000180)=""/11, 0xb) sendmsg$nl_xfrm(r2, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendfile(r2, r3, 0x0, 0x10000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) inotify_rm_watch(r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6=@ipv4={[], [], @rand_addr}}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000980)=""/93) 11:28:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xd0000, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000000c0)={0x9, 0x20, 0x8, 0xffffffffffff8000}) [ 556.157170] FAULT_INJECTION: forcing a failure. [ 556.157170] name failslab, interval 1, probability 0, space 0, times 0 [ 556.222709] CPU: 0 PID: 23906 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 556.230186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.239566] Call Trace: [ 556.242181] dump_stack+0x244/0x39d [ 556.245841] ? dump_stack_print_info.cold.1+0x20/0x20 [ 556.251065] ? is_bpf_text_address+0xd3/0x170 [ 556.251880] audit: type=1800 audit(1542713284.068:99): pid=23912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=17298 res=0 [ 556.255586] should_fail.cold.4+0xa/0x17 [ 556.282122] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 556.282152] ? save_stack+0xa9/0xd0 [ 556.290902] ? save_stack+0x43/0xd0 [ 556.294560] ? kasan_kmalloc+0xc7/0xe0 [ 556.298489] ? kasan_slab_alloc+0x12/0x20 [ 556.298505] ? kmem_cache_alloc+0x12e/0x730 [ 556.298520] ? __alloc_file+0xa8/0x470 [ 556.298536] ? alloc_empty_file+0x72/0x170 [ 556.298558] ? find_held_lock+0x36/0x1c0 [ 556.298593] ? perf_trace_sched_process_exec+0x860/0x860 [ 556.310935] ? check_preemption_disabled+0x48/0x280 [ 556.310962] __should_failslab+0x124/0x180 [ 556.310982] should_failslab+0x9/0x14 [ 556.310998] kmem_cache_alloc+0x2be/0x730 [ 556.311020] ? rcu_read_lock_sched_held+0x14f/0x180 [ 556.319407] selinux_file_alloc_security+0xb4/0x190 [ 556.325835] audit: type=1804 audit(1542713284.128:100): pid=23912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir007231757/syzkaller.JjzQSN/430/file0" dev="sda1" ino=17298 res=1 [ 556.329854] security_file_alloc+0x4c/0xa0 [ 556.329876] __alloc_file+0x12a/0x470 [ 556.329893] ? file_free_rcu+0xd0/0xd0 [ 556.329910] ? d_instantiate+0x79/0xa0 [ 556.329931] ? lock_downgrade+0x900/0x900 [ 556.337954] ? kasan_check_read+0x11/0x20 [ 556.337971] ? do_raw_spin_unlock+0xa7/0x330 [ 556.337989] ? do_raw_spin_trylock+0x270/0x270 [ 556.347150] alloc_empty_file+0x72/0x170 [ 556.347172] alloc_file+0x5e/0x4d0 [ 556.347196] ? _raw_spin_unlock+0x2c/0x50 [ 556.379028] alloc_file_pseudo+0x261/0x3f0 [ 556.379049] ? alloc_file+0x4d0/0x4d0 [ 556.379071] ? usercopy_warn+0x110/0x110 [ 556.379097] __shmem_file_setup.part.50+0x110/0x2a0 [ 556.379118] shmem_file_setup+0x65/0x90 [ 556.379134] __x64_sys_memfd_create+0x2af/0x4f0 [ 556.379149] ? memfd_fcntl+0x1910/0x1910 [ 556.379175] do_syscall_64+0x1b9/0x820 [ 556.379191] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 556.379209] ? syscall_return_slowpath+0x5e0/0x5e0 [ 556.379231] ? trace_hardirqs_on_caller+0x310/0x310 [ 556.391173] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 556.391193] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 556.391208] ? __switch_to_asm+0x40/0x70 [ 556.391235] ? __switch_to_asm+0x34/0x70 [ 556.391255] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.391278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 556.391289] RIP: 0033:0x457569 11:28:04 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x6) recvfrom(r0, &(0x7f0000000240)=""/182, 0xb6, 0x10040, &(0x7f0000000300)=@rc={0x1f, {0x2, 0x1, 0x9, 0x4, 0x100, 0x1}, 0x6a}, 0x80) fcntl$dupfd(r1, 0x0, r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1, @empty, @dev={0xfe, 0x80, [], 0x19}, 0x8, 0xfd, 0xffffffffffffffff, 0x0, 0x8, 0x40, r2}) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000200)={'syz_tun\x00', {0x2, 0x4e20, @dev}}) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp={0x18, 0x1a03, {0x0, @rand_addr}}, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) 11:28:04 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0), &(0x7f00000001c0)='\v'}, 0x20) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) close(r0) 11:28:04 executing program 5 (fault-call:0 fault-nth:6): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 556.391328] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 556.399404] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 556.399419] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000000457569 [ 556.399426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bc787 [ 556.399434] RBP: 000000000072bf00 R08: 0000000000000000 R09: 00000000fbad8001 [ 556.399443] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fb5435a06d4 [ 556.399451] R13: 00000000004c51cb R14: 00000000004d8fb0 R15: 0000000000000003 11:28:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @mcast2, 0x7}, 0x7b) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000480)={r1, @broadcast}, 0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000200)=0x747d, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000000000000000000000000000000032105e8049a98ce5fcce"], 0x28}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 556.670160] FAULT_INJECTION: forcing a failure. [ 556.670160] name failslab, interval 1, probability 0, space 0, times 0 [ 556.724695] CPU: 0 PID: 23933 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 556.732148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 556.736987] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=23934 comm=syz-executor3 [ 556.741504] Call Trace: [ 556.741533] dump_stack+0x244/0x39d [ 556.741558] ? dump_stack_print_info.cold.1+0x20/0x20 [ 556.741592] should_fail.cold.4+0xa/0x17 [ 556.741612] ? find_held_lock+0x36/0x1c0 [ 556.741633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 556.741659] ? lock_downgrade+0x900/0x900 [ 556.772273] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=23934 comm=syz-executor3 [ 556.773089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.773112] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.773130] ? timespec64_trunc+0xea/0x180 [ 556.773150] ? inode_init_owner+0x340/0x340 [ 556.813860] ? find_held_lock+0x36/0x1c0 [ 556.817927] ? perf_trace_sched_process_exec+0x860/0x860 [ 556.823369] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 556.828902] __should_failslab+0x124/0x180 [ 556.833147] should_failslab+0x9/0x14 [ 556.836937] kmem_cache_alloc+0x2be/0x730 [ 556.841077] ? do_sys_ftruncate+0x428/0x550 [ 556.845412] ? lock_downgrade+0x900/0x900 [ 556.849578] getname_flags+0xd0/0x590 [ 556.853386] ? __lock_is_held+0xb5/0x140 [ 556.857490] getname+0x19/0x20 [ 556.860692] do_sys_open+0x383/0x700 [ 556.864482] ? filp_open+0x80/0x80 [ 556.868016] ? trace_hardirqs_off_caller+0x310/0x310 [ 556.873120] ? do_sys_ftruncate+0x449/0x550 [ 556.877446] __x64_sys_open+0x7e/0xc0 [ 556.881239] do_syscall_64+0x1b9/0x820 [ 556.885117] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 556.890470] ? syscall_return_slowpath+0x5e0/0x5e0 [ 556.895392] ? trace_hardirqs_on_caller+0x310/0x310 [ 556.900399] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 556.905769] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 556.912447] ? __switch_to_asm+0x40/0x70 [ 556.916508] ? __switch_to_asm+0x34/0x70 [ 556.920561] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 556.925392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 556.930582] RIP: 0033:0x4111a1 [ 556.933784] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 556.952711] RSP: 002b:00007fb54359fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 556.960424] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004111a1 [ 556.967680] RDX: 00007fb54359fafa RSI: 0000000000000002 RDI: 00007fb54359faf0 11:28:04 executing program 3: mkdir(&(0x7f0000000180)='./file1/file0\x00', 0x80) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x28000, 0x0) ioctl$VT_RELDISP(r1, 0x5605) mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x0) socketpair$unix(0x1, 0x100000000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000280)='./file1/file0\x00', 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect(r2, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @multicast2}, 0x0, 0x0, 0x1, 0x2}}, 0x80) renameat2(r0, &(0x7f0000000000)='./file1/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) [ 556.974938] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 556.982192] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 556.989444] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 557.190626] device bridge_slave_1 left promiscuous mode [ 557.196206] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.249143] device bridge_slave_0 left promiscuous mode [ 557.254567] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.320354] team0 (unregistering): Port device team_slave_1 removed [ 557.330732] team0 (unregistering): Port device team_slave_0 removed [ 557.343464] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 557.371801] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 557.446744] bond0 (unregistering): Released all slaves [ 557.897483] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.904376] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.911967] device bridge_slave_0 entered promiscuous mode [ 557.959099] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.965547] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.973389] device bridge_slave_1 entered promiscuous mode [ 558.018061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 558.063843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 558.202936] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 558.250469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 558.296021] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 558.303300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 558.353336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 558.360451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 558.500370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 558.507871] team0: Port device team_slave_0 added [ 558.552991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 558.560900] team0: Port device team_slave_1 added [ 558.606079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 558.654869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 558.699534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 558.706684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 558.723242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 558.749050] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 558.756049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 558.765392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 559.118849] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.125234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.131938] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.138322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.145484] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 559.188286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 560.090063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.182671] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 560.279255] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 560.285440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 560.293237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.382437] 8021q: adding VLAN 0 to HW filter on device team0 11:28:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) sched_setattr(r1, &(0x7f0000000300)={0x30, 0x7, 0x1, 0x2, 0xdd, 0x8, 0x8000, 0xf0}, 0x0) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(r0, 0x0, 0x4, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:08 executing program 1: syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0), 0x0, 0x1b3}], 0x0, &(0x7f0000001d80)) chroot(&(0x7f0000000040)='./file0\x00') getresgid(&(0x7f00000002c0), &(0x7f00000007c0), &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000980)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000a80)=0xe8) syz_mount_image$vfat(&(0x7f0000000bc0)='vfat\x00', &(0x7f0000000c00)='./file0\x00', 0x80000000, 0x1, &(0x7f0000000d40)=[{&(0x7f0000000c40)="f2d4d1cf6647e07342d827de784bdf3c003f5e9f4b154a73bebde2808ce7582fa23ae0d8088d17ca3e4818c763a3d599bac8c359da6698ebba240bce43ed941aad3a904b6daba07f88b24fa2ab28246da7224fd4ec0c661516323ec3c1ae9b46d5b52959aefacfb235525bcd34f1f142f914c4561a22c76d74505c0cd5c430b35c02b5b9c2958ed06023cda9a6e5b087384a2831f1813bf3647f9469a0728a9762c84f5976d3d54cad548e76e10cf73ff83fca9ef08e1ea7a7fae6915c41b8f482481675aa50cf0f567bc5d56a7af1e895cf7da2ccc0b2c814520fa2cedaef5c0b03ad6272633c14aac296307a9b9b", 0xef}], 0x40, &(0x7f0000000d80)={[{@shortname_winnt='shortname=winnt'}, {@utf8no='utf8=0'}, {@nonumtail='nnonumtail=1'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x35, 0x62, 0x76, 0x75, 0x62, 0x64], 0x2d, [0x39, 0x34, 0x0, 0x34], 0x2d, [0x37, 0x61, 0x3f, 0x7f], 0x2d, [0x38, 0x35, 0x77, 0x3f], 0x2d, [0x61, 0x0, 0x36, 0x65, 0x7b, 0x63, 0x77, 0x37]}}}]}) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x6, &(0x7f0000000700)=[{&(0x7f0000000100)="909f752d3f70b1a6f1a9fa6ed843f7cc202f67c1792212883bf09a5aa75389ac1c33ca4f54cc715a661bea7ddebe5dd0004a033910365d1e1b1ec1fd04e2eacd1fbf7f7b17fbc49ffef443aa560cb119de34f2fc614931c6e7eb469b9d648f4a6ac5b8f66a5cff28f72955f18bd826e9e7eda86c253e20d4ab5d416b3150bce44aa8b3473fa151fdd340bec8a69a0d066e40b01e6409fc5dadcd4e4e10a252425d84e9b5c7f52cdfd724f9f495e1bf27b6344a8bf767005a419ef89348177c95bb47671e04158892a56d5c8c81c0f3a04d5d570233964f", 0xd7, 0x100}, {&(0x7f0000000340)="a7badc1d6d85f87d2c566242fd0efa9de5dd9fa98129e5e8c0dcb920f04c64977b5ccd6c7c500a6cbad804f6e79e28b649cb04212162bd733e9a3b82ed5a3356906e6b948923258514ab186a8b65b20b1e640aa28151274a55dd123dc9ae86c4736bfbe427d061412864b741f34643420b461f2f98ad314d7c6360b3048d89afd67598042fb2b96fc55fea8f933df1049c19ce2804cd3a2cf865b39d5be0575c6f97283f7cdab80034438267e701e102bbc042e39a43d9442ee348eb4c279364e0a99e65c5a957ecc6d4a7e8ad8ba760f62753ea6ebbec595d9388f07cf380096df77fb7b28df4a6e65f0e3fc0c6b2f765a6541cd1cb74", 0xf7, 0xffffffffffffffe5}, {&(0x7f0000000440)="e3ba689d82ddaf4aeb308c667efda1107004c776e989fa25baff6d725cdb5a4b0dc419e3cb38ece8774df15b4934cde9b6225e6b2398d5671f2aecbe7cb0a6eaee4bd8ab7e9ddc56a19b7d97ad958f695750fe117e9503e6b47da660c29e3a5cfbbd4449f98ed321fa48a04aa5e5c5b8e2603f89b6cc92f79c792ae8381ed3e281735ea0495423f677d238f7fb5aa9df3d361127413bf5605fba91e31de90d38666823f47627a147e3e3915bb9b158a773d03976daf9d31ff541864ad1cf01c23a3c59df5fe3d838728d9ff8fd417198d3a6ffaff7703ed80c70454d3dd51225af1dbd476de3e382b38414c9a3dd67f71563a5f5d262a003", 0xf8, 0x5}, {&(0x7f0000000540)="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", 0xfc, 0x1ff}, {&(0x7f0000000200)="aed396e3868fb241727f66bde1fd88d79867f72ba031f42630e7a326fa0ec7c8c987a6602480e7ccd718b88279e49486a8fc26f4a60f2c88ce3af08a0f4d4b49758a0dd89920cb5cbacf4595696ea6f1e80a3d1c9bc72268bccd15e0bfa98e014ca90f10e37b697887e1b5ad4e0deba70d03217d59b668d890b6ab91db1588", 0x7f, 0x7fffffff}, {&(0x7f0000000640)="217b261643e4ba0027698aa696e750dd79b8d955eabe4d145f39133559af916d29babb426849e33ecb50ae031f1e2b0895cf85022f8752e403efe177c7fa6b5225a7360725e1e1aed66a12bdb2001f6deb61f65cba410a1e5c34a3d70fd21d8e882b8d541d43ff17ec5fc79459547f216b4c7ad99517cb98b223e1bf2cc8ab99a57a", 0x82, 0x1}], 0x1000, &(0x7f0000000ac0)={[{@nojoliet='nojoliet'}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@check_strict='check=strict'}, {@gid={'gid', 0x3d, r0}}, {@uid={'uid', 0x3d, r1}}, {@nocompress='nocompress'}, {@map_off='map=off'}], [{@fsuuid={'fsuuid', 0x3d, {[0x7f, 0x76, 0x64, 0x77, 0x33, 0x37, 0x73, 0x33], 0x2d, [0x36, 0x39, 0x65, 0x38], 0x2d, [0x61, 0x32, 0x3f, 0x75], 0x2d, [0x77, 0x31, 0x32, 0x34], 0x2d, [0x30, 0x65, 0x63, 0x31, 0x39, 0x0, 0x37, 0x35]}}}, {@measure='measure'}, {@dont_measure='dont_measure'}, {@euid_gt={'euid>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, ')'}}, {@fsmagic={'fsmagic'}}]}) 11:28:08 executing program 5 (fault-call:0 fault-nth:7): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x200, 0x121000) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1d) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000200)="f58bb7e47e153ecd764843ba226b8929ee6f74cfe1f93df557edb98d66d80ae5bb91397da30064842fc19e7a9a924e9c1d7f0408a74db9d10e30239ec9e128840ec4ad0a5700b890058970f91ba9c7aee02006a2fea50d75f0b8ca22b272fd0c9239ce1b25cc0c37a1206acf8510b91c4587f3c17a72cb1fa8c0c8f4f2eb585697a43a781ff0d6f852b480309d3f0b8ccc48740619fcce52470c6c12d4cf2626b639e479f8be3be1910d25929debe549bb762866021f36c798080ebaead298c25573ad215fe9ee43b062c3f98fd403366f13b137fbd6e0c9864b1373ec", &(0x7f0000000080)="3aaff2416dd73681f7", 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x3, 0x0, 0x8, 0x0, r1, 0x4000000000}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/79, 0x4f}}], 0x1, 0x0, &(0x7f0000007040)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0), 0x200000000000014c) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0)=0x7b, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x5437, 0x0) semget$private(0x0, 0x2, 0x92) semget$private(0x0, 0x2, 0x14) semctl$IPC_RMID(0x0, 0x3f00, 0x10) write$selinux_user(0xffffffffffffffff, &(0x7f0000000040)={'system_u:object_r:sulogin_exec_t:s0', 0x20, 'system_u\x00'}, 0x2d) r3 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x40, 0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 561.028788] FAULT_INJECTION: forcing a failure. [ 561.028788] name failslab, interval 1, probability 0, space 0, times 0 [ 561.051593] erofs: read_super, device -> /dev/loop1 [ 561.061595] erofs: options -> [ 561.079249] erofs: cannot read erofs superblock [ 561.086682] CPU: 1 PID: 24207 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 561.094097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.103465] Call Trace: [ 561.106104] dump_stack+0x244/0x39d [ 561.109787] ? dump_stack_print_info.cold.1+0x20/0x20 [ 561.115023] ? __lock_acquire+0x62f/0x4c20 [ 561.119286] should_fail.cold.4+0xa/0x17 [ 561.123366] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 561.128507] ? find_held_lock+0x36/0x1c0 [ 561.132603] ? perf_trace_sched_process_exec+0x860/0x860 [ 561.138082] __should_failslab+0x124/0x180 [ 561.142350] should_failslab+0x9/0x14 [ 561.146166] kmem_cache_alloc+0x2be/0x730 [ 561.150323] ? zap_class+0x640/0x640 [ 561.154049] ? print_usage_bug+0xc0/0xc0 [ 561.158123] ? mark_held_locks+0x130/0x130 [ 561.162393] __alloc_file+0xa8/0x470 [ 561.166119] ? file_free_rcu+0xd0/0xd0 [ 561.170024] ? find_held_lock+0x36/0x1c0 [ 561.174124] ? is_bpf_text_address+0xac/0x170 [ 561.178632] ? lock_downgrade+0x900/0x900 [ 561.182822] ? check_preemption_disabled+0x48/0x280 [ 561.187854] alloc_empty_file+0x72/0x170 [ 561.191946] path_openat+0x170/0x5150 [ 561.195811] ? rcu_softirq_qs+0x20/0x20 [ 561.199811] ? unwind_dump+0x190/0x190 [ 561.203772] ? zap_class+0x640/0x640 [ 561.207506] ? path_lookupat.isra.43+0xc00/0xc00 [ 561.212273] ? unwind_get_return_address+0x61/0xa0 [ 561.217223] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 561.222261] ? expand_files.part.8+0x571/0x9a0 [ 561.226873] ? find_held_lock+0x36/0x1c0 [ 561.230972] ? __alloc_fd+0x347/0x6e0 [ 561.234821] ? lock_downgrade+0x900/0x900 [ 561.238986] ? getname+0x19/0x20 [ 561.242371] ? kasan_check_read+0x11/0x20 [ 561.246528] ? do_raw_spin_unlock+0xa7/0x330 [ 561.250946] ? do_raw_spin_trylock+0x270/0x270 [ 561.255546] ? __lock_is_held+0xb5/0x140 [ 561.259616] ? __check_object_size+0xb1/0x782 [ 561.264133] ? _raw_spin_unlock+0x2c/0x50 [ 561.268323] ? __alloc_fd+0x347/0x6e0 [ 561.272148] do_filp_open+0x255/0x380 [ 561.275961] ? may_open_dev+0x100/0x100 [ 561.279963] ? get_unused_fd_flags+0x122/0x1a0 [ 561.284560] ? __alloc_fd+0x6e0/0x6e0 [ 561.288377] ? __lock_is_held+0xb5/0x140 [ 561.292455] do_sys_open+0x568/0x700 [ 561.296183] ? filp_open+0x80/0x80 [ 561.299749] ? trace_hardirqs_off_caller+0x310/0x310 [ 561.304862] ? do_sys_ftruncate+0x449/0x550 [ 561.309210] __x64_sys_open+0x7e/0xc0 [ 561.313039] do_syscall_64+0x1b9/0x820 [ 561.316937] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 561.322311] ? syscall_return_slowpath+0x5e0/0x5e0 [ 561.327258] ? trace_hardirqs_on_caller+0x310/0x310 [ 561.332318] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 561.337354] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 561.344024] ? __switch_to_asm+0x40/0x70 [ 561.348092] ? __switch_to_asm+0x34/0x70 [ 561.352212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.357107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.362303] RIP: 0033:0x4111a1 11:28:09 executing program 5 (fault-call:0 fault-nth:8): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 561.365536] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 561.384458] RSP: 002b:00007fb54359fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 561.384474] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004111a1 [ 561.384484] RDX: 00007fb54359fafa RSI: 0000000000000002 RDI: 00007fb54359faf0 [ 561.384493] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 561.384517] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 561.384526] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:09 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000027020924729f58f20003000000fe80000000f60000000000000000001f20000000000000007e000000b246000000000000000000000000000015000000000000000000000000000000000000f81e4a0000000000000000000000000000000500000000000000000000000800000000000000000000000000000100000000000000d2337e4d33d987a04d9298c78eaf05ca781736ac7848fd00537d5ea510bd231b019777799f00000000000000000000000000000000000000b956565c87120000000000000000000000"], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0x7, &(0x7f0000000580)='system\x00', 0xffffffffffffffff}, 0x30) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x1ff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={r4, 0x0, 0x0, 0xfffffffffffff547, 0x8}, &(0x7f0000000540)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400480, 0x21) socket$inet_dccp(0x2, 0x6, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000000880)=0xc) 11:28:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000001100)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000540)=""/79, 0x4f}}], 0x1, 0x0, &(0x7f0000007040)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) writev(r1, &(0x7f00000000c0), 0x200000000000014c) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000380)=0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f00000002c0)=0x7b, 0x4) ioctl$TCFLSH(0xffffffffffffffff, 0x5437, 0x0) semget$private(0x0, 0x2, 0x92) semget$private(0x0, 0x2, 0x14) semctl$IPC_RMID(0x0, 0x3f00, 0x10) write$selinux_user(0xffffffffffffffff, &(0x7f0000000040)={'system_u:object_r:sulogin_exec_t:s0', 0x20, 'system_u\x00'}, 0x2d) r3 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x40, 0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000180)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) [ 561.493199] FAULT_INJECTION: forcing a failure. [ 561.493199] name failslab, interval 1, probability 0, space 0, times 0 [ 561.528352] CPU: 0 PID: 24223 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 561.535744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.535752] Call Trace: [ 561.535776] dump_stack+0x244/0x39d [ 561.535801] ? dump_stack_print_info.cold.1+0x20/0x20 [ 561.547758] ? is_bpf_text_address+0xd3/0x170 [ 561.561057] should_fail.cold.4+0xa/0x17 [ 561.565136] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 561.570267] ? save_stack+0xa9/0xd0 [ 561.573909] ? save_stack+0x43/0xd0 [ 561.573924] ? kasan_kmalloc+0xc7/0xe0 [ 561.573941] ? kasan_slab_alloc+0x12/0x20 [ 561.573960] ? kmem_cache_alloc+0x12e/0x730 [ 561.589923] ? __alloc_file+0xa8/0x470 [ 561.593826] ? alloc_empty_file+0x72/0x170 [ 561.598105] ? find_held_lock+0x36/0x1c0 [ 561.602201] ? perf_trace_sched_process_exec+0x860/0x860 [ 561.607672] ? check_preemption_disabled+0x48/0x280 [ 561.612719] __should_failslab+0x124/0x180 [ 561.616993] should_failslab+0x9/0x14 [ 561.620821] kmem_cache_alloc+0x2be/0x730 [ 561.625001] ? rcu_read_lock_sched_held+0x14f/0x180 [ 561.630040] selinux_file_alloc_security+0xb4/0x190 [ 561.635091] security_file_alloc+0x4c/0xa0 [ 561.639345] __alloc_file+0x12a/0x470 [ 561.643148] ? file_free_rcu+0xd0/0xd0 [ 561.647040] ? find_held_lock+0x36/0x1c0 [ 561.651144] ? is_bpf_text_address+0xac/0x170 [ 561.655686] ? lock_downgrade+0x900/0x900 [ 561.659868] ? check_preemption_disabled+0x48/0x280 [ 561.664919] alloc_empty_file+0x72/0x170 [ 561.669001] path_openat+0x170/0x5150 [ 561.672817] ? rcu_softirq_qs+0x20/0x20 [ 561.676804] ? unwind_dump+0x190/0x190 [ 561.680707] ? zap_class+0x640/0x640 [ 561.684467] ? path_lookupat.isra.43+0xc00/0xc00 [ 561.689248] ? unwind_get_return_address+0x61/0xa0 [ 561.694187] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 561.699223] ? expand_files.part.8+0x571/0x9a0 [ 561.703815] ? find_held_lock+0x36/0x1c0 [ 561.707895] ? __alloc_fd+0x347/0x6e0 [ 561.711710] ? lock_downgrade+0x900/0x900 [ 561.715879] ? getname+0x19/0x20 [ 561.719260] ? kasan_check_read+0x11/0x20 [ 561.723419] ? do_raw_spin_unlock+0xa7/0x330 [ 561.727836] ? do_raw_spin_trylock+0x270/0x270 [ 561.732466] ? __lock_is_held+0xb5/0x140 [ 561.736540] ? __check_object_size+0xb1/0x782 11:28:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1) setns(r1, 0x10000000) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x30000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) [ 561.741081] ? _raw_spin_unlock+0x2c/0x50 [ 561.745239] ? __alloc_fd+0x347/0x6e0 [ 561.749063] do_filp_open+0x255/0x380 [ 561.752894] ? may_open_dev+0x100/0x100 [ 561.756899] ? get_unused_fd_flags+0x122/0x1a0 [ 561.761494] ? __alloc_fd+0x6e0/0x6e0 [ 561.765306] ? __lock_is_held+0xb5/0x140 [ 561.769378] do_sys_open+0x568/0x700 [ 561.773573] ? filp_open+0x80/0x80 [ 561.777145] ? trace_hardirqs_off_caller+0x310/0x310 [ 561.782281] ? do_sys_ftruncate+0x449/0x550 [ 561.786616] __x64_sys_open+0x7e/0xc0 [ 561.790431] do_syscall_64+0x1b9/0x820 11:28:09 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000027020924729f58f20003000000fe80000000f60000000000000000001f20000000000000007e000000b246000000000000000000000000000015000000000000000000000000000000000000f81e4a0000000000000000000000000000000500000000000000000000000800000000000000000000000000000100000000000000d2337e4d33d987a04d9298c78eaf05ca781736ac7848fd00537d5ea510bd231b019777799f00000000000000000000000000000000000000b956565c87120000000000000000000000"], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0x7, &(0x7f0000000580)='system\x00', 0xffffffffffffffff}, 0x30) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x1ff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={r4, 0x0, 0x0, 0xfffffffffffff547, 0x8}, &(0x7f0000000540)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400480, 0x21) socket$inet_dccp(0x2, 0x6, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000000880)=0xc) [ 561.794333] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 561.799712] ? syscall_return_slowpath+0x5e0/0x5e0 [ 561.804708] ? trace_hardirqs_on_caller+0x310/0x310 [ 561.809786] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 561.814848] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 561.821552] ? __switch_to_asm+0x40/0x70 [ 561.825622] ? __switch_to_asm+0x34/0x70 [ 561.829695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.834601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.839803] RIP: 0033:0x4111a1 [ 561.843036] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 561.861959] RSP: 002b:00007fb54359fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 561.861976] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004111a1 [ 561.861986] RDX: 00007fb54359fafa RSI: 0000000000000002 RDI: 00007fb54359faf0 [ 561.861994] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 11:28:09 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000c00)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) r2 = getuid() getresuid(&(0x7f00000009c0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000e80)=0xe8) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001040)=0x0, &(0x7f00000011c0), &(0x7f0000001200)) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000014c0)={{}, {0x1, 0x1}, [{0x2, 0x1, r0}, {0x2, 0x2, r1}, {0x2, 0x0, r2}, {0x2, 0x3, r3}, {0x2, 0x2, r4}], {0x4, 0x6}, [{0x8, 0x4, r5}, {0x8, 0x4, r6}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r7 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)) ptrace(0x10, r7) ptrace$cont(0x20, r7, 0x0, 0x0) wait4(r7, 0x0, 0x2000000a, &(0x7f0000000a40)) r8 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r8, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) [ 561.862004] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 561.862013] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffff9c, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) r4 = fanotify_init(0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x0) r6 = dup(r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000440)=""/203) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r5, 0x400, 0x40005, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x20000000) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = accept4(r7, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r9, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r9, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) fanotify_mark(r4, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") creat(&(0x7f0000000040)="2e2f66692e65318c00", 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000680), 0x0) close(r0) 11:28:09 executing program 5 (fault-call:0 fault-nth:9): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 562.115323] FAULT_INJECTION: forcing a failure. [ 562.115323] name failslab, interval 1, probability 0, space 0, times 0 [ 562.180880] CPU: 0 PID: 24257 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 562.188282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.197643] Call Trace: [ 562.197673] dump_stack+0x244/0x39d [ 562.197716] ? dump_stack_print_info.cold.1+0x20/0x20 [ 562.209112] ? is_bpf_text_address+0xd3/0x170 [ 562.213652] should_fail.cold.4+0xa/0x17 [ 562.217750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 562.217779] ? save_stack+0xa9/0xd0 [ 562.226494] ? save_stack+0x43/0xd0 [ 562.230145] ? kasan_kmalloc+0xc7/0xe0 [ 562.234041] ? kasan_slab_alloc+0x12/0x20 [ 562.238200] ? kmem_cache_alloc+0x12e/0x730 [ 562.242547] ? __alloc_file+0xa8/0x470 [ 562.246439] ? alloc_empty_file+0x72/0x170 [ 562.250699] ? find_held_lock+0x36/0x1c0 [ 562.254810] ? perf_trace_sched_process_exec+0x860/0x860 [ 562.260275] ? check_preemption_disabled+0x48/0x280 [ 562.265308] __should_failslab+0x124/0x180 [ 562.269558] should_failslab+0x9/0x14 [ 562.273378] kmem_cache_alloc+0x2be/0x730 [ 562.277543] ? rcu_read_lock_sched_held+0x14f/0x180 [ 562.282591] selinux_file_alloc_security+0xb4/0x190 [ 562.287619] security_file_alloc+0x4c/0xa0 [ 562.291869] __alloc_file+0x12a/0x470 [ 562.295684] ? file_free_rcu+0xd0/0xd0 [ 562.299617] ? find_held_lock+0x36/0x1c0 [ 562.299658] ? is_bpf_text_address+0xac/0x170 [ 562.299675] ? lock_downgrade+0x900/0x900 [ 562.299691] ? check_preemption_disabled+0x48/0x280 [ 562.299716] alloc_empty_file+0x72/0x170 [ 562.321494] path_openat+0x170/0x5150 [ 562.325306] ? rcu_softirq_qs+0x20/0x20 [ 562.329296] ? unwind_dump+0x190/0x190 [ 562.333204] ? zap_class+0x640/0x640 [ 562.336939] ? path_lookupat.isra.43+0xc00/0xc00 [ 562.341706] ? unwind_get_return_address+0x61/0xa0 [ 562.346695] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 562.351774] ? expand_files.part.8+0x571/0x9a0 [ 562.356372] ? find_held_lock+0x36/0x1c0 [ 562.360468] ? __alloc_fd+0x347/0x6e0 [ 562.364289] ? lock_downgrade+0x900/0x900 [ 562.368443] ? getname+0x19/0x20 [ 562.371841] ? kasan_check_read+0x11/0x20 [ 562.376009] ? do_raw_spin_unlock+0xa7/0x330 [ 562.380427] ? do_raw_spin_trylock+0x270/0x270 [ 562.385026] ? __lock_is_held+0xb5/0x140 [ 562.389098] ? __check_object_size+0xb1/0x782 [ 562.393625] ? _raw_spin_unlock+0x2c/0x50 [ 562.397777] ? __alloc_fd+0x347/0x6e0 [ 562.401598] do_filp_open+0x255/0x380 [ 562.405406] ? may_open_dev+0x100/0x100 [ 562.409431] ? get_unused_fd_flags+0x122/0x1a0 [ 562.414022] ? __alloc_fd+0x6e0/0x6e0 [ 562.417838] ? __lock_is_held+0xb5/0x140 [ 562.421912] do_sys_open+0x568/0x700 [ 562.425632] ? filp_open+0x80/0x80 [ 562.429188] ? trace_hardirqs_off_caller+0x310/0x310 [ 562.434303] ? do_sys_ftruncate+0x449/0x550 [ 562.438637] __x64_sys_open+0x7e/0xc0 [ 562.442451] do_syscall_64+0x1b9/0x820 [ 562.446347] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 562.451768] ? syscall_return_slowpath+0x5e0/0x5e0 [ 562.456758] ? trace_hardirqs_on_caller+0x310/0x310 [ 562.461783] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 562.466822] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 562.473522] ? __switch_to_asm+0x40/0x70 [ 562.477593] ? __switch_to_asm+0x34/0x70 [ 562.481667] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.486529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.491741] RIP: 0033:0x4111a1 [ 562.494954] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 562.513906] RSP: 002b:00007fb54359fa80 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 562.521637] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004111a1 11:28:10 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000b00), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) socketpair(0x12, 0xa, 0xdd, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) accept(0xffffffffffffffff, &(0x7f0000000bc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c40)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000d40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400008}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)=@getqdisc={0x4c, 0x26, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, r1, {0xe, 0xfff3}, {0x0, 0xffff}, {0xfff5, 0x3}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r2 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(r2, 0x0, 0x2000000a, &(0x7f0000000a40)) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000940)=0x4) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="6dca0d9df9607211ef9ebe0e410664fb0df734a464088a31c7f872860a2ac5098f63ea44ceb3afb63631a879d3f8a618b5af5ed46e88e28c11970acd5701857a892bb34eed2e40b8c2f9d57e8d27713f09a32461500a45b64fc4b7de6889b0821287ced22d31d59598087ddccc6c4cd65ef5eb1ac015dd75d41e3ec19f1f0dab897a52627d15e2cc6ea8ef0e943f7e982964b530737acd090b2e2e9c50cee921d73687c00dffd4e60bb5450957fcfc6ea0e39f0e45dd1f86139d85a78e142e47f204cd805111cf11460b69178b878771d8584860e79a32628126e0b4bf90df919fbbd7bcbf39ea337398e5cfe3"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 11:28:10 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x101000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x3c, 0x3, 0x3, 0xa, 0x0, 0x4, 0x1, 0x75}) eventfd(0x7fffffff) close(r0) 11:28:10 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000027020924729f58f20003000000fe80000000f60000000000000000001f20000000000000007e000000b246000000000000000000000000000015000000000000000000000000000000000000f81e4a0000000000000000000000000000000500000000000000000000000800000000000000000000000000000100000000000000d2337e4d33d987a04d9298c78eaf05ca781736ac7848fd00537d5ea510bd231b019777799f00000000000000000000000000000000000000b956565c87120000000000000000000000"], 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0x7, &(0x7f0000000580)='system\x00', 0xffffffffffffffff}, 0x30) socket$rds(0x15, 0x5, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x1ff}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000500)={r4, 0x0, 0x0, 0xfffffffffffff547, 0x8}, &(0x7f0000000540)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400480, 0x21) socket$inet_dccp(0x2, 0x6, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000440)=0x10) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) ioctl$DRM_IOCTL_CONTROL(r5, 0x40086414, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680), &(0x7f0000000880)=0xc) [ 562.528912] RDX: 00007fb54359fafa RSI: 0000000000000002 RDI: 00007fb54359faf0 [ 562.536187] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 562.543463] R10: 0000000000000075 R11: 0000000000000293 R12: 0000000000000004 [ 562.550774] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:10 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1) setns(r1, 0x10000000) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x30000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 11:28:10 executing program 5 (fault-call:0 fault-nth:10): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:10 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000c00)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000012c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@mcast1}}, &(0x7f0000000980)=0xe8) r2 = getuid() getresuid(&(0x7f00000009c0), &(0x7f0000000d00), &(0x7f0000000d40)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000013c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000e80)=0xe8) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001040)=0x0, &(0x7f00000011c0), &(0x7f0000001200)) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f00000014c0)={{}, {0x1, 0x1}, [{0x2, 0x1, r0}, {0x2, 0x2, r1}, {0x2, 0x0, r2}, {0x2, 0x3, r3}, {0x2, 0x2, r4}], {0x4, 0x6}, [{0x8, 0x4, r5}, {0x8, 0x4, r6}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r7 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r7, r7, 0x16, &(0x7f0000000100)) ptrace(0x10, r7) ptrace$cont(0x20, r7, 0x0, 0x0) wait4(r7, 0x0, 0x2000000a, &(0x7f0000000a40)) r8 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r8, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) [ 562.871484] FAULT_INJECTION: forcing a failure. [ 562.871484] name failslab, interval 1, probability 0, space 0, times 0 11:28:10 executing program 0: socket$rds(0x15, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) 11:28:10 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) semget$private(0x0, 0x1, 0x0) fallocate(r0, 0x4, 0x2, 0x9) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4003, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0}, &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000300)={r3, 0xd097, 0x200, 0x6, 0x7, 0xe26, 0x7bb}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) [ 563.078822] CPU: 0 PID: 24284 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 563.086411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.095787] Call Trace: [ 563.098389] dump_stack+0x244/0x39d [ 563.102044] ? dump_stack_print_info.cold.1+0x20/0x20 [ 563.107287] should_fail.cold.4+0xa/0x17 [ 563.111366] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 563.116479] ? down_write_nested+0x130/0x130 [ 563.120891] ? down_read+0x120/0x120 [ 563.124629] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 563.130175] ? zap_class+0x640/0x640 [ 563.133895] ? lock_acquire+0x1ed/0x520 [ 563.137947] ? lo_ioctl+0x8e/0x1d60 [ 563.141596] ? find_held_lock+0x36/0x1c0 [ 563.145667] ? __lock_is_held+0xb5/0x140 [ 563.149779] ? perf_trace_sched_process_exec+0x860/0x860 [ 563.155244] __should_failslab+0x124/0x180 [ 563.159486] should_failslab+0x9/0x14 [ 563.163290] kmem_cache_alloc_trace+0x2d7/0x750 [ 563.167967] ? check_preemption_disabled+0x48/0x280 [ 563.173017] __kthread_create_on_node+0x137/0x540 [ 563.177875] ? loop_get_status64+0x140/0x140 [ 563.182292] ? kthread_parkme+0xb0/0xb0 [ 563.186288] ? __lockdep_init_map+0x105/0x590 [ 563.190792] ? __lockdep_init_map+0x105/0x590 [ 563.195294] ? loop_get_status64+0x140/0x140 [ 563.199713] kthread_create_on_node+0xb1/0xe0 [ 563.204225] ? __kthread_create_on_node+0x540/0x540 [ 563.209247] ? kasan_check_read+0x11/0x20 [ 563.213420] lo_ioctl+0x7f6/0x1d60 [ 563.216981] ? lo_rw_aio+0x1ef0/0x1ef0 [ 563.220927] blkdev_ioctl+0x98e/0x21b0 [ 563.224854] ? blkpg_ioctl+0xc10/0xc10 [ 563.228773] ? avc_ss_reset+0x190/0x190 [ 563.232763] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 563.237696] ? kasan_check_read+0x11/0x20 [ 563.241862] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 563.247155] ? rcu_softirq_qs+0x20/0x20 [ 563.251152] ? perf_trace_sched_process_exec+0x860/0x860 [ 563.256641] block_ioctl+0xee/0x130 [ 563.260303] ? blkdev_fallocate+0x400/0x400 [ 563.264659] do_vfs_ioctl+0x1de/0x1790 [ 563.268556] ? ioctl_preallocate+0x300/0x300 [ 563.272975] ? selinux_file_mprotect+0x620/0x620 [ 563.277754] ? rcu_read_lock_sched_held+0x14f/0x180 [ 563.282793] ? kmem_cache_free+0x1db/0x290 [ 563.287032] ? putname+0xf7/0x130 [ 563.290491] ? do_syscall_64+0x9a/0x820 [ 563.294490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 563.300034] ? security_file_ioctl+0x94/0xc0 [ 563.304447] ksys_ioctl+0xa9/0xd0 [ 563.307907] __x64_sys_ioctl+0x73/0xb0 [ 563.311803] do_syscall_64+0x1b9/0x820 [ 563.315695] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 563.321073] ? syscall_return_slowpath+0x5e0/0x5e0 [ 563.326016] ? trace_hardirqs_on_caller+0x310/0x310 [ 563.331057] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 563.336077] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 563.342752] ? __switch_to_asm+0x40/0x70 [ 563.346832] ? __switch_to_asm+0x34/0x70 [ 563.350907] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.355770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.360957] RIP: 0033:0x4573d7 [ 563.364149] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.383064] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.390792] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 563.398060] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 563.405332] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 563.412615] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 563.420145] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:11 executing program 5 (fault-call:0 fault-nth:11): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x200000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 563.696549] FAULT_INJECTION: forcing a failure. [ 563.696549] name failslab, interval 1, probability 0, space 0, times 0 [ 563.708524] CPU: 1 PID: 24310 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 563.715899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.725261] Call Trace: [ 563.727867] dump_stack+0x244/0x39d [ 563.731517] ? dump_stack_print_info.cold.1+0x20/0x20 [ 563.736745] ? mark_held_locks+0x130/0x130 [ 563.741007] should_fail.cold.4+0xa/0x17 [ 563.745125] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 563.750242] ? zap_class+0x640/0x640 [ 563.753966] ? print_usage_bug+0xc0/0xc0 [ 563.758032] ? zap_class+0x640/0x640 [ 563.761796] ? lock_unpin_lock+0x4a0/0x4a0 [ 563.766063] ? __update_load_avg_blocked_se+0x690/0x690 [ 563.771442] ? __update_load_avg_se+0xae0/0xae0 [ 563.776287] ? zap_class+0x640/0x640 [ 563.780026] ? find_held_lock+0x36/0x1c0 [ 563.784104] ? zap_class+0x640/0x640 [ 563.787830] ? find_held_lock+0x36/0x1c0 [ 563.791921] ? print_usage_bug+0xc0/0xc0 [ 563.796007] __should_failslab+0x124/0x180 [ 563.800271] should_failslab+0x9/0x14 [ 563.804102] kmem_cache_alloc+0x47/0x730 [ 563.808179] ? lock_downgrade+0x900/0x900 [ 563.812348] radix_tree_node_alloc.constprop.19+0x1f7/0x370 [ 563.818072] idr_get_free+0x7a4/0xf70 [ 563.821903] ? radix_tree_iter_tag_clear+0x90/0x90 [ 563.826842] ? __save_stack_trace+0x8d/0xf0 [ 563.831188] ? save_stack+0xa9/0xd0 [ 563.834823] ? save_stack+0x43/0xd0 [ 563.838458] ? kasan_kmalloc+0xc7/0xe0 [ 563.842355] ? kasan_slab_alloc+0x12/0x20 [ 563.846508] ? kmem_cache_alloc+0x12e/0x730 [ 563.850953] ? __kernfs_new_node+0x127/0x8d0 [ 563.855375] ? kernfs_new_node+0x95/0x120 [ 563.859617] ? internal_create_group+0x5fc/0xd80 [ 563.864383] ? sysfs_create_group+0x1f/0x30 [ 563.864398] ? lo_ioctl+0x1307/0x1d60 [ 563.864413] ? blkdev_ioctl+0x98e/0x21b0 [ 563.864431] ? block_ioctl+0xee/0x130 [ 563.881246] ? do_vfs_ioctl+0x1de/0x1790 [ 563.885344] ? ksys_ioctl+0xa9/0xd0 [ 563.888986] ? do_syscall_64+0x1b9/0x820 [ 563.893073] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.898449] ? find_held_lock+0x36/0x1c0 [ 563.902530] idr_alloc_u32+0x1d4/0x3a0 [ 563.906916] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 563.911790] ? lock_acquire+0x1ed/0x520 [ 563.915799] ? __kernfs_new_node+0x14e/0x8d0 [ 563.920225] ? __lock_is_held+0xb5/0x140 [ 563.924315] idr_alloc_cyclic+0x166/0x350 [ 563.928478] ? idr_alloc+0x1b0/0x1b0 [ 563.932220] ? __radix_tree_preload+0x1f7/0x280 [ 563.936925] __kernfs_new_node+0x1ee/0x8d0 [ 563.941203] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 563.945988] ? _raw_spin_unlock_irq+0x60/0x80 [ 563.950499] ? __schedule+0x168a/0x21d0 [ 563.954486] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 563.959634] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 563.964758] ? zap_class+0x640/0x640 [ 563.968481] ? zap_class+0x640/0x640 [ 563.968501] ? enqueue_task_fair+0x24d/0xa50 [ 563.968524] ? find_held_lock+0x36/0x1c0 [ 563.968548] kernfs_new_node+0x95/0x120 [ 563.984680] kernfs_create_dir_ns+0x4d/0x160 [ 563.984700] internal_create_group+0x5fc/0xd80 [ 563.984752] ? remove_files.isra.1+0x190/0x190 [ 563.993763] ? up_write+0x7b/0x220 [ 563.993780] ? down_write_nested+0x130/0x130 [ 563.993795] ? down_read+0x120/0x120 [ 563.993822] sysfs_create_group+0x1f/0x30 [ 564.014199] lo_ioctl+0x1307/0x1d60 [ 564.017884] ? lo_rw_aio+0x1ef0/0x1ef0 [ 564.021789] blkdev_ioctl+0x98e/0x21b0 [ 564.025692] ? blkpg_ioctl+0xc10/0xc10 [ 564.029603] ? avc_ss_reset+0x190/0x190 [ 564.033597] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 564.038551] ? kasan_check_read+0x11/0x20 [ 564.042713] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 564.048012] ? rcu_softirq_qs+0x20/0x20 [ 564.052038] ? perf_trace_sched_process_exec+0x860/0x860 [ 564.057500] block_ioctl+0xee/0x130 [ 564.061130] ? blkdev_fallocate+0x400/0x400 [ 564.065456] do_vfs_ioctl+0x1de/0x1790 [ 564.069363] ? ioctl_preallocate+0x300/0x300 [ 564.073779] ? selinux_file_mprotect+0x620/0x620 [ 564.078556] ? rcu_read_lock_sched_held+0x14f/0x180 [ 564.083574] ? kmem_cache_free+0x1db/0x290 [ 564.087821] ? putname+0xf7/0x130 [ 564.091286] ? do_syscall_64+0x9a/0x820 [ 564.095293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.100834] ? security_file_ioctl+0x94/0xc0 [ 564.105253] ksys_ioctl+0xa9/0xd0 [ 564.108714] __x64_sys_ioctl+0x73/0xb0 [ 564.112636] do_syscall_64+0x1b9/0x820 [ 564.116527] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 564.121901] ? syscall_return_slowpath+0x5e0/0x5e0 [ 564.126839] ? trace_hardirqs_on_caller+0x310/0x310 [ 564.131879] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 564.137003] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 564.143673] ? __switch_to_asm+0x40/0x70 [ 564.147751] ? __switch_to_asm+0x34/0x70 [ 564.151826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.156678] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.161894] RIP: 0033:0x4573d7 [ 564.165103] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.184006] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.191717] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 11:28:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x3, "599e0a"}, &(0x7f00000000c0)=0xb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)={r3, 0xd8, "e1f2085fb3d6cd29d579b73e886b2a6b33cd851bd3a53ca5960b1484037c232fe3215edce3d32e529f63832e5a03de03b2a525729d2256ec2c632e556afe9f4f82743b6fd0fcd470fcb15bc407a965f2eb1d834a65cb6a8fb39054271aa48d5e274493914450ff91c030e23d4b8e111a5c5615c5caf02a630e21a3b86359c8483308542c960ffc908ff9414e56ecc1989644178c0fa3e69ae74ce6d7c937f564e8a10d4b62a7dd2a25341b0736beef44adb3fd36a36d0506d7e794694f97a7928e1cd4ea5522e948adde5539c81941e14aced2c66408b2dd"}, &(0x7f0000000140)=0xe0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:11 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1) setns(r1, 0x10000000) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x30000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 11:28:11 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000300)=@int=0x2, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00ac07000000000000003f820f7c4000", 0x40000001801}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) socketpair(0xf, 0x4, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TIOCSCTTY(r1, 0x540e, 0x1cbc) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$KVM_NMI(r1, 0xae9a) 11:28:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) r4 = fanotify_init(0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x0) r6 = dup(r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000440)=""/203) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r5, 0x400, 0x40005, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x20000000) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = accept4(r7, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r9, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r9, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) fanotify_mark(r4, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") creat(&(0x7f0000000040)="2e2f66692e65318c00", 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000680), 0x0) close(r0) [ 564.199011] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 564.206282] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 564.213549] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 564.220818] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 564.249087] hfsplus: session requires an argument [ 564.277996] hfsplus: unable to parse mount options 11:28:12 executing program 5 (fault-call:0 fault-nth:12): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:12 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) [ 564.563572] FAULT_INJECTION: forcing a failure. [ 564.563572] name failslab, interval 1, probability 0, space 0, times 0 [ 564.587882] CPU: 0 PID: 24340 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 564.595264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.604627] Call Trace: [ 564.607234] dump_stack+0x244/0x39d 11:28:12 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="f378eb40ee2e207396b339255882fafbfa197a7f2503d7f3f1ada7166627cf9b8e62dc0f7611b9ba0f4462a356897f65caf07ea11c399df6099946be52a76644806a595a65c372edad7ea4ed39eb9987f20d376def86f9ddf13f410146181c325c897f83a131e8b7"], 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 564.610893] ? dump_stack_print_info.cold.1+0x20/0x20 [ 564.616113] should_fail.cold.4+0xa/0x17 [ 564.620244] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 564.625372] ? lock_release+0xa00/0xa00 [ 564.629361] ? perf_trace_sched_process_exec+0x860/0x860 [ 564.634832] ? zap_class+0x640/0x640 [ 564.634860] ? find_held_lock+0x36/0x1c0 [ 564.634882] ? __lock_is_held+0xb5/0x140 [ 564.634909] ? perf_trace_sched_process_exec+0x860/0x860 [ 564.646721] ? kernfs_activate+0x21a/0x2c0 [ 564.646764] __should_failslab+0x124/0x180 [ 564.646784] should_failslab+0x9/0x14 [ 564.646803] kmem_cache_alloc+0x2be/0x730 [ 564.668670] ? lock_downgrade+0x900/0x900 [ 564.672895] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 564.677930] __kernfs_new_node+0x127/0x8d0 [ 564.682188] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 564.686957] ? zap_class+0x640/0x640 [ 564.690699] ? __lock_is_held+0xb5/0x140 [ 564.694794] ? wait_for_completion+0x8a0/0x8a0 [ 564.699407] ? mutex_unlock+0xd/0x10 [ 564.703129] ? kernfs_activate+0x21a/0x2c0 [ 564.707373] ? kernfs_walk_and_get_ns+0x340/0x340 [ 564.712230] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 564.717776] ? kernfs_link_sibling+0x1d2/0x3b0 [ 564.722386] kernfs_new_node+0x95/0x120 [ 564.726374] __kernfs_create_file+0x5a/0x340 [ 564.730804] sysfs_add_file_mode_ns+0x222/0x530 [ 564.735504] internal_create_group+0x3df/0xd80 [ 564.740148] ? remove_files.isra.1+0x190/0x190 [ 564.744769] ? up_write+0x7b/0x220 [ 564.748335] ? down_write_nested+0x130/0x130 [ 564.752786] ? down_read+0x120/0x120 [ 564.756523] sysfs_create_group+0x1f/0x30 [ 564.760698] lo_ioctl+0x1307/0x1d60 [ 564.764365] ? lo_rw_aio+0x1ef0/0x1ef0 [ 564.768274] blkdev_ioctl+0x98e/0x21b0 [ 564.772178] ? blkpg_ioctl+0xc10/0xc10 [ 564.776082] ? avc_ss_reset+0x190/0x190 [ 564.780082] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 564.785023] ? kasan_check_read+0x11/0x20 [ 564.789184] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 564.794476] ? rcu_softirq_qs+0x20/0x20 [ 564.798504] ? perf_trace_sched_process_exec+0x860/0x860 [ 564.803984] block_ioctl+0xee/0x130 [ 564.807623] ? blkdev_fallocate+0x400/0x400 [ 564.811956] do_vfs_ioctl+0x1de/0x1790 [ 564.815862] ? ioctl_preallocate+0x300/0x300 [ 564.820286] ? selinux_file_mprotect+0x620/0x620 [ 564.825071] ? rcu_read_lock_sched_held+0x14f/0x180 [ 564.830098] ? kmem_cache_free+0x1db/0x290 [ 564.830119] ? putname+0xf7/0x130 [ 564.830141] ? do_syscall_64+0x9a/0x820 [ 564.837831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 564.837849] ? security_file_ioctl+0x94/0xc0 [ 564.837868] ksys_ioctl+0xa9/0xd0 [ 564.837892] __x64_sys_ioctl+0x73/0xb0 [ 564.847396] do_syscall_64+0x1b9/0x820 [ 564.847413] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 564.847433] ? syscall_return_slowpath+0x5e0/0x5e0 [ 564.859154] ? trace_hardirqs_on_caller+0x310/0x310 [ 564.859174] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 564.859193] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 564.859208] ? __switch_to_asm+0x40/0x70 [ 564.859221] ? __switch_to_asm+0x34/0x70 [ 564.859241] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 564.859266] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 564.859278] RIP: 0033:0x4573d7 [ 564.859295] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 564.859305] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.859320] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 564.859330] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 564.859339] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 564.859348] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 564.859357] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 564.959894] hfsplus: session requires an argument [ 564.989507] hfsplus: unable to parse mount options 11:28:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x400000) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:12 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000bc0)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000340)={0x1, 0x100, 0x7fff, 0x7, 0x0, 0x6, 0x5, 0x3, 0x2, 0x1562, 0x1, 0x4}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:12 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) sync() r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) r1 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/68, 0x44}], 0x1) setns(r1, 0x10000000) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000ddff8), 0x102002700) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x30000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f00000001c0)=0x1e) 11:28:12 executing program 5 (fault-call:0 fault-nth:13): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'ip6~vti0\x00', 0x4004}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f0000000140)=""/62, 0x3e}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x6, &(0x7f00000004c0)=""/155, 0x9b, 0x2}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000005c0)=0x8, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10) write$cgroup_subtree(r4, &(0x7f0000001680)={[{0x2d, 'io'}]}, 0x4) close(r0) [ 565.173079] FAULT_INJECTION: forcing a failure. [ 565.173079] name failslab, interval 1, probability 0, space 0, times 0 [ 565.218416] CPU: 1 PID: 24369 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 565.225815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.235192] Call Trace: [ 565.237846] dump_stack+0x244/0x39d [ 565.241524] ? dump_stack_print_info.cold.1+0x20/0x20 [ 565.246771] should_fail.cold.4+0xa/0x17 [ 565.250873] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 565.256009] ? lock_release+0xa00/0xa00 [ 565.260005] ? perf_trace_sched_process_exec+0x860/0x860 [ 565.265481] ? zap_class+0x640/0x640 [ 565.269218] ? find_held_lock+0x36/0x1c0 [ 565.273305] ? __lock_is_held+0xb5/0x140 [ 565.277459] ? perf_trace_sched_process_exec+0x860/0x860 [ 565.282938] ? kernfs_activate+0x21a/0x2c0 [ 565.287192] __should_failslab+0x124/0x180 [ 565.291441] should_failslab+0x9/0x14 [ 565.295276] kmem_cache_alloc+0x2be/0x730 [ 565.295294] ? lock_downgrade+0x900/0x900 [ 565.295314] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 565.295335] __kernfs_new_node+0x127/0x8d0 [ 565.295357] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 565.295376] ? zap_class+0x640/0x640 [ 565.303687] ? __lock_is_held+0xb5/0x140 [ 565.303703] ? wait_for_completion+0x8a0/0x8a0 [ 565.303740] ? mutex_unlock+0xd/0x10 [ 565.303769] ? kernfs_activate+0x21a/0x2c0 [ 565.303801] ? kernfs_walk_and_get_ns+0x340/0x340 [ 565.303826] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 565.348427] ? kernfs_link_sibling+0x1d2/0x3b0 [ 565.353038] kernfs_new_node+0x95/0x120 [ 565.357026] __kernfs_create_file+0x5a/0x340 [ 565.361465] sysfs_add_file_mode_ns+0x222/0x530 [ 565.366148] internal_create_group+0x3df/0xd80 [ 565.366173] ? remove_files.isra.1+0x190/0x190 [ 565.366190] ? up_write+0x7b/0x220 [ 565.378887] ? down_write_nested+0x130/0x130 [ 565.383307] ? down_read+0x120/0x120 [ 565.387071] sysfs_create_group+0x1f/0x30 [ 565.391231] lo_ioctl+0x1307/0x1d60 [ 565.391261] ? lo_rw_aio+0x1ef0/0x1ef0 [ 565.391280] blkdev_ioctl+0x98e/0x21b0 [ 565.391313] ? blkpg_ioctl+0xc10/0xc10 [ 565.391330] ? avc_ss_reset+0x190/0x190 [ 565.391364] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 565.391379] ? kasan_check_read+0x11/0x20 [ 565.391399] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 565.402814] ? rcu_softirq_qs+0x20/0x20 [ 565.402858] ? perf_trace_sched_process_exec+0x860/0x860 [ 565.402896] block_ioctl+0xee/0x130 [ 565.425250] ? blkdev_fallocate+0x400/0x400 [ 565.425270] do_vfs_ioctl+0x1de/0x1790 [ 565.425292] ? ioctl_preallocate+0x300/0x300 [ 565.425313] ? selinux_file_mprotect+0x620/0x620 [ 565.455699] ? rcu_read_lock_sched_held+0x14f/0x180 [ 565.460762] ? kmem_cache_free+0x1db/0x290 [ 565.465024] ? putname+0xf7/0x130 [ 565.468500] ? do_syscall_64+0x9a/0x820 [ 565.472496] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 565.478043] ? security_file_ioctl+0x94/0xc0 [ 565.482467] ksys_ioctl+0xa9/0xd0 [ 565.485964] __x64_sys_ioctl+0x73/0xb0 [ 565.489866] do_syscall_64+0x1b9/0x820 [ 565.493769] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 565.499146] ? syscall_return_slowpath+0x5e0/0x5e0 [ 565.504092] ? trace_hardirqs_on_caller+0x310/0x310 [ 565.509123] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 565.514161] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 565.520836] ? __switch_to_asm+0x40/0x70 [ 565.524905] ? __switch_to_asm+0x34/0x70 [ 565.528980] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 565.533844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.539043] RIP: 0033:0x4573d7 [ 565.542251] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.561198] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:28:13 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="f8ec77a972d614c81bf1c72ae90a8f58f9184e688d246427741f7155fe38df31c5304d48407b1c433689613fc56f21ed7a10bc1d3d054f7665446644eceb0f7f88a257c7406efe9073ff80f7039e"], 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000940)=""/20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 565.568941] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 565.576217] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 565.583494] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 565.590781] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 565.598061] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 565.661533] hfsplus: session requires an argument [ 565.673720] hfsplus: unable to parse mount options 11:28:13 executing program 5 (fault-call:0 fault-nth:14): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 565.888576] FAULT_INJECTION: forcing a failure. [ 565.888576] name failslab, interval 1, probability 0, space 0, times 0 [ 565.921406] CPU: 1 PID: 24392 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 565.928803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.938160] Call Trace: [ 565.938189] dump_stack+0x244/0x39d [ 565.938213] ? dump_stack_print_info.cold.1+0x20/0x20 [ 565.938247] ? should_fail.cold.4+0x5/0x17 [ 565.938272] should_fail.cold.4+0xa/0x17 [ 565.944476] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 565.944502] ? lock_release+0xa00/0xa00 [ 565.953904] ? perf_trace_sched_process_exec+0x860/0x860 [ 565.953930] ? zap_class+0x640/0x640 [ 565.953955] ? find_held_lock+0x36/0x1c0 [ 565.963109] ? __lock_is_held+0xb5/0x140 [ 565.972601] ? perf_trace_f2fs_truncate_data_blocks_range+0x4d8/0x800 [ 565.972632] ? perf_trace_sched_process_exec+0x860/0x860 [ 565.980377] ? kernfs_activate+0x21a/0x2c0 [ 565.980406] __should_failslab+0x124/0x180 [ 565.980427] should_failslab+0x9/0x14 [ 565.980457] kmem_cache_alloc+0x2be/0x730 [ 565.980476] ? lock_downgrade+0x900/0x900 [ 565.991102] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 565.991140] __kernfs_new_node+0x127/0x8d0 [ 565.991178] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 565.991193] ? zap_class+0x640/0x640 [ 565.991217] ? __lock_is_held+0xb5/0x140 [ 566.000873] ? wait_for_completion+0x8a0/0x8a0 [ 566.000903] ? mutex_unlock+0xd/0x10 [ 566.000917] ? kernfs_activate+0x21a/0x2c0 [ 566.000933] ? kernfs_walk_and_get_ns+0x340/0x340 [ 566.000952] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 566.008958] ? kernfs_link_sibling+0x1d2/0x3b0 [ 566.008981] kernfs_new_node+0x95/0x120 [ 566.009002] __kernfs_create_file+0x5a/0x340 [ 566.009022] sysfs_add_file_mode_ns+0x222/0x530 [ 566.009047] internal_create_group+0x3df/0xd80 [ 566.009076] ? remove_files.isra.1+0x190/0x190 [ 566.017368] ? up_write+0x7b/0x220 [ 566.017384] ? down_write_nested+0x130/0x130 [ 566.017397] ? down_read+0x120/0x120 [ 566.017443] sysfs_create_group+0x1f/0x30 [ 566.026701] lo_ioctl+0x1307/0x1d60 [ 566.026750] ? lo_rw_aio+0x1ef0/0x1ef0 [ 566.026784] blkdev_ioctl+0x98e/0x21b0 [ 566.026807] ? blkpg_ioctl+0xc10/0xc10 [ 566.035269] ? avc_ss_reset+0x190/0x190 [ 566.035289] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 566.035304] ? kasan_check_read+0x11/0x20 [ 566.035322] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 566.043940] ? rcu_softirq_qs+0x20/0x20 [ 566.043984] ? perf_trace_sched_process_exec+0x860/0x860 [ 566.044008] block_ioctl+0xee/0x130 [ 566.051934] ? blkdev_fallocate+0x400/0x400 [ 566.051952] do_vfs_ioctl+0x1de/0x1790 [ 566.051974] ? ioctl_preallocate+0x300/0x300 [ 566.051995] ? selinux_file_mprotect+0x620/0x620 [ 566.052019] ? rcu_read_lock_sched_held+0x14f/0x180 [ 566.062395] ? kmem_cache_free+0x1db/0x290 [ 566.062417] ? putname+0xf7/0x130 [ 566.062436] ? do_syscall_64+0x9a/0x820 11:28:14 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) r4 = fanotify_init(0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x0) r6 = dup(r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000440)=""/203) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r5, 0x400, 0x40005, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x20000000) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = accept4(r7, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r9, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r9, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) fanotify_mark(r4, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") creat(&(0x7f0000000040)="2e2f66692e65318c00", 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000680), 0x0) close(r0) 11:28:14 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x400002) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0xffffffff}, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 566.062458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.062477] ? security_file_ioctl+0x94/0xc0 [ 566.071019] ksys_ioctl+0xa9/0xd0 [ 566.071040] __x64_sys_ioctl+0x73/0xb0 [ 566.071059] do_syscall_64+0x1b9/0x820 [ 566.071074] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 566.071097] ? syscall_return_slowpath+0x5e0/0x5e0 [ 566.080156] ? trace_hardirqs_on_caller+0x310/0x310 [ 566.080176] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 566.080195] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 566.080220] ? trace_hardirqs_off_thunk+0x1a/0x1c 11:28:14 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x1f, r1, 0x1f, 0xfffffffffffffffd) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) fcntl$getown(r0, 0x9) r3 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x1, 0x2) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000340)={0x1, 0x4, [@remote, @dev={[], 0x16}, @random="314ee36eb4e2", @empty]}) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) [ 566.080248] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.089410] RIP: 0033:0x4573d7 [ 566.089427] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 566.089435] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.089451] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 566.089460] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 566.089469] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 566.089478] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 566.089487] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) pause() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 566.385915] hfsplus: session requires an argument [ 566.420210] hfsplus: unable to parse mount options 11:28:14 executing program 5 (fault-call:0 fault-nth:15): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 566.572980] FAULT_INJECTION: forcing a failure. [ 566.572980] name failslab, interval 1, probability 0, space 0, times 0 [ 566.604826] CPU: 0 PID: 24419 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 566.612252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.614087] IPVS: ftp: loaded support on port[0] = 21 [ 566.621611] Call Trace: [ 566.621639] dump_stack+0x244/0x39d [ 566.621664] ? dump_stack_print_info.cold.1+0x20/0x20 [ 566.621697] should_fail.cold.4+0xa/0x17 [ 566.621722] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 566.621764] ? lock_release+0xa00/0xa00 [ 566.629529] ? perf_trace_sched_process_exec+0x860/0x860 [ 566.629555] ? zap_class+0x640/0x640 [ 566.629581] ? find_held_lock+0x36/0x1c0 [ 566.629602] ? __lock_is_held+0xb5/0x140 [ 566.629632] ? perf_trace_sched_process_exec+0x860/0x860 [ 566.629646] ? kernfs_activate+0x21a/0x2c0 [ 566.629671] __should_failslab+0x124/0x180 [ 566.638512] should_failslab+0x9/0x14 [ 566.638530] kmem_cache_alloc+0x2be/0x730 [ 566.638548] ? lock_downgrade+0x900/0x900 [ 566.638569] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 566.638591] __kernfs_new_node+0x127/0x8d0 [ 566.638613] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 566.638631] ? zap_class+0x640/0x640 [ 566.638655] ? __lock_is_held+0xb5/0x140 [ 566.716689] ? wait_for_completion+0x8a0/0x8a0 [ 566.721304] ? mutex_unlock+0xd/0x10 [ 566.725031] ? kernfs_activate+0x21a/0x2c0 [ 566.729279] ? kernfs_walk_and_get_ns+0x340/0x340 [ 566.734140] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 566.739686] ? kernfs_link_sibling+0x1d2/0x3b0 [ 566.744284] kernfs_new_node+0x95/0x120 [ 566.748274] __kernfs_create_file+0x5a/0x340 [ 566.752711] sysfs_add_file_mode_ns+0x222/0x530 [ 566.757418] internal_create_group+0x3df/0xd80 [ 566.762024] ? remove_files.isra.1+0x190/0x190 [ 566.766617] ? up_write+0x7b/0x220 [ 566.770172] ? down_write_nested+0x130/0x130 [ 566.774588] ? down_read+0x120/0x120 [ 566.778339] sysfs_create_group+0x1f/0x30 [ 566.782510] lo_ioctl+0x1307/0x1d60 [ 566.786158] ? lo_rw_aio+0x1ef0/0x1ef0 [ 566.790057] blkdev_ioctl+0x98e/0x21b0 [ 566.793958] ? blkpg_ioctl+0xc10/0xc10 [ 566.797862] ? avc_ss_reset+0x190/0x190 [ 566.801856] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 566.806829] ? kasan_check_read+0x11/0x20 [ 566.811013] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 566.816296] ? rcu_softirq_qs+0x20/0x20 [ 566.820310] ? perf_trace_sched_process_exec+0x860/0x860 [ 566.825785] block_ioctl+0xee/0x130 [ 566.829430] ? blkdev_fallocate+0x400/0x400 [ 566.833789] do_vfs_ioctl+0x1de/0x1790 [ 566.837690] ? ioctl_preallocate+0x300/0x300 [ 566.842122] ? selinux_file_mprotect+0x620/0x620 [ 566.846903] ? rcu_read_lock_sched_held+0x14f/0x180 [ 566.851928] ? kmem_cache_free+0x1db/0x290 [ 566.856191] ? putname+0xf7/0x130 [ 566.859669] ? do_syscall_64+0x9a/0x820 [ 566.863652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 566.870038] ? security_file_ioctl+0x94/0xc0 [ 566.874488] ksys_ioctl+0xa9/0xd0 [ 566.877967] __x64_sys_ioctl+0x73/0xb0 [ 566.881902] do_syscall_64+0x1b9/0x820 [ 566.885797] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 566.891171] ? syscall_return_slowpath+0x5e0/0x5e0 [ 566.896111] ? trace_hardirqs_on_caller+0x310/0x310 [ 566.901135] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 566.906297] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 566.912968] ? __switch_to_asm+0x40/0x70 [ 566.917033] ? __switch_to_asm+0x34/0x70 [ 566.921121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 566.925984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 566.931174] RIP: 0033:0x4573d7 [ 566.934372] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 566.953278] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.960991] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 11:28:14 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) creat(&(0x7f0000000340)='./file0\x00', 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="c65616"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 566.968268] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 566.975544] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 566.982822] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 566.990118] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 567.004989] hfsplus: session requires an argument [ 567.011202] hfsplus: unable to parse mount options 11:28:14 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) msgget$private(0x0, 0x40a) 11:28:15 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000bc0)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000340)={0x1, 0x100, 0x7fff, 0x7, 0x0, 0x6, 0x5, 0x3, 0x2, 0x1562, 0x1, 0x4}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:15 executing program 5 (fault-call:0 fault-nth:16): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 567.267286] FAULT_INJECTION: forcing a failure. [ 567.267286] name failslab, interval 1, probability 0, space 0, times 0 [ 567.287130] CPU: 0 PID: 24438 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 567.294542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.303899] Call Trace: [ 567.303927] dump_stack+0x244/0x39d [ 567.303951] ? dump_stack_print_info.cold.1+0x20/0x20 [ 567.303984] should_fail.cold.4+0xa/0x17 [ 567.304009] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 567.315419] ? lock_release+0xa00/0xa00 [ 567.324559] ? perf_trace_sched_process_exec+0x860/0x860 [ 567.324585] ? zap_class+0x640/0x640 [ 567.324611] ? find_held_lock+0x36/0x1c0 [ 567.324632] ? __lock_is_held+0xb5/0x140 [ 567.324660] ? perf_trace_sched_process_exec+0x860/0x860 [ 567.334101] ? kernfs_activate+0x21a/0x2c0 [ 567.334145] __should_failslab+0x124/0x180 [ 567.334166] should_failslab+0x9/0x14 [ 567.334182] kmem_cache_alloc+0x2be/0x730 [ 567.334202] ? lock_downgrade+0x900/0x900 [ 567.341961] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 567.341984] __kernfs_new_node+0x127/0x8d0 [ 567.342008] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 567.342025] ? zap_class+0x640/0x640 [ 567.342052] ? __lock_is_held+0xb5/0x140 [ 567.342068] ? wait_for_completion+0x8a0/0x8a0 [ 567.342095] ? mutex_unlock+0xd/0x10 [ 567.351578] ? kernfs_activate+0x21a/0x2c0 [ 567.351597] ? kernfs_walk_and_get_ns+0x340/0x340 [ 567.351617] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 567.351646] ? kernfs_link_sibling+0x1d2/0x3b0 [ 567.351674] kernfs_new_node+0x95/0x120 [ 567.360133] __kernfs_create_file+0x5a/0x340 [ 567.360157] sysfs_add_file_mode_ns+0x222/0x530 [ 567.360199] internal_create_group+0x3df/0xd80 [ 567.360241] ? remove_files.isra.1+0x190/0x190 [ 567.360255] ? up_write+0x7b/0x220 [ 567.360286] ? down_write_nested+0x130/0x130 [ 567.360300] ? down_read+0x120/0x120 [ 567.360328] sysfs_create_group+0x1f/0x30 [ 567.368286] lo_ioctl+0x1307/0x1d60 [ 567.368326] ? lo_rw_aio+0x1ef0/0x1ef0 11:28:15 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/hwrng\x00', 0x2800, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000980)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8509000000"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) [ 567.368361] blkdev_ioctl+0x98e/0x21b0 [ 567.368379] ? blkpg_ioctl+0xc10/0xc10 [ 567.368397] ? avc_ss_reset+0x190/0x190 [ 567.368417] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 567.368433] ? kasan_check_read+0x11/0x20 [ 567.368450] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 567.377697] ? rcu_softirq_qs+0x20/0x20 [ 567.377759] ? perf_trace_sched_process_exec+0x860/0x860 [ 567.377789] block_ioctl+0xee/0x130 [ 567.386802] ? blkdev_fallocate+0x400/0x400 [ 567.386820] do_vfs_ioctl+0x1de/0x1790 [ 567.386843] ? ioctl_preallocate+0x300/0x300 [ 567.386863] ? selinux_file_mprotect+0x620/0x620 [ 567.386887] ? rcu_read_lock_sched_held+0x14f/0x180 [ 567.394644] ? kmem_cache_free+0x1db/0x290 [ 567.394665] ? putname+0xf7/0x130 [ 567.394684] ? do_syscall_64+0x9a/0x820 [ 567.394705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 567.394723] ? security_file_ioctl+0x94/0xc0 [ 567.444411] ksys_ioctl+0xa9/0xd0 [ 567.444433] __x64_sys_ioctl+0x73/0xb0 [ 567.444452] do_syscall_64+0x1b9/0x820 [ 567.444467] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 567.444487] ? syscall_return_slowpath+0x5e0/0x5e0 [ 567.452431] ? trace_hardirqs_on_caller+0x310/0x310 [ 567.452450] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 567.452469] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 567.452485] ? __switch_to_asm+0x40/0x70 [ 567.452502] ? __switch_to_asm+0x34/0x70 [ 567.471751] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 567.471776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 567.471792] RIP: 0033:0x4573d7 [ 567.479653] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 567.479663] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.479679] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 567.479688] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 567.479697] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 567.479706] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 11:28:15 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="f378eb40ee2e207396b339255882fafbfa197a7f2503d7f3f1ada7166627cf9b8e62dc0f7611b9ba0f4462a356897f65caf07ea11c399df6099946be52a76644806a595a65c372edad7ea4ed39eb9987f20d376def86f9ddf13f410146181c325c897f83a131e8b7"], 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 567.479716] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 567.700397] hfsplus: session requires an argument [ 567.705374] hfsplus: unable to parse mount options 11:28:15 executing program 5 (fault-call:0 fault-nth:17): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 567.867617] FAULT_INJECTION: forcing a failure. [ 567.867617] name failslab, interval 1, probability 0, space 0, times 0 [ 567.879176] CPU: 1 PID: 24462 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 567.886596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.895955] Call Trace: [ 567.898560] dump_stack+0x244/0x39d [ 567.902205] ? dump_stack_print_info.cold.1+0x20/0x20 [ 567.907445] should_fail.cold.4+0xa/0x17 [ 567.911522] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 567.916659] ? lock_release+0xa00/0xa00 [ 567.920654] ? perf_trace_sched_process_exec+0x860/0x860 [ 567.920678] ? zap_class+0x640/0x640 [ 567.920704] ? find_held_lock+0x36/0x1c0 [ 567.920723] ? __lock_is_held+0xb5/0x140 [ 567.933975] ? perf_trace_sched_process_exec+0x860/0x860 [ 567.933994] ? kernfs_activate+0x21a/0x2c0 [ 567.943516] __should_failslab+0x124/0x180 [ 567.943537] should_failslab+0x9/0x14 [ 567.955814] kmem_cache_alloc+0x2be/0x730 [ 567.959983] ? lock_downgrade+0x900/0x900 [ 567.964172] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 567.969182] __kernfs_new_node+0x127/0x8d0 [ 567.973407] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 567.978161] ? zap_class+0x640/0x640 [ 567.981886] ? __lock_is_held+0xb5/0x140 [ 567.985937] ? wait_for_completion+0x8a0/0x8a0 [ 567.990530] ? mutex_unlock+0xd/0x10 [ 567.994229] ? kernfs_activate+0x21a/0x2c0 [ 567.998469] ? kernfs_walk_and_get_ns+0x340/0x340 [ 568.003316] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 568.008841] ? kernfs_link_sibling+0x1d2/0x3b0 [ 568.013416] kernfs_new_node+0x95/0x120 [ 568.017382] __kernfs_create_file+0x5a/0x340 [ 568.021799] sysfs_add_file_mode_ns+0x222/0x530 [ 568.026479] internal_create_group+0x3df/0xd80 [ 568.031064] ? remove_files.isra.1+0x190/0x190 [ 568.035635] ? up_write+0x7b/0x220 [ 568.039161] ? down_write_nested+0x130/0x130 [ 568.043557] ? down_read+0x120/0x120 [ 568.047266] sysfs_create_group+0x1f/0x30 [ 568.051402] lo_ioctl+0x1307/0x1d60 [ 568.055021] ? lo_rw_aio+0x1ef0/0x1ef0 [ 568.058909] blkdev_ioctl+0x98e/0x21b0 [ 568.062811] ? blkpg_ioctl+0xc10/0xc10 [ 568.066703] ? avc_ss_reset+0x190/0x190 [ 568.070673] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 568.075603] ? kasan_check_read+0x11/0x20 [ 568.079749] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 568.085014] ? rcu_softirq_qs+0x20/0x20 [ 568.088991] ? perf_trace_sched_process_exec+0x860/0x860 [ 568.094435] block_ioctl+0xee/0x130 [ 568.098068] ? blkdev_fallocate+0x400/0x400 [ 568.102381] do_vfs_ioctl+0x1de/0x1790 [ 568.106263] ? ioctl_preallocate+0x300/0x300 [ 568.110666] ? selinux_file_mprotect+0x620/0x620 [ 568.115415] ? rcu_read_lock_sched_held+0x14f/0x180 [ 568.120421] ? kmem_cache_free+0x1db/0x290 [ 568.124646] ? putname+0xf7/0x130 [ 568.128091] ? do_syscall_64+0x9a/0x820 [ 568.132068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 568.137591] ? security_file_ioctl+0x94/0xc0 [ 568.141989] ksys_ioctl+0xa9/0xd0 [ 568.145433] __x64_sys_ioctl+0x73/0xb0 [ 568.149307] do_syscall_64+0x1b9/0x820 [ 568.153183] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 568.158535] ? syscall_return_slowpath+0x5e0/0x5e0 [ 568.163456] ? trace_hardirqs_on_caller+0x310/0x310 [ 568.168460] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 568.173488] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 568.180159] ? __switch_to_asm+0x40/0x70 [ 568.184252] ? __switch_to_asm+0x34/0x70 [ 568.188307] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 568.193140] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 568.198316] RIP: 0033:0x4573d7 [ 568.201496] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 568.220410] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.228135] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 568.235416] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 568.242672] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 568.249928] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 568.257182] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 568.276073] hfsplus: session requires an argument [ 568.310291] hfsplus: unable to parse mount options [ 569.580821] device bridge_slave_1 left promiscuous mode [ 569.586375] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.638908] device bridge_slave_0 left promiscuous mode [ 569.644368] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.028984] team0 (unregistering): Port device team_slave_1 removed [ 572.039355] team0 (unregistering): Port device team_slave_0 removed [ 572.049408] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 572.092203] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 572.149231] bond0 (unregistering): Released all slaves [ 572.243846] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.251147] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.258002] device bridge_slave_0 entered promiscuous mode [ 572.286617] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.293535] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.302665] device bridge_slave_1 entered promiscuous mode [ 572.344936] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 572.389808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 572.526307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 572.575046] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 572.789083] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 572.796541] team0: Port device team_slave_0 added [ 572.842456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 572.849925] team0: Port device team_slave_1 added [ 572.893403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 572.943070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 572.990311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 572.997429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.013156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.051871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.484139] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.490543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.497112] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.503510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.510783] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 574.258367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.582626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.672770] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 574.763406] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 574.769706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 574.776645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 574.868095] 8021q: adding VLAN 0 to HW filter on device team0 11:28:23 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) epoll_create(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {0x983, 0x40, 0x8, 0x1f, 0x1, 0x7ff}, 0x2, 0x71ea6ffb}, 0xe) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000300)=0x8) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c460001000409"], 0x9) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r2 = socket$inet6(0xa, 0x3, 0x6) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000180)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={"7261770000000000000000000000000000000000000000001b00"}, &(0x7f00000000c0)=0x54) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={"74756e6c3000000000000000e0002000", 0x0}) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, r6}, 0x58) fcntl$setstatus(r1, 0x4, 0x4000) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000200)=0x1000, 0x7e) recvmmsg(r3, &(0x7f00000086c0)=[{{&(0x7f0000006ec0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000007040)=""/155, 0x9b}}], 0x1, 0x0, &(0x7f0000008980)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) 11:28:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x2000000008, 0x5, 0x2000002, 0x2}, 0xe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) 11:28:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000300)='syz1\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:23 executing program 5 (fault-call:0 fault-nth:18): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:23 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) r4 = fanotify_init(0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x0) r6 = dup(r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000440)=""/203) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r5, 0x400, 0x40005, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x20000000) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = accept4(r7, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r9, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r9, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) fanotify_mark(r4, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") creat(&(0x7f0000000040)="2e2f66692e65318c00", 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000680), 0x0) close(r0) 11:28:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r1, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0x200}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4) r3 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000340)={0x2, r3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000380)={&(0x7f00000000c0)=[0xa2], 0x1, 0xfffffffffffffff6, 0x1000, 0x4, 0x8, 0x8, {0x6, 0x1, 0x26, 0xe9, 0x400, 0x3ff, 0x5, 0xdb31, 0x1, 0x9, 0x2, 0x7, 0xbc4, 0x8, "721447d370fd980944492e0db34de9626bc2a0b47c88cade358b8c18f70073c0"}}) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000440)={0x3, 0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'U+', 0x542}, 0x28, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) fsetxattr(r4, &(0x7f0000000480)=@known='system.advise\x00', &(0x7f00000004c0)="fb7573657276626f786e65743170707031747275737465642600", 0x1a, 0x0) close(r0) [ 576.108400] FAULT_INJECTION: forcing a failure. [ 576.108400] name failslab, interval 1, probability 0, space 0, times 0 [ 576.156006] CPU: 0 PID: 24740 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 576.163401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.172782] Call Trace: [ 576.175395] dump_stack+0x244/0x39d [ 576.179053] ? dump_stack_print_info.cold.1+0x20/0x20 [ 576.184279] should_fail.cold.4+0xa/0x17 [ 576.188381] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 576.193525] ? lock_release+0xa00/0xa00 [ 576.197542] ? perf_trace_sched_process_exec+0x860/0x860 [ 576.203052] ? zap_class+0x640/0x640 [ 576.206804] ? find_held_lock+0x36/0x1c0 [ 576.210933] ? __lock_is_held+0xb5/0x140 [ 576.215046] ? perf_trace_sched_process_exec+0x860/0x860 [ 576.220522] ? kernfs_activate+0x21a/0x2c0 [ 576.224793] __should_failslab+0x124/0x180 [ 576.229043] should_failslab+0x9/0x14 [ 576.232923] kmem_cache_alloc+0x2be/0x730 [ 576.237177] ? lock_downgrade+0x900/0x900 [ 576.241350] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 576.246381] __kernfs_new_node+0x127/0x8d0 [ 576.250633] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 576.255398] ? zap_class+0x640/0x640 [ 576.259152] ? __lock_is_held+0xb5/0x140 [ 576.263227] ? wait_for_completion+0x8a0/0x8a0 [ 576.267850] ? mutex_unlock+0xd/0x10 [ 576.271587] ? kernfs_activate+0x21a/0x2c0 [ 576.275870] ? kernfs_walk_and_get_ns+0x340/0x340 [ 576.280731] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 576.286311] ? kernfs_link_sibling+0x1d2/0x3b0 [ 576.290912] kernfs_new_node+0x95/0x120 [ 576.294938] __kernfs_create_file+0x5a/0x340 [ 576.299363] sysfs_add_file_mode_ns+0x222/0x530 [ 576.304070] internal_create_group+0x3df/0xd80 [ 576.308681] ? remove_files.isra.1+0x190/0x190 [ 576.313275] ? up_write+0x7b/0x220 [ 576.316827] ? down_write_nested+0x130/0x130 [ 576.321254] ? down_read+0x120/0x120 [ 576.324995] sysfs_create_group+0x1f/0x30 [ 576.329158] lo_ioctl+0x1307/0x1d60 [ 576.332826] ? lo_rw_aio+0x1ef0/0x1ef0 [ 576.336725] blkdev_ioctl+0x98e/0x21b0 [ 576.336762] ? blkpg_ioctl+0xc10/0xc10 [ 576.336782] ? avc_ss_reset+0x190/0x190 [ 576.336801] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 576.353473] ? kasan_check_read+0x11/0x20 [ 576.357650] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 576.362969] ? rcu_softirq_qs+0x20/0x20 [ 576.366982] ? perf_trace_sched_process_exec+0x860/0x860 [ 576.372464] block_ioctl+0xee/0x130 [ 576.376145] ? blkdev_fallocate+0x400/0x400 [ 576.380504] do_vfs_ioctl+0x1de/0x1790 [ 576.384450] ? ioctl_preallocate+0x300/0x300 [ 576.388898] ? selinux_file_mprotect+0x620/0x620 [ 576.393685] ? rcu_read_lock_sched_held+0x14f/0x180 [ 576.398714] ? kmem_cache_free+0x1db/0x290 [ 576.398737] ? putname+0xf7/0x130 [ 576.398782] ? do_syscall_64+0x9a/0x820 [ 576.398805] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 576.398821] ? security_file_ioctl+0x94/0xc0 [ 576.398840] ksys_ioctl+0xa9/0xd0 [ 576.398865] __x64_sys_ioctl+0x73/0xb0 [ 576.423920] do_syscall_64+0x1b9/0x820 [ 576.431678] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 576.437057] ? syscall_return_slowpath+0x5e0/0x5e0 [ 576.441999] ? trace_hardirqs_on_caller+0x310/0x310 [ 576.447036] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 576.452065] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 576.452082] ? __switch_to_asm+0x40/0x70 [ 576.452095] ? __switch_to_asm+0x34/0x70 [ 576.452117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 576.452139] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 576.476957] RIP: 0033:0x4573d7 [ 576.480158] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 576.499069] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:28:23 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000000c0), &(0x7f0000000140)="0b8bff388c52b2d0ac1249845ec2006b72cbf23fd78ae7832ee84dbee10cda654e71c0a7e9b171138f1494326578f2d7fe1b666b5c05f5ee526c9d5b5877ca0742287623b08c8ff41d"}, 0x20) close(r0) [ 576.506793] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 576.514068] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 576.514079] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 576.514089] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 576.514098] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:24 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(r0, 0x54, 0x9, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1, @dev}, &(0x7f0000000340)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000940)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x1ff, 0x4e21, 0x7, 0xa, 0x80, 0x20, 0x0, r4, r5}, {0x6, 0x7, 0x6, 0x7, 0xffff, 0x91, 0x800000000, 0x8}, {0xfff, 0x9, 0x200, 0xfff}, 0xffffffff00000001, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d6, 0x7f}, 0x2, @in6=@mcast2, 0x3504, 0x3, 0x2, 0x1200, 0x81, 0x1, 0x100}}, 0xe8) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) [ 576.580329] hfsplus: session requires an argument [ 576.585439] hfsplus: unable to parse mount options 11:28:24 executing program 5 (fault-call:0 fault-nth:19): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac730000000000ec973f820f7c4000", 0x10000c203}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) close(r0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x800) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 11:28:24 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000140)=0x4) [ 576.868078] FAULT_INJECTION: forcing a failure. [ 576.868078] name failslab, interval 1, probability 0, space 0, times 0 [ 576.921565] CPU: 1 PID: 24769 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 576.928967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 576.938325] Call Trace: [ 576.940935] dump_stack+0x244/0x39d [ 576.944609] ? dump_stack_print_info.cold.1+0x20/0x20 [ 576.944703] should_fail.cold.4+0xa/0x17 [ 576.944756] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 576.959120] ? lock_release+0xa00/0xa00 [ 576.963110] ? perf_trace_sched_process_exec+0x860/0x860 [ 576.963127] ? zap_class+0x640/0x640 [ 576.963144] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 576.963169] ? find_held_lock+0x36/0x1c0 [ 576.963190] ? __lock_is_held+0xb5/0x140 [ 576.963219] ? put_dec+0x3b/0xf0 [ 576.988840] ? perf_trace_sched_process_exec+0x860/0x860 [ 576.994307] ? zap_class+0x640/0x640 [ 576.998033] __should_failslab+0x124/0x180 [ 577.002286] should_failslab+0x9/0x14 [ 577.006122] kmem_cache_alloc_node+0x26e/0x730 [ 577.010758] ? find_held_lock+0x36/0x1c0 [ 577.014836] __alloc_skb+0x119/0x770 [ 577.018561] ? netdev_alloc_frag+0x1f0/0x1f0 [ 577.022974] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 577.027908] ? kasan_check_read+0x11/0x20 [ 577.032058] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 577.037337] ? rcu_softirq_qs+0x20/0x20 [ 577.041400] ? netlink_has_listeners+0x2cb/0x4a0 [ 577.046165] ? netlink_tap_init_net+0x3d0/0x3d0 [ 577.050842] alloc_uevent_skb+0x84/0x1da [ 577.054917] kobject_uevent_env+0xa52/0x101e [ 577.059338] kobject_uevent+0x1f/0x24 [ 577.063148] lo_ioctl+0x1385/0x1d60 [ 577.066785] ? lo_rw_aio+0x1ef0/0x1ef0 [ 577.070680] blkdev_ioctl+0x98e/0x21b0 [ 577.074575] ? blkpg_ioctl+0xc10/0xc10 [ 577.078466] ? avc_ss_reset+0x190/0x190 [ 577.082456] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 577.087391] ? kasan_check_read+0x11/0x20 [ 577.091544] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 577.096827] ? rcu_softirq_qs+0x20/0x20 [ 577.101210] ? perf_trace_sched_process_exec+0x860/0x860 [ 577.106669] ? trace_hardirqs_on+0x310/0x310 [ 577.111089] block_ioctl+0xee/0x130 [ 577.114722] ? blkdev_fallocate+0x400/0x400 [ 577.119059] do_vfs_ioctl+0x1de/0x1790 [ 577.122955] ? ioctl_preallocate+0x300/0x300 [ 577.127367] ? selinux_file_mprotect+0x620/0x620 [ 577.132153] ? rcu_read_lock_sched_held+0x14f/0x180 [ 577.137170] ? kmem_cache_free+0x1db/0x290 [ 577.141425] ? putname+0xf7/0x130 [ 577.144889] ? do_syscall_64+0x9a/0x820 [ 577.148887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.154427] ? security_file_ioctl+0x94/0xc0 [ 577.158842] ksys_ioctl+0xa9/0xd0 [ 577.162306] __x64_sys_ioctl+0x73/0xb0 [ 577.166228] do_syscall_64+0x1b9/0x820 [ 577.170127] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 577.175497] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.180429] ? trace_hardirqs_on_caller+0x310/0x310 [ 577.185571] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 577.190590] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 577.197277] ? __switch_to_asm+0x40/0x70 [ 577.201334] ? __switch_to_asm+0x34/0x70 [ 577.205401] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.210260] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.215469] RIP: 0033:0x4573d7 [ 577.218666] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.237578] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.245292] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 577.252736] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 577.260030] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 11:28:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) bind$vsock_stream(r2, &(0x7f0000000980)={0x28, 0x0, 0x2710, @reserved}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x6, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) timer_create(0x5, &(0x7f0000000300)={0x0, 0x3, 0x4, @tid=r0}, &(0x7f0000000340)=0x0) timer_gettime(r5, &(0x7f0000000940)) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) [ 577.267296] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 577.274564] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 577.286179] hfsplus: session requires an argument [ 577.307314] hfsplus: unable to parse mount options 11:28:25 executing program 1: clone(0x40000, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = getpgrp(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001440)={0x64, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x38, &(0x7f0000000180), &(0x7f0000000340)=[0x38, 0x48, 0x38, 0x18, 0x38, 0x28, 0x40]}, 0x9}}, @increfs_done={0x40106308, r2, 0x4}, @register_looper], 0x1000, 0x0, &(0x7f0000000440)="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"}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000) r3 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip_mr_vif\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f00000001c0)=[@register_looper, @dead_binder_done={0x40086310, 0x4}, @increfs={0x40046304, 0x1}, @increfs={0x40046304, 0x3}], 0xed, 0x0, &(0x7f0000000200)="82d696f8daa1ef88dc4393691e8f21e3ced6c781d915e9c13a6618b8fcf2eee4c5bc6d8a3b3fd6abdd6e2ab26d29d66fe124961a15c2c5afc9b5271bd12491835679f9c62c49fa798b040b72d28fe43fa9215d6a7386c40ed1ebd91da4cb3cfbe03131e58df32b9b2e7ccdfb7b4ecaa9debb12c4028c41a79b0a68f31636c6bc7c8e42fcc6c872bbc44ddac1044ab55295d73eb59b8fdef47396d870350ae94ed2d5778b0998def353817c9c5aa77b4cfeec48d7054fa2e706a9fd3112cc6539f877e0f65f231cd658bfeb5efa73b0e457574aa118f49aad1646b514c84af9fc96fcc2d121356fd3f6608e57ab"}) write$binfmt_elf64(r3, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x116) mount(&(0x7f0000001440)=ANY=[], &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") unshare(0x40000000) 11:28:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) r4 = fanotify_init(0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x0) r6 = dup(r3) ioctl$EVIOCGREP(r6, 0x80084503, &(0x7f0000000440)=""/203) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r5, 0x400, 0x40005, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x20000000) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r9 = accept4(r7, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r9, 0x29, 0x0, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r9, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) fanotify_mark(r4, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") creat(&(0x7f0000000040)="2e2f66692e65318c00", 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000680), 0x0) close(r0) 11:28:25 executing program 5 (fault-call:0 fault-nth:20): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20800, 0x0) write$FUSE_INTERRUPT(r2, &(0x7f0000000040)={0xffffff72, 0x4, 0x3}, 0x10) 11:28:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00') fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 577.629387] FAULT_INJECTION: forcing a failure. [ 577.629387] name failslab, interval 1, probability 0, space 0, times 0 [ 577.673837] CPU: 0 PID: 24791 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 577.681231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.690593] Call Trace: [ 577.693249] dump_stack+0x244/0x39d [ 577.696899] ? dump_stack_print_info.cold.1+0x20/0x20 [ 577.702115] ? is_bpf_text_address+0xd3/0x170 [ 577.706640] should_fail.cold.4+0xa/0x17 [ 577.710725] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 577.715872] ? zap_class+0x640/0x640 [ 577.719600] ? save_stack+0x43/0xd0 [ 577.723238] ? kasan_kmalloc+0xc7/0xe0 [ 577.727156] ? kmem_cache_alloc_trace+0x152/0x750 [ 577.732021] ? kobject_uevent_env+0x2f3/0x101e [ 577.736611] ? kobject_uevent+0x1f/0x24 [ 577.740594] ? lo_ioctl+0x1385/0x1d60 [ 577.744416] ? find_held_lock+0x36/0x1c0 [ 577.748496] ? __lock_is_held+0xb5/0x140 [ 577.752588] ? perf_trace_sched_process_exec+0x860/0x860 [ 577.758063] __should_failslab+0x124/0x180 [ 577.762316] should_failslab+0x9/0x14 [ 577.766129] __kmalloc+0x2e0/0x760 [ 577.769687] ? kobject_uevent_env+0x2f3/0x101e [ 577.774757] ? rcu_read_lock_sched_held+0x14f/0x180 [ 577.779799] ? kobject_get_path+0xc2/0x1b0 [ 577.784044] ? kmem_cache_alloc_trace+0x353/0x750 [ 577.788907] kobject_get_path+0xc2/0x1b0 [ 577.792990] kobject_uevent_env+0x314/0x101e [ 577.797425] kobject_uevent+0x1f/0x24 [ 577.801244] lo_ioctl+0x1385/0x1d60 [ 577.804890] ? lo_rw_aio+0x1ef0/0x1ef0 [ 577.808818] blkdev_ioctl+0x98e/0x21b0 [ 577.812734] ? blkpg_ioctl+0xc10/0xc10 [ 577.816675] ? avc_ss_reset+0x190/0x190 [ 577.820666] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 577.825617] ? kasan_check_read+0x11/0x20 [ 577.829788] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 577.835078] ? rcu_softirq_qs+0x20/0x20 [ 577.839092] ? perf_trace_sched_process_exec+0x860/0x860 [ 577.844564] block_ioctl+0xee/0x130 [ 577.848221] ? blkdev_fallocate+0x400/0x400 [ 577.852555] do_vfs_ioctl+0x1de/0x1790 [ 577.856475] ? ioctl_preallocate+0x300/0x300 [ 577.860903] ? selinux_file_mprotect+0x620/0x620 [ 577.865678] ? rcu_read_lock_sched_held+0x14f/0x180 [ 577.871690] ? kmem_cache_free+0x1db/0x290 [ 577.875940] ? putname+0xf7/0x130 [ 577.879410] ? do_syscall_64+0x9a/0x820 [ 577.883446] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 577.888998] ? security_file_ioctl+0x94/0xc0 [ 577.893424] ksys_ioctl+0xa9/0xd0 [ 577.896909] __x64_sys_ioctl+0x73/0xb0 [ 577.900816] do_syscall_64+0x1b9/0x820 [ 577.904714] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 577.910121] ? syscall_return_slowpath+0x5e0/0x5e0 [ 577.915069] ? trace_hardirqs_on_caller+0x310/0x310 [ 577.920100] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 577.925128] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 577.931814] ? __switch_to_asm+0x40/0x70 [ 577.935884] ? __switch_to_asm+0x34/0x70 [ 577.939966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 577.944829] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 577.950027] RIP: 0033:0x4573d7 [ 577.953237] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 577.972149] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.979884] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 577.987164] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 577.994439] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 578.001716] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 578.009005] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x2, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000340)) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x33}, &(0x7f0000000040)) timer_delete(0x0) [ 578.085955] IPVS: ftp: loaded support on port[0] = 21 [ 578.104497] hfsplus: session requires an argument 11:28:25 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r1) [ 578.148202] hfsplus: unable to parse mount options 11:28:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000b00)={{0x0, 0x3, 0x5, 0x3, 'syz0\x00', 0x5}, 0x5, 0x10000400, 0xfc50, r0, 0x5, 0x6, 'syz0\x00', &(0x7f0000000300)=['syz1\x00', '/dev/kvm\x00', '\x00', '-\x00', '/dev/dlm-control\x00'], 0x22, [], [0x200000000000000, 0x9, 0x1000, 0x2]}) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x7f, {0x7, 0xfffffffffffffffc, 0xfff, 0x0, 0x7, 0x1}, 0x8000, 0xa8}, 0xe) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:26 executing program 5 (fault-call:0 fault-nth:21): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:26 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4028af11, &(0x7f00000002c0)) [ 578.372034] FAULT_INJECTION: forcing a failure. [ 578.372034] name failslab, interval 1, probability 0, space 0, times 0 [ 578.398645] CPU: 0 PID: 24838 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 578.406059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.415422] Call Trace: [ 578.418032] dump_stack+0x244/0x39d [ 578.421798] ? dump_stack_print_info.cold.1+0x20/0x20 [ 578.427026] ? lock_downgrade+0x900/0x900 [ 578.431205] should_fail.cold.4+0xa/0x17 [ 578.435286] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 578.440399] ? rcu_softirq_qs+0x20/0x20 [ 578.444380] ? unwind_dump+0x190/0x190 [ 578.448293] ? is_bpf_text_address+0xd3/0x170 [ 578.452799] ? zap_class+0x640/0x640 [ 578.456523] ? __kernel_text_address+0xd/0x40 [ 578.461041] ? unwind_get_return_address+0x61/0xa0 [ 578.461063] ? find_held_lock+0x36/0x1c0 [ 578.461099] ? __lock_is_held+0xb5/0x140 [ 578.461142] ? kobject_uevent+0x1f/0x24 [ 578.461158] ? perf_trace_sched_process_exec+0x860/0x860 [ 578.461188] ? do_vfs_ioctl+0x1de/0x1790 [ 578.461204] ? ksys_ioctl+0xa9/0xd0 [ 578.470219] ? __x64_sys_ioctl+0x73/0xb0 [ 578.470235] ? do_syscall_64+0x1b9/0x820 [ 578.470259] __should_failslab+0x124/0x180 [ 578.470279] should_failslab+0x9/0x14 [ 578.470295] kmem_cache_alloc+0x2be/0x730 [ 578.470321] skb_clone+0x1bb/0x500 [ 578.470338] ? skb_split+0x11e0/0x11e0 [ 578.470353] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.470368] ? netlink_trim+0x1b4/0x380 [ 578.470384] ? netlink_skb_destructor+0x210/0x210 [ 578.470413] netlink_broadcast_filtered+0x110f/0x1680 [ 578.538299] ? __netlink_sendskb+0xd0/0xd0 [ 578.542573] ? kasan_check_read+0x11/0x20 [ 578.546731] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 578.552076] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.557620] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 578.563083] ? refcount_add_not_zero_checked+0x330/0x330 [ 578.568540] ? netlink_has_listeners+0x2cb/0x4a0 [ 578.573303] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 578.578334] netlink_broadcast+0x3a/0x50 [ 578.582408] kobject_uevent_env+0xa83/0x101e [ 578.586861] kobject_uevent+0x1f/0x24 [ 578.590667] lo_ioctl+0x1385/0x1d60 [ 578.594305] ? lo_rw_aio+0x1ef0/0x1ef0 [ 578.598202] blkdev_ioctl+0x98e/0x21b0 [ 578.602112] ? blkpg_ioctl+0xc10/0xc10 [ 578.606039] ? avc_ss_reset+0x190/0x190 [ 578.610043] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 578.614976] ? kasan_check_read+0x11/0x20 [ 578.619126] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 578.624407] ? rcu_softirq_qs+0x20/0x20 [ 578.628428] ? perf_trace_sched_process_exec+0x860/0x860 [ 578.633910] block_ioctl+0xee/0x130 [ 578.637543] ? blkdev_fallocate+0x400/0x400 [ 578.641871] do_vfs_ioctl+0x1de/0x1790 [ 578.645809] ? ioctl_preallocate+0x300/0x300 [ 578.650232] ? selinux_file_mprotect+0x620/0x620 [ 578.655002] ? rcu_read_lock_sched_held+0x14f/0x180 [ 578.660033] ? kmem_cache_free+0x1db/0x290 [ 578.664279] ? putname+0xf7/0x130 [ 578.667740] ? do_syscall_64+0x9a/0x820 [ 578.671750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 578.677302] ? security_file_ioctl+0x94/0xc0 [ 578.681726] ksys_ioctl+0xa9/0xd0 [ 578.685204] __x64_sys_ioctl+0x73/0xb0 [ 578.689100] do_syscall_64+0x1b9/0x820 [ 578.692992] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 578.698366] ? syscall_return_slowpath+0x5e0/0x5e0 [ 578.703319] ? trace_hardirqs_on_caller+0x310/0x310 [ 578.708348] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 578.713371] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 578.720044] ? __switch_to_asm+0x40/0x70 [ 578.724109] ? __switch_to_asm+0x34/0x70 [ 578.728186] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 578.733043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 578.738236] RIP: 0033:0x4573d7 [ 578.741436] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.760339] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.768049] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 578.775779] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 578.783072] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 578.790344] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 578.797615] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 578.811559] hfsplus: session requires an argument [ 578.816438] hfsplus: unable to parse mount options [ 578.839345] IPVS: ftp: loaded support on port[0] = 21 11:28:26 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) 11:28:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x2, 0x842) setsockopt$inet_buf(r0, 0x0, 0x2b, &(0x7f00000012c0)="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", 0x1000) r1 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0xc, r1) ptrace$cont(0x20, r1, 0x0, 0x0) wait4(r1, 0x0, 0x2000000a, &(0x7f0000000a40)) r2 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000940)=ANY=[@ANYBLOB="3507a16438741cfb1553edb3af66d18114e48ac64dc39d2c60f9300fee47f720a9115c05b9b6a52dbac0077b15f3460e64c135a616ffede63a9638e0ea55862953f10eed3097dad5d3801ade2e73c4c4a93aa66a46820d9fc37e7e1fe46669b0704e145ce1f18858fcdaa0829552bfaa67d46e99e9b2b660082f"], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) fchmodat(r0, &(0x7f0000000340)='./file0\x00', 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f000000f000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x4, 0x4, 0x8eb, 0x0, 0x0}, 0x2c) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) 11:28:26 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='wchan\x00') stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) write$FUSE_ATTR(r1, &(0x7f0000000340)={0x78, 0xffffffffffffffda, 0x7, {0x692, 0x80000001, 0x0, {0x2, 0x1, 0x3, 0xff, 0x4, 0x124, 0x9, 0x0, 0x27d4000000000, 0x3, 0x3ff, r2, r3, 0x1, 0x3}}}, 0x78) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x44000, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)={0x7, 0xe, 0x4, 0x4000, {0x77359400}, {0x2, 0xc, 0x2, 0x10, 0x40, 0x0, "cad19f8c"}, 0x81, 0x1, @fd=r3, 0x4}) 11:28:26 executing program 5 (fault-call:0 fault-nth:22): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:26 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x3500000000000000) 11:28:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) eventfd(0x0) 11:28:26 executing program 1: syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x18, &(0x7f0000000580)=ANY=[]) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000880)=""/207, 0xcf, 0x12100, &(0x7f0000000240)={0x2, 0x4e22}, 0x10) sendto$unix(r0, &(0x7f00000003c0), 0x0, 0x40881, &(0x7f0000000600)=@abs={0x1}, 0x6e) fchdir(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={0x0, r0, 0xf, 0x1}, 0x2) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xff54}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000380)=@known='trusted.overlay.nlink\x00', &(0x7f0000000700)=""/215, 0xd7) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f00000006c0), 0x4) stat(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) syz_extract_tcp_res(&(0x7f0000000140), 0x5, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r2, 0x0, 0x5, 0x0, 0x1}) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000680)=0x1, 0x4) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000480)) accept$inet(r0, 0x0, &(0x7f0000000840)) 11:28:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x20000000000, 0x8, 0x14}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(0xffffffffffffffff) [ 579.238673] FAULT_INJECTION: forcing a failure. [ 579.238673] name failslab, interval 1, probability 0, space 0, times 0 [ 579.267563] CPU: 1 PID: 24871 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 579.274948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.274956] Call Trace: [ 579.274982] dump_stack+0x244/0x39d [ 579.275007] ? dump_stack_print_info.cold.1+0x20/0x20 [ 579.295760] should_fail.cold.4+0xa/0x17 [ 579.299838] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 579.304950] ? __save_stack_trace+0x8d/0xf0 [ 579.309306] ? zap_class+0x640/0x640 [ 579.313045] ? save_stack+0xa9/0xd0 [ 579.316682] ? save_stack+0x43/0xd0 [ 579.320337] ? find_held_lock+0x36/0x1c0 [ 579.324418] ? __lock_is_held+0xb5/0x140 [ 579.328499] ? zap_class+0x640/0x640 [ 579.332227] ? perf_trace_sched_process_exec+0x860/0x860 [ 579.337701] ? check_preemption_disabled+0x48/0x280 [ 579.342736] __should_failslab+0x124/0x180 [ 579.346991] should_failslab+0x9/0x14 [ 579.350818] kmem_cache_alloc_node_trace+0x270/0x740 [ 579.355942] __kmalloc_node_track_caller+0x3c/0x70 [ 579.360885] __kmalloc_reserve.isra.40+0x41/0xe0 [ 579.365685] __alloc_skb+0x155/0x770 [ 579.369410] ? netdev_alloc_frag+0x1f0/0x1f0 [ 579.373827] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 579.378769] ? kasan_check_read+0x11/0x20 [ 579.382939] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 579.388218] ? rcu_softirq_qs+0x20/0x20 [ 579.392213] ? netlink_has_listeners+0x2cb/0x4a0 [ 579.396978] ? netlink_tap_init_net+0x3d0/0x3d0 [ 579.401664] alloc_uevent_skb+0x84/0x1da [ 579.405754] kobject_uevent_env+0xa52/0x101e [ 579.410187] kobject_uevent+0x1f/0x24 [ 579.414001] lo_ioctl+0x1385/0x1d60 [ 579.417646] ? lo_rw_aio+0x1ef0/0x1ef0 [ 579.421544] blkdev_ioctl+0x98e/0x21b0 [ 579.425448] ? blkpg_ioctl+0xc10/0xc10 [ 579.429350] ? avc_ss_reset+0x190/0x190 [ 579.433337] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 579.438296] ? kasan_check_read+0x11/0x20 [ 579.442469] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 579.447757] ? rcu_softirq_qs+0x20/0x20 [ 579.451768] ? perf_trace_sched_process_exec+0x860/0x860 [ 579.457242] block_ioctl+0xee/0x130 [ 579.460885] ? blkdev_fallocate+0x400/0x400 [ 579.465218] do_vfs_ioctl+0x1de/0x1790 [ 579.469124] ? ioctl_preallocate+0x300/0x300 [ 579.473541] ? selinux_file_mprotect+0x620/0x620 [ 579.478346] ? rcu_read_lock_sched_held+0x14f/0x180 [ 579.483377] ? kmem_cache_free+0x1db/0x290 [ 579.487635] ? putname+0xf7/0x130 [ 579.491126] ? do_syscall_64+0x9a/0x820 [ 579.495116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.500678] ? security_file_ioctl+0x94/0xc0 [ 579.505095] ksys_ioctl+0xa9/0xd0 [ 579.508561] __x64_sys_ioctl+0x73/0xb0 [ 579.512461] do_syscall_64+0x1b9/0x820 [ 579.516355] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 579.521760] ? syscall_return_slowpath+0x5e0/0x5e0 [ 579.526725] ? trace_hardirqs_on_caller+0x310/0x310 [ 579.531765] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 579.536850] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 579.543531] ? __switch_to_asm+0x40/0x70 [ 579.547614] ? __switch_to_asm+0x34/0x70 [ 579.551689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 579.556549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 579.561782] RIP: 0033:0x4573d7 [ 579.564986] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 579.583905] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.591618] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 00000000004573d7 [ 579.598892] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 579.606167] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 579.613451] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 579.620725] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 579.703919] hfsplus: session requires an argument [ 579.745639] hfsplus: unable to parse mount options 11:28:27 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'bcsh0\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000340)="cfe6c5ec7202fdd637c4d7c7c1ee5b11904c73a8629704531915d3dc6daa6195ecab20f1926fec3fd8fa8764a7fdb717ffdb3de2bab097f64f03a943adde95e0de54514969e6e65d4e5ad49e2357", &(0x7f00000001c0)='`', 0x4}, 0x20) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) accept4$inet6(r2, 0x0, &(0x7f00000000c0), 0x80800) close(r0) r3 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x800, 0x200800) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000200)) 11:28:27 executing program 5 (fault-call:0 fault-nth:23): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) semop(0x0, &(0x7f0000000000)=[{0x7}, {0x0, 0xf45}], 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getgroups(0x6, &(0x7f0000000140)=[0xee00, 0xee01, 0x0, 0x0, 0xee00, 0xee01]) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r8, 0x500) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000180)=0x8) select(0x40, &(0x7f0000000300)={0x40, 0x6cec, 0x3, 0x1, 0x0, 0xa44, 0xffffffff00000001, 0xbb}, &(0x7f0000000340)={0x6, 0x0, 0xffffffff, 0x1, 0xffffffff00000000, 0x1ff, 0x7, 0x9}, &(0x7f0000000380)={0x10001, 0x2, 0xffff, 0x200, 0x80, 0x200, 0x8, 0x456}, &(0x7f00000003c0)={0x0, 0x2710}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 579.937601] FAULT_INJECTION: forcing a failure. [ 579.937601] name failslab, interval 1, probability 0, space 0, times 0 [ 579.956522] CPU: 0 PID: 24887 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 579.963935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.973299] Call Trace: [ 579.973329] dump_stack+0x244/0x39d [ 579.973355] ? dump_stack_print_info.cold.1+0x20/0x20 [ 579.973373] ? lo_ioctl+0xe6/0x1d60 [ 579.973405] should_fail.cold.4+0xa/0x17 [ 579.973442] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 579.973461] ? blkpg_ioctl+0xc10/0xc10 [ 579.973478] ? avc_ss_reset+0x190/0x190 [ 579.973500] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 579.979706] ? kasan_check_read+0x11/0x20 [ 579.979722] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 579.979770] ? find_held_lock+0x36/0x1c0 [ 579.979809] ? perf_trace_sched_process_exec+0x860/0x860 [ 579.979827] ? block_ioctl+0xee/0x130 [ 579.992685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 579.992707] __should_failslab+0x124/0x180 [ 579.992727] should_failslab+0x9/0x14 [ 579.992742] kmem_cache_alloc+0x2be/0x730 [ 579.992789] ? selinux_file_mprotect+0x620/0x620 [ 580.001778] getname_flags+0xd0/0x590 [ 580.001800] do_mkdirat+0xc5/0x310 [ 580.001819] ? __ia32_sys_mknod+0xb0/0xb0 [ 580.001837] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.010767] ? trace_hardirqs_off_caller+0x310/0x310 [ 580.010785] ? ksys_ioctl+0x81/0xd0 [ 580.010805] __x64_sys_mkdir+0x5c/0x80 [ 580.010840] do_syscall_64+0x1b9/0x820 [ 580.010854] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 580.010872] ? syscall_return_slowpath+0x5e0/0x5e0 [ 580.010891] ? trace_hardirqs_on_caller+0x310/0x310 [ 580.020309] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 580.020329] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 580.020345] ? __switch_to_asm+0x40/0x70 [ 580.020358] ? __switch_to_asm+0x34/0x70 [ 580.020380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.020403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.020419] RIP: 0033:0x456987 [ 580.029913] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 580.029923] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 580.029939] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 0000000000456987 [ 580.029949] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 580.029959] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a 11:28:28 executing program 3: r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x3500000000000000) [ 580.029968] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 580.029978] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 580.149011] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 580.174105] FAT-fs (loop1): Filesystem has been set read-only 11:28:28 executing program 5 (fault-call:0 fault-nth:24): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 580.310918] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) [ 580.342884] FAULT_INJECTION: forcing a failure. [ 580.342884] name failslab, interval 1, probability 0, space 0, times 0 [ 580.379763] CPU: 0 PID: 24901 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 580.387147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.387174] Call Trace: [ 580.387217] dump_stack+0x244/0x39d [ 580.387244] ? dump_stack_print_info.cold.1+0x20/0x20 [ 580.387269] ? print_usage_bug+0xc0/0xc0 [ 580.412083] ? find_held_lock+0x36/0x1c0 [ 580.416160] should_fail.cold.4+0xa/0x17 [ 580.420239] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 580.425355] ? __lock_acquire+0x62f/0x4c20 [ 580.425380] ? mark_held_locks+0x130/0x130 [ 580.425398] ? print_usage_bug+0xc0/0xc0 [ 580.437977] ? zap_class+0x640/0x640 [ 580.441731] ? print_usage_bug+0xc0/0xc0 [ 580.445833] ? lock_unpin_lock+0x4a0/0x4a0 [ 580.450102] ? __lock_is_held+0xb5/0x140 [ 580.454180] ? zap_class+0x640/0x640 [ 580.457920] ? perf_trace_sched_process_exec+0x860/0x860 [ 580.463384] ? check_preemption_disabled+0x48/0x280 [ 580.468424] __should_failslab+0x124/0x180 [ 580.472675] should_failslab+0x9/0x14 [ 580.476488] kmem_cache_alloc+0x2be/0x730 [ 580.480794] ? ratelimit_state_init+0xb0/0xb0 [ 580.485312] ext4_alloc_inode+0xc7/0x880 [ 580.489392] ? ratelimit_state_init+0xb0/0xb0 [ 580.493945] ? __lock_acquire+0x62f/0x4c20 [ 580.498236] ? perf_trace_sched_process_exec+0x860/0x860 [ 580.503696] ? __lock_is_held+0xb5/0x140 [ 580.507797] ? print_usage_bug+0xc0/0xc0 [ 580.511877] ? __lock_acquire+0x62f/0x4c20 [ 580.516128] ? mark_held_locks+0x130/0x130 [ 580.520393] ? zap_class+0x640/0x640 [ 580.524161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.529720] ? ratelimit_state_init+0xb0/0xb0 [ 580.534257] alloc_inode+0x63/0x190 [ 580.537942] new_inode_pseudo+0x71/0x1a0 [ 580.542018] ? prune_icache_sb+0x1c0/0x1c0 [ 580.546281] new_inode+0x1c/0x40 [ 580.549741] __ext4_new_inode+0x4cd/0x65a0 [ 580.554052] ? mark_held_locks+0x130/0x130 [ 580.558322] ? ext4_free_inode+0x1a10/0x1a10 [ 580.562765] ? find_held_lock+0x36/0x1c0 [ 580.563460] IPVS: ftp: loaded support on port[0] = 21 [ 580.566868] ? find_held_lock+0x36/0x1c0 [ 580.566901] ? zap_class+0x640/0x640 [ 580.566924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.566944] ? check_preemption_disabled+0x48/0x280 [ 580.566969] ? find_held_lock+0x36/0x1c0 [ 580.566995] ? lock_downgrade+0x900/0x900 [ 580.598809] ? check_preemption_disabled+0x48/0x280 [ 580.603844] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 580.608797] ? kasan_check_read+0x11/0x20 [ 580.612966] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 580.618251] ? rcu_softirq_qs+0x20/0x20 [ 580.622245] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.627798] ? avc_has_perm+0x55f/0x7e0 [ 580.631830] ? avc_has_perm_noaudit+0x630/0x630 [ 580.636529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.642102] ? __dquot_initialize+0x629/0xdd0 [ 580.646618] ? dquot_get_next_dqblk+0x180/0x180 [ 580.651355] ext4_mkdir+0x2e1/0xe60 [ 580.655011] ? ext4_init_dot_dotdot+0x510/0x510 [ 580.659702] ? selinux_inode_mkdir+0x22/0x30 [ 580.664176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 580.669824] ? security_inode_mkdir+0xe8/0x120 [ 580.674427] vfs_mkdir+0x42e/0x6b0 [ 580.677977] do_mkdirat+0x27a/0x310 [ 580.681620] ? __ia32_sys_mknod+0xb0/0xb0 [ 580.685787] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.691180] ? trace_hardirqs_off_caller+0x310/0x310 [ 580.696293] ? ksys_ioctl+0x81/0xd0 [ 580.699948] __x64_sys_mkdir+0x5c/0x80 [ 580.703848] do_syscall_64+0x1b9/0x820 [ 580.707788] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 580.713161] ? syscall_return_slowpath+0x5e0/0x5e0 [ 580.718118] ? trace_hardirqs_on_caller+0x310/0x310 [ 580.723141] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 580.728174] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 580.734852] ? __switch_to_asm+0x40/0x70 [ 580.738920] ? __switch_to_asm+0x34/0x70 [ 580.742994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 580.747865] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 580.753063] RIP: 0033:0x456987 [ 580.756264] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:28:28 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000980)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() rt_sigprocmask(0x0, &(0x7f0000000300)={0x7}, &(0x7f0000000340), 0x8) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:28 executing program 1: [ 580.775175] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 580.782905] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 0000000000456987 [ 580.790180] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 580.790204] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 580.790214] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 580.790223] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)="00ac730000000000ec973f820f7c4000", 0x4) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000200)={0x99, {{0x2, 0x4e21, @remote}}}, 0x88) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:28 executing program 1: 11:28:28 executing program 5 (fault-call:0 fault-nth:25): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000040)) 11:28:29 executing program 3: 11:28:29 executing program 1: 11:28:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:29 executing program 3: 11:28:29 executing program 1: 11:28:29 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40042) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x80000000, 0x52c2}, {0x9, 0x9}]}, 0x14, 0x3) close(r1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 581.675328] FAULT_INJECTION: forcing a failure. [ 581.675328] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.687213] CPU: 1 PID: 24926 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 581.694581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 581.703934] Call Trace: [ 581.706549] dump_stack+0x244/0x39d [ 581.710195] ? dump_stack_print_info.cold.1+0x20/0x20 [ 581.715417] should_fail.cold.4+0xa/0x17 [ 581.719525] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.724661] ? kobject_uevent_env+0xf76/0x101e [ 581.729262] ? wait_for_completion+0x8a0/0x8a0 [ 581.733867] ? mark_held_locks+0x130/0x130 [ 581.738111] ? kobject_uevent_env+0x100d/0x101e [ 581.742846] ? mutex_unlock+0xd/0x10 [ 581.746574] ? lo_ioctl+0xe6/0x1d60 [ 581.750289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 581.755853] ? should_fail+0x22d/0xd01 [ 581.759770] ? blkdev_ioctl+0x1f5/0x21b0 [ 581.763861] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 581.768984] ? blkpg_ioctl+0xc10/0xc10 [ 581.773082] __alloc_pages_nodemask+0x366/0xea0 [ 581.777767] ? kasan_check_read+0x11/0x20 [ 581.781928] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 581.787216] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 581.792252] ? find_held_lock+0x36/0x1c0 [ 581.796374] ? trace_hardirqs_off+0xb8/0x310 [ 581.800808] cache_grow_begin+0xa5/0x8c0 [ 581.804885] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 581.810436] ? check_preemption_disabled+0x48/0x280 [ 581.815482] kmem_cache_alloc+0x66b/0x730 [ 581.819641] ? selinux_file_mprotect+0x620/0x620 [ 581.824416] getname_flags+0xd0/0x590 [ 581.828233] do_mkdirat+0xc5/0x310 [ 581.831795] ? __ia32_sys_mknod+0xb0/0xb0 [ 581.835951] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.841327] ? trace_hardirqs_off_caller+0x310/0x310 [ 581.846455] ? ksys_ioctl+0x81/0xd0 [ 581.850101] __x64_sys_mkdir+0x5c/0x80 [ 581.854005] do_syscall_64+0x1b9/0x820 [ 581.857900] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 581.863299] ? syscall_return_slowpath+0x5e0/0x5e0 [ 581.868239] ? trace_hardirqs_on_caller+0x310/0x310 [ 581.873304] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 581.878355] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 581.885022] ? __switch_to_asm+0x40/0x70 [ 581.889092] ? __switch_to_asm+0x34/0x70 [ 581.893193] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 581.898050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 581.903241] RIP: 0033:0x456987 [ 581.906442] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 581.925367] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 581.933084] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 0000000000456987 [ 581.940390] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 581.947661] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 581.954935] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 581.962210] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 582.007133] hfsplus: session requires an argument [ 582.012240] hfsplus: unable to parse mount options [ 582.837284] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.858256] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.865646] device bridge_slave_0 entered promiscuous mode [ 582.921882] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.948276] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.955635] device bridge_slave_1 entered promiscuous mode [ 583.057175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 583.115047] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 583.310040] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 583.357420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 583.403831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 583.410949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 583.457194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 583.464366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 583.611594] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 583.619227] team0: Port device team_slave_0 added [ 583.667328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 583.674908] team0: Port device team_slave_1 added [ 583.716833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 583.763380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.812338] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 583.819814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 583.820490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 583.876128] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 583.883518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 583.900378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.989058] device bridge_slave_1 left promiscuous mode [ 583.994582] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.050265] device bridge_slave_0 left promiscuous mode [ 584.055766] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.135029] team0 (unregistering): Port device team_slave_1 removed [ 584.147485] team0 (unregistering): Port device team_slave_0 removed [ 584.162578] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 584.214896] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 584.318446] bond0 (unregistering): Released all slaves [ 585.167427] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.173933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.180728] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.187148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.195207] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 585.398263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 587.475884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.641626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 587.803774] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 587.810044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 587.819506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.986555] 8021q: adding VLAN 0 to HW filter on device team0 11:28:36 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:36 executing program 3: 11:28:36 executing program 1: 11:28:36 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'vlan0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0xfffffffffffffffd, 0x40, 0x8, 0x1000, 0x5, 0x9}, 0x2e7}, 0xa) close(r0) 11:28:36 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac730800000000000000820f7c6a2d", 0xc201}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000000), 0x4) close(r0) 11:28:36 executing program 5 (fault-call:0 fault-nth:26): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:37 executing program 3: 11:28:37 executing program 1: [ 589.181710] FAULT_INJECTION: forcing a failure. [ 589.181710] name failslab, interval 1, probability 0, space 0, times 0 [ 589.209187] CPU: 1 PID: 25200 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 589.216592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.225950] Call Trace: [ 589.228568] dump_stack+0x244/0x39d [ 589.232229] ? dump_stack_print_info.cold.1+0x20/0x20 [ 589.237444] ? print_usage_bug+0xc0/0xc0 [ 589.241535] should_fail.cold.4+0xa/0x17 [ 589.245643] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.250776] ? avc_has_extended_perms+0x15a0/0x15a0 [ 589.255819] ? zap_class+0x640/0x640 [ 589.259555] ? mark_held_locks+0x130/0x130 [ 589.263821] ? path_parentat.isra.41+0x20/0x160 [ 589.268533] ? find_held_lock+0x36/0x1c0 [ 589.272608] ? __lock_is_held+0xb5/0x140 [ 589.276693] ? perf_trace_sched_process_exec+0x860/0x860 [ 589.282164] __should_failslab+0x124/0x180 [ 589.286416] should_failslab+0x9/0x14 [ 589.290228] kmem_cache_alloc+0x2be/0x730 [ 589.294405] __d_alloc+0xc8/0xb90 [ 589.297892] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 589.302930] ? d_alloc_parallel+0x1f40/0x1f40 [ 589.307453] ? d_lookup+0x255/0x300 [ 589.311093] ? d_lookup+0x255/0x300 [ 589.314731] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 589.319355] ? lookup_dcache+0x22/0x140 [ 589.323344] ? trace_hardirqs_off_caller+0x310/0x310 [ 589.328491] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 589.333530] d_alloc+0x96/0x380 [ 589.336822] ? __d_lookup+0x9e0/0x9e0 [ 589.340667] ? __d_alloc+0xb90/0xb90 [ 589.344418] __lookup_hash+0xd9/0x190 [ 589.348237] filename_create+0x1e5/0x5b0 [ 589.352334] ? kern_path_mountpoint+0x40/0x40 [ 589.356973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.362532] ? getname_flags+0x26e/0x590 [ 589.366604] do_mkdirat+0xda/0x310 [ 589.366626] ? __ia32_sys_mknod+0xb0/0xb0 [ 589.366642] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.366679] ? trace_hardirqs_off_caller+0x310/0x310 [ 589.366694] ? ksys_ioctl+0x81/0xd0 [ 589.366713] __x64_sys_mkdir+0x5c/0x80 [ 589.366731] do_syscall_64+0x1b9/0x820 [ 589.366745] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 589.366797] ? syscall_return_slowpath+0x5e0/0x5e0 [ 589.379853] ? trace_hardirqs_on_caller+0x310/0x310 [ 589.379872] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 589.379891] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 589.379906] ? __switch_to_asm+0x40/0x70 [ 589.379918] ? __switch_to_asm+0x34/0x70 [ 589.379938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.436402] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.441593] RIP: 0033:0x456987 [ 589.444799] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 589.463732] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 589.471472] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 0000000000456987 11:28:37 executing program 1: 11:28:37 executing program 3: 11:28:37 executing program 3: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0xffffffffffffffff) r0 = socket(0xa, 0x3, 0x200000000008) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(pcbc(anubis),rmd128)\x00'}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) memfd_create(&(0x7f0000000380)='*^-{lo\x00', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000500)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00', 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'syz0\x00', &(0x7f0000000180), 0x0, [], [0x80000001, 0x0, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x84000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000009c0)={@loopback, 0x0, 0x0, 0xff, 0xc, 0x734a1d93, 0x1000}, 0x20) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 11:28:37 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000100)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22}, 0x10) write(r1, &(0x7f0000000080), 0xfffffd92) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) [ 589.478768] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 589.486064] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 589.486074] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 589.486083] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 589.531101] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.539718] bridge0: port 1(bridge_slave_0) entered disabled state 11:28:37 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(r2, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:37 executing program 5 (fault-call:0 fault-nth:27): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) [ 589.589637] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 589.709648] FAULT_INJECTION: forcing a failure. [ 589.709648] name failslab, interval 1, probability 0, space 0, times 0 [ 589.749982] CPU: 1 PID: 25221 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 589.757360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.766732] Call Trace: [ 589.769344] dump_stack+0x244/0x39d [ 589.773212] ? dump_stack_print_info.cold.1+0x20/0x20 [ 589.778429] should_fail.cold.4+0xa/0x17 [ 589.782517] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.787632] ? __lock_acquire+0x62f/0x4c20 [ 589.791891] ? mark_held_locks+0x130/0x130 [ 589.796153] ? print_usage_bug+0xc0/0xc0 [ 589.800239] ? zap_class+0x640/0x640 [ 589.803990] ? print_usage_bug+0xc0/0xc0 [ 589.808094] ? lock_unpin_lock+0x4a0/0x4a0 [ 589.812343] ? __lock_is_held+0xb5/0x140 [ 589.816434] ? zap_class+0x640/0x640 [ 589.820166] ? perf_trace_sched_process_exec+0x860/0x860 [ 589.825661] ? check_preemption_disabled+0x48/0x280 [ 589.830699] __should_failslab+0x124/0x180 [ 589.834949] should_failslab+0x9/0x14 [ 589.838800] kmem_cache_alloc+0x2be/0x730 [ 589.842984] ? ratelimit_state_init+0xb0/0xb0 [ 589.847496] ext4_alloc_inode+0xc7/0x880 [ 589.851591] ? ratelimit_state_init+0xb0/0xb0 [ 589.856108] ? __lock_acquire+0x62f/0x4c20 [ 589.860357] ? perf_trace_sched_process_exec+0x860/0x860 [ 589.865813] ? __lock_is_held+0xb5/0x140 [ 589.869948] ? print_usage_bug+0xc0/0xc0 [ 589.874025] ? __lock_acquire+0x62f/0x4c20 [ 589.878280] ? mark_held_locks+0x130/0x130 [ 589.882529] ? zap_class+0x640/0x640 [ 589.886284] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.891830] ? ratelimit_state_init+0xb0/0xb0 [ 589.891851] alloc_inode+0x63/0x190 [ 589.891868] new_inode_pseudo+0x71/0x1a0 [ 589.891884] ? prune_icache_sb+0x1c0/0x1c0 [ 589.891909] new_inode+0x1c/0x40 [ 589.891928] __ext4_new_inode+0x4cd/0x65a0 [ 589.891958] ? mark_held_locks+0x130/0x130 [ 589.891980] ? ext4_free_inode+0x1a10/0x1a10 [ 589.892003] ? find_held_lock+0x36/0x1c0 [ 589.928708] ? find_held_lock+0x36/0x1c0 [ 589.932809] ? zap_class+0x640/0x640 [ 589.936560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.936580] ? check_preemption_disabled+0x48/0x280 [ 589.936606] ? find_held_lock+0x36/0x1c0 [ 589.936633] ? lock_downgrade+0x900/0x900 [ 589.955381] ? check_preemption_disabled+0x48/0x280 [ 589.960408] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 589.965346] ? kasan_check_read+0x11/0x20 [ 589.969502] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 589.974816] ? rcu_softirq_qs+0x20/0x20 [ 589.978837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.984381] ? avc_has_perm+0x55f/0x7e0 [ 589.988369] ? avc_has_perm_noaudit+0x630/0x630 [ 589.993068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.998615] ? __dquot_initialize+0x629/0xdd0 [ 590.003142] ? dquot_get_next_dqblk+0x180/0x180 [ 590.007840] ext4_mkdir+0x2e1/0xe60 [ 590.011523] ? ext4_init_dot_dotdot+0x510/0x510 [ 590.016207] ? selinux_inode_mkdir+0x22/0x30 [ 590.020625] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.026195] ? security_inode_mkdir+0xe8/0x120 [ 590.030829] vfs_mkdir+0x42e/0x6b0 [ 590.034380] do_mkdirat+0x27a/0x310 [ 590.038023] ? __ia32_sys_mknod+0xb0/0xb0 [ 590.042202] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.047576] ? trace_hardirqs_off_caller+0x310/0x310 [ 590.052688] ? ksys_ioctl+0x81/0xd0 [ 590.056333] __x64_sys_mkdir+0x5c/0x80 [ 590.060247] do_syscall_64+0x1b9/0x820 [ 590.064153] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 590.069528] ? syscall_return_slowpath+0x5e0/0x5e0 [ 590.074468] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.079335] ? trace_hardirqs_on_caller+0x310/0x310 [ 590.084362] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 590.089395] ? prepare_exit_to_usermode+0x291/0x3b0 [ 590.094469] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.099325] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.104518] RIP: 0033:0x456987 [ 590.107724] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.126716] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 590.134442] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 0000000000456987 [ 590.141734] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 590.149027] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 590.156313] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 590.163610] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 11:28:38 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f00000009c0)) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={r0, r1+10000000}, 0xfffffffffffffeb4) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r2 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) sched_setattr(r2, &(0x7f0000000340)={0x30, 0x3, 0x1, 0x42, 0x8001, 0x514, 0x20, 0x8}, 0x0) rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f0000000100)) ptrace(0x10, r2) ptrace$cont(0x20, r2, 0x0, 0x0) wait4(r2, 0x0, 0x2000000a, &(0x7f0000000a40)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x0, 0x0) r3 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r3, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) [ 590.357458] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 590.720858] device bridge_slave_1 left promiscuous mode [ 590.734328] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.820003] device bridge_slave_0 left promiscuous mode [ 590.825688] bridge0: port 1(bridge_slave_0) entered disabled state 11:28:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200201, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000140)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"812d40000000020000000001001a00", 0x20}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) 11:28:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x0, 0x8}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000200)="037e888d04020e7a48afdaa7fb5e6a3757854d298f6eee44a18de6d6cff95d1ac695d8ce4d505af3d2d5b88df6210f45380dbba53bdd034bb7989cb039687c842854691b2deacc8d0b17c25287ee9128b57af2e66a0972f1da8c4f6dd5b85c2b81b7ee2ad988b1c0c2edb045b12bb69818d957ed8861fc45d0369714fc0379ca9c160f2cd26db2469131e82a71f20c1d51cf0cf60a185b0ee136c0543c0896f4d9ed4d9d1ec65639688eeacf84b6cd646bd241a285a0aa98575907546c1d4e23d1c4bbb6d405820145feffe1d120fe459c8250b25a3c0852b4a169eab256a2bdb8e4c9997863678a586d8bdc69badf52", &(0x7f0000000040)="e3eb58a5f8fb53d3d0981daa60274c9097b3b0ded1620d4c89eed74dccd98075ff3d9c26f660bd4ee232272ccab95dffe0d7521f61b30fcce3f82b977e7a5c331f5dc85e5208cf0a53cf2fa3b3e7c80df5cd3e75fabb9212b8d5ff0eb2270aba1c18c5fef7ffe2e6a818746193268bb1b7bd32cb614dec1c9be07d1bf430d5d103feb5f65b2257d95c65a2be258558b15174ed08fafce8367351dfbe2962926613d6161b90db720fbd7bbb5bf204af1e66cba83bb38e82a0ef", 0x1}, 0x20) close(r0) 11:28:38 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080), 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)}, 0xc100) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000200000000000000e0ffffff0000000000000001048878a9a51e7de9a5a077"], 0x22) 11:28:38 executing program 5 (fault-call:0 fault-nth:28): syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x80000001}}]}) 11:28:38 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00'}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) r2 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20000) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000b00)="66c2bc98d5f494863ee99b0941adf5ff314bfb09a48037852c6f40999013781fb15e059e2b7b7e6e17c268aa5e164cded2a366e95cf0f2311e3b440eb5963731ffd572f138125ae77ccc811ec7fbf5e547d4d1f48595cade65675677832ebaabcf3ca068cc346b16566440131c5c4121a6729f86ef5050b7aef858920a92fcd53ff64a413a891d513460c70ec3c3738e19667f593c1789342ed3ea656cc11b30c865e681f1cec0b42ea3a43cb941b53faea07c85310798bd4474074cd5874b2e280e6331d588d887d4bde7e0335d91d00c6ffbeb4580753b82242a3cef1dba6a1bc8be466e7a06c0e3d8fa3e3a") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) 11:28:38 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) [ 591.023666] FAULT_INJECTION: forcing a failure. [ 591.023666] name failslab, interval 1, probability 0, space 0, times 0 [ 591.041922] CPU: 0 PID: 25253 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #121 [ 591.049308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.058666] Call Trace: [ 591.061270] dump_stack+0x244/0x39d [ 591.064918] ? dump_stack_print_info.cold.1+0x20/0x20 [ 591.070162] ? print_usage_bug+0xc0/0xc0 [ 591.074246] should_fail.cold.4+0xa/0x17 [ 591.078322] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.083443] ? avc_has_extended_perms+0x15a0/0x15a0 [ 591.088484] ? zap_class+0x640/0x640 [ 591.092214] ? mark_held_locks+0x130/0x130 [ 591.096464] ? path_parentat.isra.41+0x20/0x160 [ 591.101153] ? find_held_lock+0x36/0x1c0 [ 591.105265] ? __lock_is_held+0xb5/0x140 [ 591.109356] ? perf_trace_sched_process_exec+0x860/0x860 [ 591.114827] __should_failslab+0x124/0x180 [ 591.119180] should_failslab+0x9/0x14 [ 591.122996] kmem_cache_alloc+0x2be/0x730 [ 591.127183] __d_alloc+0xc8/0xb90 [ 591.130652] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 591.135684] ? d_alloc_parallel+0x1f40/0x1f40 [ 591.140203] ? d_lookup+0x255/0x300 [ 591.140220] ? d_lookup+0x255/0x300 [ 591.140238] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 591.140259] ? lookup_dcache+0x22/0x140 [ 591.140277] ? trace_hardirqs_off_caller+0x310/0x310 [ 591.140321] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.140341] d_alloc+0x96/0x380 [ 591.147582] ? __d_lookup+0x9e0/0x9e0 11:28:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x8) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0xfffffffffffffffa}) 11:28:39 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) r0 = getpid() ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000a00)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) wait4(r0, 0x0, 0x2000000a, &(0x7f0000000a40)) r1 = semget$private(0x0, 0x1, 0x0) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000001240)=""/122) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000600), &(0x7f0000000640)=0x4) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x6, 0x101, 0x3, 0x83b2, 0x7, 0x7, 0x6, 0x91b, 0xcec, 0x3, 0x5, 0xfffffffeffffffff}) preadv(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000f00)=""/157, 0x9d}, {&(0x7f0000001080)=""/227, 0xe3}], 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000880)=""/155) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x14) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) 11:28:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8, 0x3c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) r2 = memfd_create(&(0x7f0000000040)='%]\\\x00', 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f00000000c0)="6103d180524ffc9dd4d066287772d05260c4517b4eac7df1486fbb8a10bf", &(0x7f0000000140)=""/57}, 0x18) [ 591.147600] ? __d_alloc+0xb90/0xb90 [ 591.147628] __lookup_hash+0xd9/0x190 [ 591.147648] filename_create+0x1e5/0x5b0 [ 591.147668] ? kern_path_mountpoint+0x40/0x40 [ 591.147693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.147711] ? getname_flags+0x26e/0x590 [ 591.161342] do_mkdirat+0xda/0x310 [ 591.161363] ? __ia32_sys_mknod+0xb0/0xb0 [ 591.161378] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.161396] ? trace_hardirqs_off_caller+0x310/0x310 [ 591.161411] ? ksys_ioctl+0x81/0xd0 [ 591.161428] __x64_sys_mkdir+0x5c/0x80 [ 591.161447] do_syscall_64+0x1b9/0x820 [ 591.161465] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 591.177288] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.177307] ? trace_hardirqs_on_caller+0x310/0x310 [ 591.177325] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 591.177344] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 591.177361] ? __switch_to_asm+0x40/0x70 [ 591.185204] ? __switch_to_asm+0x34/0x70 [ 591.185226] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.185249] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.185261] RIP: 0033:0x456987 [ 591.185285] Code: 1f 40 00 b8 5a 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 cd bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad bf fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.195328] RSP: 002b:00007fb54359fa88 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 591.195344] RAX: ffffffffffffffda RBX: 00000000200001d0 RCX: 0000000000456987 [ 591.195354] RDX: 0000000000000004 RSI: 00000000000001ff RDI: 00000000200000c0 [ 591.195364] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000000a [ 591.195374] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000004 [ 591.195383] R13: 0000000000000000 R14: 00000000004d8fb0 R15: 0000000000000003 [ 591.342594] ================================================================== [ 591.350281] BUG: KASAN: use-after-free in __dev_map_entry_free+0x2ab/0x300 [ 591.357300] Read of size 8 at addr ffff8881cbb0f388 by task ksoftirqd/1/16 [ 591.364304] [ 591.364320] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 4.20.0-rc3+ #121 [ 591.364327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.364332] Call Trace: [ 591.364349] dump_stack+0x244/0x39d [ 591.364380] ? dump_stack_print_info.cold.1+0x20/0x20 [ 591.364396] ? printk+0xa7/0xcf [ 591.388537] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 591.388559] print_address_description.cold.7+0x9/0x1ff [ 591.388574] kasan_report.cold.8+0x242/0x309 [ 591.388585] ? __dev_map_entry_free+0x2ab/0x300 [ 591.388601] __asan_report_load8_noabort+0x14/0x20 [ 591.388612] __dev_map_entry_free+0x2ab/0x300 [ 591.388633] ? check_preemption_disabled+0x48/0x280 [ 591.430675] ? dev_map_delete_elem+0x120/0x120 [ 591.435258] rcu_process_callbacks+0x100a/0x1ac0 [ 591.440027] ? rcu_note_context_switch+0x2150/0x2150 [ 591.445135] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.450155] ? find_held_lock+0x36/0x1c0 [ 591.454256] ? __run_timers+0xa20/0xc70 [ 591.458249] ? _raw_spin_unlock_irq+0x27/0x80 [ 591.462765] ? _raw_spin_unlock_irq+0x27/0x80 [ 591.467283] ? lockdep_hardirqs_on+0x296/0x5b0 [ 591.471873] ? trace_hardirqs_on+0xbd/0x310 [ 591.476194] ? kasan_check_read+0x11/0x20 [ 591.480342] ? __run_timers+0xa20/0xc70 [ 591.484328] ? _raw_spin_unlock_irq+0x60/0x80 [ 591.488856] ? __run_timers+0xa4a/0xc70 [ 591.492838] ? timer_fixup_init+0x70/0x70 [ 591.496985] ? compat_start_thread+0x80/0x80 [ 591.501396] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.506939] ? _raw_spin_unlock_irq+0x60/0x80 [ 591.511441] ? finish_task_switch+0x1f4/0x910 [ 591.515934] ? finish_task_switch+0x1b4/0x910 [ 591.520433] ? __switch_to_asm+0x34/0x70 [ 591.524498] ? preempt_notifier_register+0x200/0x200 [ 591.529601] ? __switch_to_asm+0x34/0x70 [ 591.533667] ? __switch_to_asm+0x40/0x70 [ 591.537726] ? __switch_to_asm+0x34/0x70 [ 591.541795] ? __switch_to_asm+0x40/0x70 [ 591.545859] ? __switch_to_asm+0x34/0x70 [ 591.549921] ? __switch_to_asm+0x40/0x70 [ 591.553985] ? __switch_to_asm+0x40/0x70 [ 591.558050] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.563589] ? check_preemption_disabled+0x48/0x280 [ 591.568617] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.574167] ? check_preemption_disabled+0x48/0x280 [ 591.579191] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 591.584727] ? rcu_pm_notify+0xc0/0xc0 [ 591.588634] __do_softirq+0x308/0xb7e [ 591.592444] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 591.597549] ? __schedule+0x973/0x21d0 [ 591.601438] ? schedule+0x108/0x460 [ 591.605066] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 591.609847] ? trace_hardirqs_off+0xb8/0x310 [ 591.614260] ? smpboot_thread_fn+0x68b/0xa00 [ 591.618694] ? trace_hardirqs_on+0x310/0x310 [ 591.623128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 591.628668] ? check_preemption_disabled+0x48/0x280 [ 591.633681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.639235] ? takeover_tasklets+0xa90/0xa90 [ 591.643659] run_ksoftirqd+0x5e/0x100 [ 591.647459] smpboot_thread_fn+0x68b/0xa00 [ 591.651706] ? sort_range+0x30/0x30 [ 591.655344] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 591.660461] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 591.665999] ? __kthread_parkme+0xfb/0x1a0 [ 591.670236] ? sort_range+0x30/0x30 [ 591.673879] kthread+0x35a/0x440 [ 591.677247] ? kthread_stop+0x900/0x900 [ 591.681240] ret_from_fork+0x3a/0x50 [ 591.684965] [ 591.686605] Allocated by task 25258: [ 591.690336] save_stack+0x43/0xd0 [ 591.693803] kasan_kmalloc+0xc7/0xe0 [ 591.697512] kmem_cache_alloc_trace+0x152/0x750 [ 591.702177] dev_map_alloc+0x210/0x800 [ 591.706077] map_create+0x3bd/0x1110 [ 591.709795] __x64_sys_bpf+0x303/0x520 [ 591.713684] do_syscall_64+0x1b9/0x820 [ 591.717566] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.722744] [ 591.724377] Freed by task 24401: [ 591.727739] save_stack+0x43/0xd0 [ 591.731199] __kasan_slab_free+0x102/0x150 [ 591.735436] kasan_slab_free+0xe/0x10 [ 591.739235] kfree+0xcf/0x230 [ 591.742342] dev_map_free+0x514/0x690 [ 591.746140] bpf_map_free_deferred+0xd9/0x110 [ 591.750630] process_one_work+0xc90/0x1c40 [ 591.754858] worker_thread+0x17f/0x1390 [ 591.758835] kthread+0x35a/0x440 [ 591.762198] ret_from_fork+0x3a/0x50 [ 591.765900] [ 591.767523] The buggy address belongs to the object at ffff8881cbb0f280 [ 591.767523] which belongs to the cache kmalloc-512 of size 512 [ 591.780292] The buggy address is located 264 bytes inside of [ 591.780292] 512-byte region [ffff8881cbb0f280, ffff8881cbb0f480) [ 591.792164] The buggy address belongs to the page: [ 591.797110] page:ffffea00072ec3c0 count:1 mapcount:0 mapping:ffff8881da800940 index:0x0 [ 591.805248] flags: 0x2fffc0000000200(slab) [ 591.809505] raw: 02fffc0000000200 ffffea0006f75388 ffffea000719d4c8 ffff8881da800940 [ 591.817386] raw: 0000000000000000 ffff8881cbb0f000 0000000100000006 0000000000000000 [ 591.825258] page dumped because: kasan: bad access detected [ 591.830972] [ 591.832597] Memory state around the buggy address: [ 591.837522] ffff8881cbb0f280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 591.844896] ffff8881cbb0f300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 591.852251] >ffff8881cbb0f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 591.859648] ^ [ 591.863301] ffff8881cbb0f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 591.870683] ffff8881cbb0f480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 591.878037] ================================================================== [ 591.885387] Disabling lock debugging due to kernel taint [ 591.890904] Kernel panic - not syncing: panic_on_warn set ... [ 591.896803] CPU: 1 PID: 16 Comm: ksoftirqd/1 Tainted: G B 4.20.0-rc3+ #121 [ 591.905113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.909039] kobject: 'queues' (0000000071c103db): kobject_uevent_env: filter function caused the event to drop! [ 591.914461] Call Trace: [ 591.914482] dump_stack+0x244/0x39d [ 591.914499] ? dump_stack_print_info.cold.1+0x20/0x20 [ 591.914585] panic+0x2ad/0x55c [ 591.932906] kobject: 'kvm' (00000000981f6beb): kobject_uevent_env [ 591.936138] ? add_taint.cold.5+0x16/0x16 [ 591.936156] ? trace_hardirqs_on+0x9a/0x310 [ 591.936169] ? trace_hardirqs_on+0xb4/0x310 [ 591.936181] ? trace_hardirqs_on+0xb4/0x310 [ 591.936199] kasan_end_report+0x47/0x4f [ 591.939856] kobject: 'kvm' (00000000981f6beb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 591.945626] kasan_report.cold.8+0x76/0x309 [ 591.945640] ? __dev_map_entry_free+0x2ab/0x300 [ 591.945655] __asan_report_load8_noabort+0x14/0x20 [ 591.945667] __dev_map_entry_free+0x2ab/0x300 [ 591.945688] ? check_preemption_disabled+0x48/0x280 [ 591.951191] kobject: 'rx-0' (00000000203f273c): kobject_add_internal: parent: 'queues', set: 'queues' [ 591.954156] ? dev_map_delete_elem+0x120/0x120 [ 591.954185] rcu_process_callbacks+0x100a/0x1ac0 [ 591.954206] ? rcu_note_context_switch+0x2150/0x2150 11:28:39 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) mkdir(&(0x7f0000000000)='./file1\x00', 0x13a) syz_mount_image$hfsplus(&(0x7f0000000080)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x67, 0x1a1, &(0x7f0000000040), 0x0, &(0x7f0000000200)={[], [{@subj_type={'subj_type', 0x3d, 'hfsplus\x00'}}, {@obj_role={'obj_role'}}, {@permit_directio='permit_directio'}, {@obj_user={'obj_user', 0x3d, '^'}}, {@obj_user={'obj_user', 0x3d, "6d643573756d2965746830b07b2a"}}, {@smackfshat={'smackfshat', 0x3d, ':'}}]}) [ 591.966407] kobject: 'rx-0' (00000000203f273c): kobject_uevent_env [ 591.966816] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 591.976055] kobject: 'loop5' (00000000debf434d): kobject_uevent_env [ 591.980137] ? find_held_lock+0x36/0x1c0 [ 591.980154] ? __run_timers+0xa20/0xc70 [ 591.980173] ? _raw_spin_unlock_irq+0x27/0x80 [ 591.988207] kobject: 'loop5' (00000000debf434d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 591.989743] ? _raw_spin_unlock_irq+0x27/0x80 [ 591.989767] ? lockdep_hardirqs_on+0x296/0x5b0 [ 591.989790] ? trace_hardirqs_on+0xbd/0x310 11:28:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) semop(0x0, &(0x7f0000000000)=[{0x7}, {0x0, 0xf45}], 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getgroups(0x6, &(0x7f0000000140)=[0xee00, 0xee01, 0x0, 0x0, 0xee00, 0xee01]) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r8, 0x500) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000180)=0x8) select(0x40, &(0x7f0000000300)={0x40, 0x6cec, 0x3, 0x1, 0x0, 0xa44, 0xffffffff00000001, 0xbb}, &(0x7f0000000340)={0x6, 0x0, 0xffffffff, 0x1, 0xffffffff00000000, 0x1ff, 0x7, 0x9}, &(0x7f0000000380)={0x10001, 0x2, 0xffff, 0x200, 0x80, 0x200, 0x8, 0x456}, &(0x7f00000003c0)={0x0, 0x2710}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 592.018632] kobject: 'rx-0' (00000000203f273c): fill_kobj_path: path = '/devices/virtual/net/tun0/queues/rx-0' [ 592.023046] ? kasan_check_read+0x11/0x20 [ 592.023058] ? __run_timers+0xa20/0xc70 [ 592.023077] ? _raw_spin_unlock_irq+0x60/0x80 [ 592.038926] kobject: 'loop5' (00000000debf434d): kobject_uevent_env [ 592.040785] ? __run_timers+0xa4a/0xc70 [ 592.040802] ? timer_fixup_init+0x70/0x70 [ 592.040820] ? compat_start_thread+0x80/0x80 [ 592.044906] kobject: 'loop5' (00000000debf434d): fill_kobj_path: path = '/devices/virtual/block/loop5' 11:28:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd, 0x4, 0x4, 0x8}, 0x2c) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f00000000c0)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) semop(0x0, &(0x7f0000000000)=[{0x7}, {0x0, 0xf45}], 0x2) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) getgroups(0x6, &(0x7f0000000140)=[0xee00, 0xee01, 0x0, 0x0, 0xee00, 0xee01]) fchownat(r2, &(0x7f0000000080)='./file0\x00', r3, r8, 0x500) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000180)=0x8) select(0x40, &(0x7f0000000300)={0x40, 0x6cec, 0x3, 0x1, 0x0, 0xa44, 0xffffffff00000001, 0xbb}, &(0x7f0000000340)={0x6, 0x0, 0xffffffff, 0x1, 0xffffffff00000000, 0x1ff, 0x7, 0x9}, &(0x7f0000000380)={0x10001, 0x2, 0xffff, 0x200, 0x80, 0x200, 0x8, 0x456}, &(0x7f00000003c0)={0x0, 0x2710}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000000), &(0x7f00000001c0)='\v'}, 0x20) close(r0) [ 592.048853] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.048867] ? _raw_spin_unlock_irq+0x60/0x80 [ 592.048887] ? finish_task_switch+0x1f4/0x910 [ 592.065159] kobject: 'tx-0' (000000008d198f64): kobject_add_internal: parent: 'queues', set: 'queues' [ 592.067306] ? finish_task_switch+0x1b4/0x910 [ 592.067319] ? __switch_to_asm+0x34/0x70 [ 592.067338] ? preempt_notifier_register+0x200/0x200 [ 592.073737] kobject: 'kvm' (00000000981f6beb): kobject_uevent_env [ 592.076229] ? __switch_to_asm+0x34/0x70 [ 592.091118] kobject: 'loop5' (00000000debf434d): kobject_uevent_env [ 592.094487] ? __switch_to_asm+0x40/0x70 [ 592.094497] ? __switch_to_asm+0x34/0x70 [ 592.094514] ? __switch_to_asm+0x40/0x70 [ 592.117203] kobject: 'tx-0' (000000008d198f64): kobject_uevent_env [ 592.117936] ? __switch_to_asm+0x34/0x70 [ 592.117948] ? __switch_to_asm+0x40/0x70 [ 592.117958] ? __switch_to_asm+0x40/0x70 [ 592.117993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.130035] kobject: 'loop5' (00000000debf434d): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 592.132955] ? check_preemption_disabled+0x48/0x280 [ 592.132986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.133006] ? check_preemption_disabled+0x48/0x280 [ 592.138056] kobject: 'loop1' (000000007d716bf8): kobject_uevent_env [ 592.141976] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 592.141990] ? rcu_pm_notify+0xc0/0xc0 [ 592.142011] __do_softirq+0x308/0xb7e [ 592.142030] ? __irqentry_text_end+0x1f9658/0x1f9658 [ 592.142048] ? __schedule+0x973/0x21d0 [ 592.152350] kobject: 'kvm' (00000000981f6beb): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 592.155883] ? schedule+0x108/0x460 [ 592.155897] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 592.155915] ? trace_hardirqs_off+0xb8/0x310 [ 592.155947] ? smpboot_thread_fn+0x68b/0xa00 [ 592.163521] kobject: 'loop1' (000000007d716bf8): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 592.165109] ? trace_hardirqs_on+0x310/0x310 [ 592.165124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.165138] ? check_preemption_disabled+0x48/0x280 [ 592.165157] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.181239] kobject: 'tx-0' (000000008d198f64): fill_kobj_path: path = '/devices/virtual/net/tun0/queues/tx-0' [ 592.181932] ? takeover_tasklets+0xa90/0xa90 [ 592.192197] kobject: 'loop3' (00000000af139bc2): kobject_uevent_env [ 592.194078] run_ksoftirqd+0x5e/0x100 [ 592.194093] smpboot_thread_fn+0x68b/0xa00 [ 592.194107] ? sort_range+0x30/0x30 [ 592.194124] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 592.203076] kobject: 'loop3' (00000000af139bc2): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 592.204496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.204512] ? __kthread_parkme+0xfb/0x1a0 [ 592.204526] ? sort_range+0x30/0x30 [ 592.204545] kthread+0x35a/0x440 [ 592.218642] kobject: 'tun1' (0000000075e02274): kobject_add_internal: parent: 'net', set: 'devices' [ 592.227608] ? kthread_stop+0x900/0x900 [ 592.227621] ret_from_fork+0x3a/0x50 [ 592.233749] Kernel Offset: disabled [ 592.412741] Rebooting in 86400 seconds..